Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/NEVmc32gTA_xQ7qVV-ytw7ETK9k.roa
File: NEVmc32gTA_xQ7qVV-ytw7ETK9k.roa (raw, json)
Hash identifier: 5MgOziWWzxTgjx6trOw61vlR/xVlazr0LSulJhyGMo0=
Subject key identifier: 34:45:66:73:7D:A0:4C:0F:F1:43:BA:95:57:EC:AD:C3:B1:13:2B:D9
Certificate issuer: /CN=2b8966d0f14fd59993ca4878e774fa4779036694
Certificate serial: 018C3EB6787122BC2E0103ECCD53282401B6
Authority key identifier: 2B:89:66:D0:F1:4F:D5:99:93:CA:48:78:E7:74:FA:47:79:03:66:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K4lm0PFP1ZmTykh453T6R3kDZpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/NEVmc32gTA_xQ7qVV-ytw7ETK9k.roa
Signing time: Wed 06 Dec 2023 10:39:54 +0000
ROA not before: Wed 06 Dec 2023 10:39:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35625
IP address blocks: 37.16.78.0/24 maxlen: 24
194.126.178.0/24 maxlen: 24
185.117.18.0/24 maxlen: 24
2a01:6600:2e00::/40 maxlen: 40
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:3e:b6:78:71:22:bc:2e:01:03:ec:cd:53:28:24:01:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b8966d0f14fd59993ca4878e774fa4779036694
Validity
Not Before: Dec 6 10:39:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=344566737da04c0ff143ba9557ecadc3b1132bd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:17:60:54:2d:fd:f9:48:67:11:9f:ca:67:9b:
12:85:9c:08:1e:c6:f1:ab:63:e0:cb:f5:56:da:99:
1f:fd:12:20:82:fc:3b:fd:23:ed:82:dc:00:ba:bd:
5d:f4:c5:42:4e:e7:1f:16:ee:c0:ca:4d:b4:25:2b:
02:d9:11:89:0d:02:34:12:3d:f3:e2:ee:53:17:bd:
e6:b8:29:50:5f:39:40:b0:69:fd:10:af:23:35:4c:
43:6d:9d:d7:09:39:ac:e3:dc:d2:b9:55:30:e4:d6:
76:b4:e8:f8:c7:a1:b4:66:03:77:aa:30:71:46:22:
1a:23:6d:e8:92:d0:c9:85:9c:8b:d8:4d:b8:e4:a9:
78:38:04:b1:9b:ad:4f:dc:4f:2d:45:7a:07:25:27:
43:29:89:42:08:c5:dd:58:46:b8:4c:41:5c:77:77:
57:3f:07:05:01:b9:b5:4c:af:25:b4:2e:41:a5:2e:
00:3e:ca:a7:18:1a:88:ac:b7:1e:8f:0d:6f:62:96:
ec:3d:96:fe:f1:b0:62:a3:08:48:c4:b3:95:1e:e9:
62:af:20:40:57:93:2e:a3:70:0d:ae:66:53:57:c1:
7f:2c:ca:03:36:66:15:e3:45:df:8d:45:18:a4:02:
ba:57:a7:01:f6:23:32:49:25:9c:4e:67:4b:1c:3f:
d8:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:45:66:73:7D:A0:4C:0F:F1:43:BA:95:57:EC:AD:C3:B1:13:2B:D9
X509v3 Authority Key Identifier:
keyid:2B:89:66:D0:F1:4F:D5:99:93:CA:48:78:E7:74:FA:47:79:03:66:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K4lm0PFP1ZmTykh453T6R3kDZpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/NEVmc32gTA_xQ7qVV-ytw7ETK9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/K4lm0PFP1ZmTykh453T6R3kDZpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.16.78.0/24
185.117.18.0/24
194.126.178.0/24
IPv6:
2a01:6600:2e00::/40
Signature Algorithm: sha256WithRSAEncryption
a2:7f:81:7e:14:3b:5f:ee:e1:06:3e:10:0d:c3:8d:11:90:bf:
1c:ab:89:3d:6f:8f:0a:27:22:7c:17:7c:c7:9e:ab:f8:9c:0b:
31:64:59:4e:f6:1d:58:3b:e1:84:8d:86:82:0f:a7:fe:06:39:
25:e7:d2:ed:58:ca:e0:15:bf:29:2d:8d:1f:81:51:79:39:5e:
6c:e5:73:1f:07:af:0c:49:87:dc:61:c3:4b:cb:43:b7:e1:2d:
bd:e1:ed:b6:25:6b:18:fb:fd:c9:2c:65:73:5f:a2:08:1b:7c:
c4:de:be:43:fe:0d:a9:3e:5f:e3:9f:a6:dc:bb:ff:87:81:42:
51:8c:17:12:06:a5:d3:8a:2e:30:b4:e3:05:eb:54:df:d1:66:
89:f8:3e:17:1f:32:04:98:39:ab:3f:c6:87:ff:ca:e0:f7:83:
7a:32:1d:10:7a:9f:93:0a:c2:e9:d3:67:d9:fd:91:cd:a4:3e:
ea:be:ce:01:8e:5d:03:4c:0b:d8:18:1a:a0:a1:3e:36:f1:b4:
fe:12:4e:f8:b7:3a:e6:d3:55:70:65:55:ab:e5:16:2d:61:e0:
24:f3:ee:7f:98:1b:93:89:47:ed:24:d4:13:5b:9a:09:5d:49:
73:b5:2b:be:c3:4a:92:7c:14:59:db:4f:3c:2e:4c:d7:35:a9:
7c:0a:36:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 7 12:04:33 2023 by rpki-client on console-fra.rpki-client.org