Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/KZqC-DlXBHtPqJ36WdRHq55iryE.roa
File: KZqC-DlXBHtPqJ36WdRHq55iryE.roa (raw, json)
Hash identifier: EYNoHPtvUARIfvO/TrQ3QqDZI2Cz3WjnGP1XIvjSie0=
Subject key identifier: 29:9A:82:F8:39:57:04:7B:4F:A8:9D:FA:59:D4:47:AB:9E:62:AF:21
Certificate issuer: /CN=0f6363d428b7915c108825f09706004b8ea3d4b5
Certificate serial: 0188304B31589955D0F29FC98A9FCD15A593
Authority key identifier: 0F:63:63:D4:28:B7:91:5C:10:88:25:F0:97:06:00:4B:8E:A3:D4:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/KZqC-DlXBHtPqJ36WdRHq55iryE.roa
Signing time: Thu 18 May 2023 19:16:54 +0000
ROA not before: Thu 18 May 2023 19:16:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 37.143.0.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Jun 2023 07:40:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:30:4b:31:58:99:55:d0:f2:9f:c9:8a:9f:cd:15:a5:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f6363d428b7915c108825f09706004b8ea3d4b5
Validity
Not Before: May 18 19:16:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=299a82f83957047b4fa89dfa59d447ab9e62af21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:19:04:b4:43:96:da:f2:c7:a6:c7:b1:fb:9c:
ed:3a:7d:72:76:0f:36:64:2c:01:0b:83:a2:3e:cc:
bf:93:da:6b:a7:d0:15:e3:54:fc:75:ef:59:26:72:
eb:e8:16:9b:c3:64:ef:86:4e:60:40:e7:a8:f8:ec:
dd:77:5e:82:ab:b0:cb:e1:46:99:0b:dd:9e:de:91:
c7:d6:59:81:6b:7b:30:82:24:c6:8d:12:e2:3f:81:
40:11:b6:0b:4f:8f:74:97:ae:fd:d8:b2:5c:6f:20:
07:f4:26:c2:75:41:5c:6a:2b:6c:2e:43:3c:16:b9:
5e:11:36:13:3e:0e:82:b9:20:d7:2f:66:52:e8:3b:
53:d3:3e:4f:28:6a:a5:18:40:a9:a3:a5:65:59:f6:
06:96:8a:d3:e5:2e:6b:a1:ff:89:1d:c2:05:c5:34:
fa:b5:96:52:c4:b2:1f:df:ce:38:35:a6:17:57:9d:
3c:f5:e5:b8:dc:c3:c9:b0:04:90:29:63:9a:a9:34:
51:8d:b4:c9:a2:21:52:1b:64:5e:d5:d0:3d:6f:21:
63:b9:1a:8d:58:ac:11:6a:09:3a:f6:e4:bc:07:1d:
5c:19:78:9e:c5:ac:92:1e:a7:57:aa:f0:3c:1c:4f:
84:97:ac:8e:75:37:b7:51:36:d6:95:c2:25:3e:92:
06:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:9A:82:F8:39:57:04:7B:4F:A8:9D:FA:59:D4:47:AB:9E:62:AF:21
X509v3 Authority Key Identifier:
keyid:0F:63:63:D4:28:B7:91:5C:10:88:25:F0:97:06:00:4B:8E:A3:D4:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/KZqC-DlXBHtPqJ36WdRHq55iryE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.143.0.0/22
Signature Algorithm: sha256WithRSAEncryption
a4:c5:26:ce:ee:f2:94:dd:75:a1:86:04:a8:2d:04:31:72:83:
6b:f9:26:2d:60:84:16:6b:37:fa:1d:bd:1e:e5:35:f1:a6:c1:
68:ea:23:8a:89:1f:74:a3:62:f3:55:31:31:3e:88:61:b7:a0:
01:f0:c5:5e:2c:c0:95:40:9e:a8:0e:49:76:7c:54:ab:11:17:
fa:02:d7:09:cb:e4:0a:25:ea:db:2c:d0:64:be:c2:1d:9b:63:
a6:1c:2d:d8:dc:15:85:ff:2b:00:a6:f7:73:e8:5e:bb:6a:68:
a1:82:2f:16:02:dc:90:fc:7f:6d:bd:38:2b:76:4d:de:f0:70:
97:46:a1:32:3e:b4:e3:61:82:aa:12:57:8a:dc:cb:7d:8e:0a:
b5:28:46:af:86:5a:b4:8a:9c:76:1a:b6:c3:c8:74:17:5f:fe:
d7:73:28:07:68:cd:1c:12:ae:31:71:d8:75:b0:de:3c:0a:2f:
ad:45:87:bf:a7:93:6e:f1:c3:b1:0a:51:06:b9:31:1b:c3:f6:
a8:fd:ef:29:fb:df:71:48:8c:02:ac:84:b6:68:b1:3c:31:aa:
fd:60:3b:f5:be:a2:fe:65:5b:38:0e:ae:0d:ef:28:2b:b2:7e:
b8:bc:70:4f:95:e5:33:7d:e0:48:a9:c8:60:6e:df:c5:58:29:
51:ac:0b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:50 2024 by rpki-client on console-ams.rpki-client.org