Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/8f8c55-04ae-434c-ac42-42b4c88d74ca/1/sbuqiLBYV2enBb3EQFwZc3UgtNc.roa
File: sbuqiLBYV2enBb3EQFwZc3UgtNc.roa (raw, json)
Hash identifier: Fl9HNORYV/CV4NqsZerDNiF7gVw1nvt673YrG/IYXrQ=
Subject key identifier: B1:BB:AA:88:B0:58:57:67:A7:05:BD:C4:40:5C:19:73:75:20:B4:D7
Certificate issuer: /CN=ea32adc8569cfcb35e75c7cefd46d5ed00f0e028
Certificate serial: 018823A364EED79029156E7BE2F538CDB42E
Authority key identifier: EA:32:AD:C8:56:9C:FC:B3:5E:75:C7:CE:FD:46:D5:ED:00:F0:E0:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6jKtyFac_LNedcfO_UbV7QDw4Cg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/8f8c55-04ae-434c-ac42-42b4c88d74ca/1/sbuqiLBYV2enBb3EQFwZc3UgtNc.roa
Signing time: Tue 16 May 2023 08:18:10 +0000
ROA not before: Tue 16 May 2023 08:18:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57961
IP address blocks: 37.139.114.0/24 maxlen: 24
37.139.116.0/22 maxlen: 22
37.139.112.0/21 maxlen: 22
2a00:9f40:5::/48 maxlen: 48
2a00:9f40::/32 maxlen: 32
2a00:9f40:1::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:23:a3:64:ee:d7:90:29:15:6e:7b:e2:f5:38:cd:b4:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea32adc8569cfcb35e75c7cefd46d5ed00f0e028
Validity
Not Before: May 16 08:18:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b1bbaa88b0585767a705bdc4405c19737520b4d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:37:5e:43:ff:0e:cb:55:44:87:3c:24:f7:3f:
87:96:c3:96:76:e3:c7:00:51:8b:c5:a4:4c:56:9b:
ef:1c:4a:75:87:5d:1c:d1:b2:1a:3d:21:00:3e:f8:
b2:1f:77:43:ca:fb:ee:1c:ad:35:89:a6:56:37:fe:
67:63:9c:4f:97:b9:0a:b9:af:0e:6a:57:83:f1:8a:
f7:64:aa:f6:e4:2e:20:ba:26:81:e9:67:31:1b:b2:
0a:97:9f:c7:15:06:42:6c:ca:a5:a4:f6:b9:6f:0d:
a4:fb:0f:61:f6:78:43:20:8b:7c:a7:6d:eb:95:3f:
ed:71:01:1f:13:f8:12:db:c5:dc:91:c4:27:42:a4:
fd:c4:32:4d:8e:32:47:44:67:c8:33:4b:ba:d3:59:
f3:20:62:73:3d:f6:f3:0f:6a:7d:7b:46:1d:57:be:
90:ef:93:21:7f:19:61:43:92:9e:df:92:7a:a2:3f:
1f:9e:d7:ee:4c:24:b9:9e:9c:da:4b:1b:a9:56:4f:
bd:1a:0c:38:22:6d:cb:80:d0:79:18:a3:0a:13:c2:
f9:b5:af:80:fc:09:30:2a:2d:d3:23:a1:e6:19:e2:
7c:55:8a:a5:2b:04:be:f0:66:f0:f1:ca:30:86:b1:
b7:08:4b:7b:8f:9d:bf:1a:24:67:85:4f:82:88:d7:
d9:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:BB:AA:88:B0:58:57:67:A7:05:BD:C4:40:5C:19:73:75:20:B4:D7
X509v3 Authority Key Identifier:
keyid:EA:32:AD:C8:56:9C:FC:B3:5E:75:C7:CE:FD:46:D5:ED:00:F0:E0:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6jKtyFac_LNedcfO_UbV7QDw4Cg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/8f8c55-04ae-434c-ac42-42b4c88d74ca/1/sbuqiLBYV2enBb3EQFwZc3UgtNc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/8f8c55-04ae-434c-ac42-42b4c88d74ca/1/6jKtyFac_LNedcfO_UbV7QDw4Cg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.112.0/21
IPv6:
2a00:9f40::/32
Signature Algorithm: sha256WithRSAEncryption
5a:ce:2d:74:2a:e0:9b:2c:39:3a:f5:59:19:99:58:d6:8b:bd:
0b:c5:6d:50:ee:4c:e9:36:49:ad:dc:41:6e:87:55:f1:a9:c6:
eb:f8:c7:c5:a4:19:5c:3a:78:01:9c:db:fc:14:e8:8f:e1:c8:
5e:85:fe:31:92:c8:78:71:b0:80:dc:bb:3a:95:d5:57:09:34:
15:7b:a5:5b:e2:ba:73:40:5b:d7:0f:28:9e:81:85:d8:0e:be:
4c:4b:b1:d1:55:51:05:5a:7a:95:f2:6d:fc:bb:fd:d2:99:8a:
a5:7d:f1:0f:53:43:0c:1a:1a:7d:6d:b5:8f:93:73:0a:8f:d9:
4a:2f:da:88:bb:1e:57:56:b0:31:fa:5d:fa:48:cf:bf:30:c6:
33:c4:41:ce:dd:84:35:2e:09:2a:0c:c6:cc:c2:40:15:f2:fc:
aa:bf:9d:b7:21:73:0c:6b:6c:99:9f:d7:4f:eb:00:3b:5a:01:
be:3f:3a:b5:c6:41:5f:3f:51:5a:23:b3:cf:9e:b5:a6:ab:53:
97:9d:7b:78:96:98:9b:88:36:89:91:3d:45:31:09:b4:7a:e6:
71:f4:36:97:23:a9:90:2b:65:49:eb:a7:d0:6e:88:77:62:6d:
3a:02:90:ed:1c:3b:d9:03:cc:c0:c4:73:94:5b:ba:d0:c8:bb:
69:20:76:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:16:53 2024 by rpki-client on console-ams.rpki-client.org