Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/nddov9Z8gak0gD1UmU4BdACMpzQ.roa
File: nddov9Z8gak0gD1UmU4BdACMpzQ.roa (raw, json)
Hash identifier: RLe9lvuhBAa5p3ipxebtlHDi3P5qPUsuGW6WIMsK1mw=
Subject key identifier: 9D:D7:68:BF:D6:7C:81:A9:34:80:3D:54:99:4E:01:74:00:8C:A7:34
Certificate issuer: /CN=de90d43293cfebf87e7eab2b0d553fd21a6e9641
Certificate serial: 01856EB9274E10349B9E04B7C0B48C772B36
Authority key identifier: DE:90:D4:32:93:CF:EB:F8:7E:7E:AB:2B:0D:55:3F:D2:1A:6E:96:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/nddov9Z8gak0gD1UmU4BdACMpzQ.roa
Signing time: Sun 01 Jan 2023 19:05:06 +0000
ROA not before: Sun 01 Jan 2023 19:05:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209829
IP address blocks: 37.218.244.0/24 maxlen: 24
37.218.241.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:b9:27:4e:10:34:9b:9e:04:b7:c0:b4:8c:77:2b:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de90d43293cfebf87e7eab2b0d553fd21a6e9641
Validity
Not Before: Jan 1 19:05:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9dd768bfd67c81a934803d54994e0174008ca734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:61:48:55:ef:fa:ce:3c:e9:f1:4f:21:d3:f8:
98:78:9c:89:0f:70:0c:f0:a6:2d:35:39:ef:79:14:
73:fe:86:56:82:bb:61:20:18:93:46:55:71:6e:cc:
6e:eb:88:83:c5:8f:4a:78:8c:61:d1:b5:17:0d:fe:
3a:00:f8:29:93:0e:24:bc:d2:8c:28:95:03:44:17:
36:d1:61:2b:94:04:2b:e8:4b:74:83:96:2f:91:d4:
90:a4:98:dd:12:b8:80:62:62:19:d6:89:0b:14:aa:
41:0c:27:3b:ac:ec:4a:47:b8:56:14:74:4a:fa:d7:
f1:6a:79:80:05:d8:8b:87:4b:2f:06:ce:4c:db:8d:
db:51:f0:47:cd:b4:3b:3c:c8:5d:31:1b:40:69:d3:
3c:0b:61:cd:64:7d:e7:25:65:67:de:f4:b2:32:13:
78:8c:7e:ff:c0:d8:00:bf:ed:a7:97:3d:3d:cd:50:
8d:48:ef:9e:4c:51:d0:71:a6:15:26:59:9c:56:20:
a0:04:24:50:fe:b0:df:d8:4d:e0:30:16:bd:08:1c:
ae:e9:3f:05:c7:84:37:4b:df:96:4f:a5:43:43:7a:
c5:8b:6f:07:4a:21:40:53:94:25:3e:cc:82:02:8e:
54:72:e2:6c:e5:3d:fe:04:d4:65:fa:fd:8e:e2:5f:
fd:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:D7:68:BF:D6:7C:81:A9:34:80:3D:54:99:4E:01:74:00:8C:A7:34
X509v3 Authority Key Identifier:
keyid:DE:90:D4:32:93:CF:EB:F8:7E:7E:AB:2B:0D:55:3F:D2:1A:6E:96:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/nddov9Z8gak0gD1UmU4BdACMpzQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.218.241.0/24
37.218.244.0/24
Signature Algorithm: sha256WithRSAEncryption
69:21:ea:d5:68:78:25:fd:46:5f:22:ca:c3:a0:66:a0:2c:32:
17:5d:05:0c:71:1c:b6:d1:d6:c8:08:5f:29:f4:37:0d:bf:94:
97:a4:7d:a6:3b:44:7e:ad:06:e4:2f:17:08:cb:0a:48:cd:95:
59:c5:f6:fc:25:39:10:34:2b:ea:61:df:18:04:6c:e8:aa:57:
f1:4e:87:29:9f:98:79:4c:ab:6a:04:a1:9a:81:2e:b5:43:61:
57:98:6d:5d:a4:00:ce:d2:fa:55:ac:40:bd:93:97:1c:53:3f:
94:d4:33:c6:dd:fb:0b:d2:e7:41:67:8d:32:c7:36:94:e1:0a:
f4:e5:b7:b7:0a:f0:e8:6f:67:b1:a9:03:04:8f:30:fd:22:16:
b3:c9:0a:25:96:bb:37:5d:2d:8c:56:79:25:7e:70:cd:55:50:
95:b1:6b:93:37:11:7c:ff:84:cb:ab:8b:e5:d4:0b:9f:bc:a6:
01:30:9a:fc:9f:02:f7:c9:4e:bd:76:6c:66:96:a0:77:19:a1:
52:55:4e:6e:f6:2e:47:ab:78:2c:d3:e6:7c:ca:d7:eb:ba:79:
e2:dc:e0:a8:10:9e:ed:c6:99:6f:0f:46:09:9f:0a:74:c6:69:
ac:be:2d:6c:ee:32:c7:8d:5c:af:49:27:6a:c2:7c:2b:19:ad:
8a:27:5f:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:30:34 2024 by rpki-client on console-ams.rpki-client.org