Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/DcMNAVMlFzqPIcJ4mXtKKNkRAOM.roa
File: DcMNAVMlFzqPIcJ4mXtKKNkRAOM.roa (raw, json)
Hash identifier: Fwmna5SDkjXEVLqv0ooTYWbeCz6c9qcucCm11Fphl08=
Subject key identifier: 0D:C3:0D:01:53:25:17:3A:8F:21:C2:78:99:7B:4A:28:D9:11:00:E3
Certificate issuer: /CN=336f6ac82f6f28e3d3e5b66475594d8318e75ab3
Certificate serial: 0186DC93BAB09C1595373322FAB2001CCE27
Authority key identifier: 33:6F:6A:C8:2F:6F:28:E3:D3:E5:B6:64:75:59:4D:83:18:E7:5A:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M29qyC9vKOPT5bZkdVlNgxjnWrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/DcMNAVMlFzqPIcJ4mXtKKNkRAOM.roa
Signing time: Mon 13 Mar 2023 20:05:14 +0000
ROA not before: Mon 13 Mar 2023 20:05:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7155
IP address blocks: 37.19.100.0/24 maxlen: 24
185.109.163.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 23 May 2023 08:19:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:dc:93:ba:b0:9c:15:95:37:33:22:fa:b2:00:1c:ce:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=336f6ac82f6f28e3d3e5b66475594d8318e75ab3
Validity
Not Before: Mar 13 20:05:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0dc30d015325173a8f21c278997b4a28d91100e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:3d:e1:fa:5a:d5:d8:46:24:2b:6d:d6:19:a8:
b5:39:d0:7d:f8:c6:5b:e8:32:9e:e4:7e:47:29:d8:
73:9a:07:4e:4b:9a:f6:5a:de:8f:32:66:14:be:eb:
12:c9:02:50:7e:94:11:0e:93:85:57:2b:c1:b7:54:
06:53:a1:7b:3f:2d:43:99:d3:86:8c:c7:07:4b:31:
6e:9a:f5:97:cd:f0:8e:cd:a8:2c:b0:13:d1:7a:02:
5b:c4:b0:ba:5f:40:9a:e9:51:7c:a4:f0:37:23:34:
9b:2b:39:a0:52:35:a8:98:f9:5a:1d:fd:e8:df:25:
d7:8c:8c:e6:bf:0c:21:36:7c:d8:ec:c6:90:04:9b:
a7:46:24:d5:2f:c9:c9:06:22:40:a4:ad:38:22:e9:
7c:0b:37:93:fb:4b:ce:20:44:de:e2:9f:4d:91:67:
a1:e5:5f:dd:46:97:64:18:54:f8:8f:bc:08:bf:51:
0d:7b:6a:a1:fa:a3:04:e4:c4:68:56:0b:86:b1:65:
8b:c1:cf:a4:e6:5b:83:48:f1:ff:78:2c:67:a8:09:
5e:39:69:cd:16:e7:a4:5e:38:11:11:67:e2:72:23:
1f:50:1c:b2:13:57:e4:01:a5:9b:16:f8:0a:a8:7f:
79:a7:47:2b:75:f1:65:9a:8d:56:14:05:e4:29:70:
22:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:C3:0D:01:53:25:17:3A:8F:21:C2:78:99:7B:4A:28:D9:11:00:E3
X509v3 Authority Key Identifier:
keyid:33:6F:6A:C8:2F:6F:28:E3:D3:E5:B6:64:75:59:4D:83:18:E7:5A:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M29qyC9vKOPT5bZkdVlNgxjnWrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/DcMNAVMlFzqPIcJ4mXtKKNkRAOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.19.100.0/24
185.109.163.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:38:2a:ce:6a:5f:16:e5:57:4a:72:e3:4d:3a:c5:55:b1:6b:
07:31:80:ed:25:4c:02:4e:18:b1:35:fb:33:c3:17:0b:14:0a:
20:95:cf:bd:a2:0f:35:7e:66:4b:70:ba:5e:cc:28:19:85:13:
cb:5e:71:9e:ae:99:14:70:87:f9:70:85:c9:3f:6c:e1:cc:78:
3e:0d:64:79:61:14:e1:1d:40:0a:c4:6b:8d:ab:d7:b3:e8:e7:
66:78:0f:a7:9f:a2:53:1b:54:19:d8:f9:60:9f:1f:d7:ee:c0:
52:20:c3:89:b2:e7:4e:e7:65:03:b8:08:db:04:43:a6:47:e2:
3b:38:11:8b:5d:c3:e0:ad:c8:47:48:0e:1b:f6:db:f5:a9:d7:
84:93:22:f8:ac:a2:3e:8b:5c:a2:df:98:ee:a8:7a:19:df:1b:
7e:9d:67:bd:f2:e8:d7:de:1f:35:b5:91:87:e4:c0:e0:42:86:
53:1a:e2:04:01:4c:c1:57:bc:27:59:25:19:95:4b:3e:2a:ca:
44:2a:22:08:18:57:c9:c8:7f:82:37:de:39:9b:e3:ea:26:ed:
71:a1:80:50:cc:20:b2:8a:b1:61:9d:bd:85:90:74:48:5b:9e:
12:81:69:ae:04:81:43:f0:56:71:db:c9:e8:62:dc:46:2f:e6:
0a:12:41:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:08 2024 by rpki-client on console-fra.rpki-client.org