Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/5EdX8WCcCRI0pMZxfeEzKU7C5PU.roa
File: 5EdX8WCcCRI0pMZxfeEzKU7C5PU.roa (raw, json)
Hash identifier: qvnQfBocAyFXOwe4nBrfg/gpXmw1gkFK2ilaUX14tDM=
Subject key identifier: E4:47:57:F1:60:9C:09:12:34:A4:C6:71:7D:E1:33:29:4E:C2:E4:F5
Certificate issuer: /CN=336f6ac82f6f28e3d3e5b66475594d8318e75ab3
Certificate serial: 0188783224D3AA24B9B7B753D5E4AD470971
Authority key identifier: 33:6F:6A:C8:2F:6F:28:E3:D3:E5:B6:64:75:59:4D:83:18:E7:5A:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M29qyC9vKOPT5bZkdVlNgxjnWrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/5EdX8WCcCRI0pMZxfeEzKU7C5PU.roa
Signing time: Thu 01 Jun 2023 18:22:12 +0000
ROA not before: Thu 01 Jun 2023 18:22:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29286
IP address blocks: 37.19.96.0/24 maxlen: 24
37.19.101.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 10 Aug 2023 07:46:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:78:32:24:d3:aa:24:b9:b7:b7:53:d5:e4:ad:47:09:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=336f6ac82f6f28e3d3e5b66475594d8318e75ab3
Validity
Not Before: Jun 1 18:22:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e44757f1609c091234a4c6717de133294ec2e4f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:89:86:dd:4d:8e:be:ee:00:13:93:c7:65:93:
e6:93:d1:6c:e4:21:3a:92:7a:54:df:22:a3:22:32:
f5:5f:45:07:3d:7a:e0:9f:9f:d1:bd:5a:f0:e4:15:
d7:59:43:6f:b1:60:1e:3d:1b:58:10:02:ff:1f:f0:
05:01:33:74:9c:f7:d6:5d:ea:8e:d0:8f:4f:27:e7:
86:8f:f7:38:07:fe:7d:8e:8e:d4:d4:6e:ba:65:39:
9b:da:a1:09:7a:56:8e:28:a0:a9:62:11:36:af:40:
dd:7c:37:0e:8c:aa:a1:f8:30:46:10:2d:20:0e:f8:
48:12:82:1e:10:73:ae:38:85:90:1b:ac:b5:87:6e:
9f:38:61:88:bb:71:7c:30:50:55:27:ad:f8:dc:f1:
2a:fe:b1:2e:fd:2b:d2:c6:3c:07:dc:21:3e:50:cf:
83:44:6a:c7:d8:1f:22:b5:60:3f:97:24:6c:5e:4c:
b9:74:5d:5d:c5:5c:cb:c1:84:30:6b:2f:5f:b5:37:
35:cc:4c:2c:84:59:65:e9:21:a8:34:0d:83:91:5f:
6d:02:66:8c:84:7d:a6:7b:12:03:8f:65:de:cb:4d:
f9:48:07:b7:29:8f:3a:c5:c7:15:35:78:41:16:7a:
95:54:b7:a9:bb:84:68:c1:26:eb:93:da:29:e8:28:
04:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:47:57:F1:60:9C:09:12:34:A4:C6:71:7D:E1:33:29:4E:C2:E4:F5
X509v3 Authority Key Identifier:
keyid:33:6F:6A:C8:2F:6F:28:E3:D3:E5:B6:64:75:59:4D:83:18:E7:5A:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M29qyC9vKOPT5bZkdVlNgxjnWrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/5EdX8WCcCRI0pMZxfeEzKU7C5PU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.19.96.0/24
37.19.101.0/24
Signature Algorithm: sha256WithRSAEncryption
21:f9:97:db:0c:cf:8d:68:13:38:6e:52:12:0b:77:c2:d3:3f:
70:4c:18:81:01:8a:04:93:e7:29:3b:31:de:45:fa:43:ed:45:
0b:0f:06:97:a1:f5:ba:2a:ff:3d:e9:70:d3:f4:ef:8e:50:20:
1a:5f:27:05:50:76:c4:c0:49:ee:81:9d:61:9c:24:3e:1f:68:
59:b5:13:9d:d8:36:f7:48:32:41:55:63:2c:9a:2a:ee:c6:29:
14:f5:e0:27:a8:af:1f:ee:23:c5:b6:c4:eb:dc:a9:aa:2a:da:
e2:bb:23:3b:29:59:99:4c:c1:6f:07:5e:95:61:0a:70:6f:25:
3a:d2:85:dd:68:ca:7e:ed:a2:48:05:52:2c:a6:03:20:34:2a:
15:57:7a:00:6e:c7:cc:be:0e:93:4f:2c:e2:40:52:07:f3:87:
5e:a0:68:b5:99:e1:1c:f3:07:9a:3a:d1:39:42:58:a3:66:d4:
79:d6:f8:bc:88:13:ce:8f:f9:d2:ce:8a:6c:75:87:66:b0:f7:
dd:d4:93:25:d9:36:4f:a1:32:9d:88:4f:40:be:6d:43:53:6d:
41:b6:4d:7c:87:af:17:8b:28:3b:40:38:c3:58:60:aa:68:cc:
57:e6:d0:6f:6d:61:48:80:f5:38:21:37:f6:97:33:f0:56:77:
77:5c:93:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:08 2024 by rpki-client on console-fra.rpki-client.org