Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/e005c2-affa-458f-aaf8-8af56e733600/1/5vF1-bavzdOQt0WVA64h1h9LcNY.roa
File: 5vF1-bavzdOQt0WVA64h1h9LcNY.roa (raw, json)
Hash identifier: xFUzVoorN0kAkHmY+pcPQ5OPSV+yDB7+L9a5tMvNvVg=
Subject key identifier: E6:F1:75:F9:B6:AF:CD:D3:90:B7:45:95:03:AE:21:D6:1F:4B:70:D6
Certificate issuer: /CN=4b57725b0a605d4ddcc464b70dcb3a162a5f055b
Certificate serial: 01862601108C656283E8537DAA522052DA38
Authority key identifier: 4B:57:72:5B:0A:60:5D:4D:DC:C4:64:B7:0D:CB:3A:16:2A:5F:05:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S1dyWwpgXU3cxGS3Dcs6FipfBVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/e005c2-affa-458f-aaf8-8af56e733600/1/5vF1-bavzdOQt0WVA64h1h9LcNY.roa
Signing time: Mon 06 Feb 2023 09:14:09 +0000
ROA not before: Mon 06 Feb 2023 09:14:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51407
IP address blocks: 37.122.159.0/24 maxlen: 24
37.122.158.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:26:01:10:8c:65:62:83:e8:53:7d:aa:52:20:52:da:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b57725b0a605d4ddcc464b70dcb3a162a5f055b
Validity
Not Before: Feb 6 09:14:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e6f175f9b6afcdd390b7459503ae21d61f4b70d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5c:0e:9c:88:27:70:9c:37:b0:24:07:5c:13:
64:74:89:83:5d:05:bf:26:35:59:0d:70:20:89:7d:
5f:56:78:10:1a:1d:09:d0:92:c1:a1:46:d9:ce:b2:
39:49:20:5f:29:fc:c6:27:78:43:1b:c6:ba:a0:d1:
f0:fd:4d:e7:4a:e3:f4:e0:24:1a:c9:bc:95:34:22:
a3:8e:1b:1b:1e:43:05:91:1a:f1:c4:8d:58:72:73:
01:8b:9d:83:02:41:0c:1f:f7:9d:6e:d9:7f:4b:ff:
ba:bf:7f:79:11:c5:e7:ff:01:8d:b4:4f:20:d3:aa:
8d:49:67:fd:d3:b5:e0:90:29:67:de:15:07:7d:c3:
41:43:e5:3e:f3:0e:3b:c2:06:a2:3a:50:de:4a:8e:
7c:65:f6:af:9b:7f:8b:57:02:09:8a:78:22:9a:3c:
d6:9d:f2:0f:3b:6a:5e:78:bc:67:1a:48:c0:a4:58:
6a:3d:36:65:ca:4e:d7:9a:37:6c:f7:13:49:f3:82:
fe:de:74:1e:04:aa:6f:5f:68:7b:00:fc:d6:2b:96:
11:8f:c3:1a:ac:2a:ca:5b:a5:b7:74:79:25:ce:b9:
bd:49:d5:94:b7:9c:2a:be:4c:b3:a8:37:db:a2:d2:
51:a9:c9:b5:2d:03:43:8d:fa:40:ab:48:8c:e0:2f:
cf:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:F1:75:F9:B6:AF:CD:D3:90:B7:45:95:03:AE:21:D6:1F:4B:70:D6
X509v3 Authority Key Identifier:
keyid:4B:57:72:5B:0A:60:5D:4D:DC:C4:64:B7:0D:CB:3A:16:2A:5F:05:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S1dyWwpgXU3cxGS3Dcs6FipfBVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e005c2-affa-458f-aaf8-8af56e733600/1/5vF1-bavzdOQt0WVA64h1h9LcNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e005c2-affa-458f-aaf8-8af56e733600/1/S1dyWwpgXU3cxGS3Dcs6FipfBVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.122.158.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:9f:bb:67:54:1c:0e:be:82:12:85:77:68:92:de:57:ed:c4:
73:30:6e:fe:64:dd:5a:78:ab:3b:a4:b8:fb:72:34:04:ca:9a:
0a:39:9a:c9:d7:55:c7:11:38:0f:e6:ec:87:ca:48:7f:bd:5c:
26:5d:6f:72:95:ac:8d:f3:72:86:b2:47:66:03:09:65:63:c4:
c2:16:7e:f3:c0:6c:73:88:90:91:10:39:b0:c9:86:8c:da:24:
79:ba:a0:24:72:aa:e5:77:9c:03:da:bb:dd:00:54:33:6c:84:
8c:46:d0:e7:5a:3d:7f:66:8c:46:e2:5f:f6:3b:e6:f2:84:c5:
d2:95:50:f5:48:f4:d7:8b:a2:de:e2:68:4c:7d:0b:37:ea:94:
70:a7:aa:1d:31:ea:23:95:9a:9f:f8:ba:f1:54:6a:c0:25:92:
d1:fe:cf:07:9e:f6:d8:fb:6c:bc:a6:1b:27:3c:cd:9a:5d:79:
05:ed:1c:31:b6:47:1d:d6:67:80:cd:37:2e:9f:a5:28:c3:7e:
95:83:70:b4:e6:30:9e:05:36:10:ac:a8:5a:2e:17:b8:7a:06:
e4:56:56:c4:98:be:34:3c:44:9c:22:03:38:e6:db:d7:f3:de:
6f:0f:77:f1:f5:7a:f4:48:c5:be:91:ad:4b:2f:ce:aa:c8:f3:
ae:b2:8e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:07 2024 by rpki-client on console-fra.rpki-client.org