Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/8f8c55-04ae-434c-ac42-42b4c88d74ca/1/71JfWhzpwqekVmPILYDNQWaLQWY.roa
File: 71JfWhzpwqekVmPILYDNQWaLQWY.roa (raw, json)
Hash identifier: 9vIhvEJyG7a9JIqpMoEqyUcSa3Rp2ykRTvQ8Q97WV4o=
Subject key identifier: EF:52:5F:5A:1C:E9:C2:A7:A4:56:63:C8:2D:80:CD:41:66:8B:41:66
Certificate issuer: /CN=ea32adc8569cfcb35e75c7cefd46d5ed00f0e028
Certificate serial: 018571B9EE3E0D825141A95980A5B3452614
Authority key identifier: EA:32:AD:C8:56:9C:FC:B3:5E:75:C7:CE:FD:46:D5:ED:00:F0:E0:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6jKtyFac_LNedcfO_UbV7QDw4Cg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/8f8c55-04ae-434c-ac42-42b4c88d74ca/1/71JfWhzpwqekVmPILYDNQWaLQWY.roa
Signing time: Mon 02 Jan 2023 09:04:48 +0000
ROA not before: Mon 02 Jan 2023 09:04:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57961
IP address blocks: 37.139.116.0/22 maxlen: 22
37.139.112.0/21 maxlen: 22
2a00:9f40:5::/48 maxlen: 48
2a00:9f40::/32 maxlen: 32
2a00:9f40:1::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:b9:ee:3e:0d:82:51:41:a9:59:80:a5:b3:45:26:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea32adc8569cfcb35e75c7cefd46d5ed00f0e028
Validity
Not Before: Jan 2 09:04:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ef525f5a1ce9c2a7a45663c82d80cd41668b4166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:78:28:b0:f7:e4:8c:5d:7d:1d:f9:d3:2e:aa:
ab:36:84:2d:e8:6a:23:5a:48:49:26:e0:54:8c:a4:
3d:44:4a:3d:7c:36:4e:91:31:8d:b6:96:3f:58:3a:
22:82:58:a2:b6:76:3b:3b:80:d7:b5:dc:32:1f:7a:
48:cd:36:79:eb:8c:52:39:68:4d:e5:3e:28:aa:9c:
d9:42:a6:c6:23:c8:c5:5c:d1:9c:6e:3f:69:72:b9:
8d:bc:76:55:9a:54:05:98:4b:6a:0a:e1:4a:24:96:
49:fc:ff:ec:3e:5a:ca:8c:22:e3:f3:9f:a2:37:d5:
ca:24:56:09:5e:75:52:fd:b4:27:f5:0f:9f:9d:2e:
8f:29:51:1b:5c:12:6d:d6:97:39:9c:e8:dd:a0:f0:
f4:49:ee:2c:6b:a6:09:b5:2f:d4:a7:84:6d:ac:66:
f5:c1:c2:b4:89:12:17:e5:ac:5b:63:7b:18:b2:92:
49:e0:1b:d5:35:46:7b:11:ea:e6:38:57:63:4d:43:
b5:cd:7a:3a:07:4e:69:ac:79:a1:ef:3b:f0:c6:ba:
67:c6:cc:32:09:42:6b:ae:92:9b:47:5c:12:1d:1f:
6b:a6:b5:6a:24:ee:6e:b1:64:5a:ad:03:93:b4:62:
8e:3f:04:df:3b:00:94:2d:0a:e0:17:34:ca:97:f1:
40:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:52:5F:5A:1C:E9:C2:A7:A4:56:63:C8:2D:80:CD:41:66:8B:41:66
X509v3 Authority Key Identifier:
keyid:EA:32:AD:C8:56:9C:FC:B3:5E:75:C7:CE:FD:46:D5:ED:00:F0:E0:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6jKtyFac_LNedcfO_UbV7QDw4Cg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/8f8c55-04ae-434c-ac42-42b4c88d74ca/1/71JfWhzpwqekVmPILYDNQWaLQWY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/8f8c55-04ae-434c-ac42-42b4c88d74ca/1/6jKtyFac_LNedcfO_UbV7QDw4Cg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.112.0/21
IPv6:
2a00:9f40::/32
Signature Algorithm: sha256WithRSAEncryption
8a:4c:d8:c4:b7:6d:fb:58:be:9b:04:81:8f:9e:ce:70:11:ae:
17:22:a7:94:69:28:e0:01:f0:4d:69:3b:c6:c1:82:60:6b:a0:
c8:d6:d7:0d:6f:65:10:75:bd:da:8c:52:8d:a6:07:c2:13:1a:
98:25:20:42:55:92:b5:f9:58:7d:5a:da:eb:40:75:86:f1:4b:
1d:7c:1b:80:fd:ed:a8:c9:c8:7b:f4:59:ab:b7:0c:7a:7a:48:
9b:32:61:b5:c5:94:40:f3:24:31:c8:cb:48:07:89:3a:d7:21:
d5:3e:bd:5a:00:52:13:1e:e3:ef:e0:79:a1:2b:66:8f:39:e3:
01:d1:bb:45:5c:4f:06:91:87:7a:8c:88:5e:4f:75:c5:29:35:
5e:de:10:c6:0a:b9:e4:ce:b0:ae:1f:af:d8:7c:93:9f:2c:7a:
8a:ef:bc:9c:72:b9:8c:fa:f2:b2:24:0b:8d:5c:f9:6c:91:08:
7d:d6:56:b2:bf:ab:8a:f2:d3:8b:7b:68:cc:68:99:66:da:a3:
f1:61:ef:4c:b3:ac:12:a9:a1:f3:7d:cb:9e:80:e2:dc:da:d9:
c5:d7:60:f0:a7:c2:d9:2f:f7:e1:58:78:20:7b:a0:69:e3:2d:
18:10:76:5f:d5:f4:b5:83:90:1c:01:23:a7:17:a1:4a:dd:dd:
4e:45:78:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:42 2023 by rpki-client on console-fra.rpki-client.org