Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/rzWYppoLAHYlJskKpV4KlyHyDK0.roa
File: rzWYppoLAHYlJskKpV4KlyHyDK0.roa (raw, json)
Hash identifier: IyaI8KFv6hLT4GjNwoxP9m5LE08k8NBQKUV5bB00VP8=
Subject key identifier: AF:35:98:A6:9A:0B:00:76:25:26:C9:0A:A5:5E:0A:97:21:F2:0C:AD
Certificate issuer: /CN=dc4e453affe895b6452b84027437c5c00fd37067
Certificate serial: 0186E078EF64BA1E6A587192C50C11CF841E
Authority key identifier: DC:4E:45:3A:FF:E8:95:B6:45:2B:84:02:74:37:C5:C0:0F:D3:70:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3E5FOv_olbZFK4QCdDfFwA_TcGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/rzWYppoLAHYlJskKpV4KlyHyDK0.roa
Signing time: Tue 14 Mar 2023 14:14:27 +0000
ROA not before: Tue 14 Mar 2023 14:14:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7155
IP address blocks: 37.46.18.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 06 Jun 2023 15:25:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e0:78:ef:64:ba:1e:6a:58:71:92:c5:0c:11:cf:84:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc4e453affe895b6452b84027437c5c00fd37067
Validity
Not Before: Mar 14 14:14:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=af3598a69a0b00762526c90aa55e0a9721f20cad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:88:23:c2:30:b1:14:17:a5:dc:be:83:fd:c7:
4b:d5:07:17:0d:51:c6:ca:d8:4d:53:1b:a5:1c:db:
19:a7:8b:62:b2:1b:e9:41:45:f1:12:f4:07:66:83:
db:45:58:58:92:6c:64:54:0d:80:cd:d4:cd:78:91:
24:30:f1:66:2a:58:90:d1:86:16:a4:71:d1:75:87:
7d:19:37:fa:5f:31:61:d5:1c:89:69:84:80:51:f3:
ce:e8:d4:7e:3e:c1:9b:85:59:ed:d6:a4:a2:54:c7:
1f:7a:be:92:87:03:fe:34:73:ac:8d:80:86:bd:94:
c7:6f:06:ec:3d:ea:05:d1:a3:39:41:e5:94:85:15:
84:9c:da:9d:8d:6e:6a:cc:18:a2:ab:95:26:2f:a1:
9e:42:9f:0a:7c:e8:af:62:80:ab:4c:23:e2:9d:ec:
a5:26:f8:ef:a8:18:07:4f:16:41:36:1d:7b:ac:66:
21:53:4c:52:59:9f:9f:e6:5c:7b:7c:4c:eb:44:80:
e3:d7:6a:c4:fd:f2:06:3d:d8:36:c9:db:98:1d:72:
62:26:18:c7:b4:35:1e:48:71:99:af:d1:0e:33:f7:
21:13:e8:2b:2a:13:6a:74:73:07:f1:cf:41:07:ed:
ba:b6:ba:65:ca:27:9f:75:7c:7d:99:50:b9:13:21:
ae:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:35:98:A6:9A:0B:00:76:25:26:C9:0A:A5:5E:0A:97:21:F2:0C:AD
X509v3 Authority Key Identifier:
keyid:DC:4E:45:3A:FF:E8:95:B6:45:2B:84:02:74:37:C5:C0:0F:D3:70:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3E5FOv_olbZFK4QCdDfFwA_TcGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/rzWYppoLAHYlJskKpV4KlyHyDK0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.46.18.0/23
Signature Algorithm: sha256WithRSAEncryption
a5:e1:c1:04:b0:3c:76:13:f9:a9:3e:af:de:ab:af:d2:b1:05:
10:e0:cc:41:31:a4:9a:9d:76:c9:95:84:b5:8b:d9:54:9f:f3:
d0:3d:1c:a9:54:de:71:9e:18:9b:32:4a:31:eb:82:d3:37:8a:
eb:59:d4:51:68:4d:a9:b1:0d:f4:86:e7:5a:9c:80:e7:1a:4e:
db:b5:98:b5:be:db:da:a8:e9:cc:5e:e1:19:46:fe:1a:4c:24:
d1:b6:57:85:69:6c:4c:14:c0:4d:e5:25:3f:e2:c4:0e:4f:d2:
ff:97:45:7b:a7:b6:0e:be:4b:1f:f3:aa:68:80:8c:94:85:5c:
54:61:fa:f9:0b:7c:fd:8b:e9:6a:14:58:3d:56:3c:97:49:25:
28:5b:03:0a:94:c6:a7:4e:d9:c3:88:f6:b4:d0:b1:3c:80:11:
83:86:a2:31:13:19:53:9b:32:39:e0:28:55:36:23:38:ad:6f:
e0:20:f4:3b:8a:b3:bd:41:8d:20:94:b1:34:48:a9:b0:59:69:
4f:0f:37:eb:eb:50:4f:ea:27:9f:75:99:76:83:6a:74:2c:e8:
74:07:9f:92:e0:33:66:5a:5e:bf:bd:04:07:94:04:20:01:8b:
89:02:76:9d:ae:1d:16:b7:f8:32:75:f9:15:87:b9:ed:c1:d7:
89:11:d5:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:05 2024 by rpki-client on console-ams.rpki-client.org