Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/Vp5GlcfFIWjWjdXziUMMT3BMRWQ.roa
File: Vp5GlcfFIWjWjdXziUMMT3BMRWQ.roa (raw, json)
Hash identifier: Z2/0V7Wyupwb13lvuhV78W9MASysLM9rOzTblBtabLU=
Subject key identifier: 56:9E:46:95:C7:C5:21:68:D6:8D:D5:F3:89:43:0C:4F:70:4C:45:64
Certificate issuer: /CN=0f6363d428b7915c108825f09706004b8ea3d4b5
Certificate serial: 01856CB838D5A80A1011828FBB15A8E1F19C
Authority key identifier: 0F:63:63:D4:28:B7:91:5C:10:88:25:F0:97:06:00:4B:8E:A3:D4:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/Vp5GlcfFIWjWjdXziUMMT3BMRWQ.roa
Signing time: Sun 01 Jan 2023 09:44:50 +0000
ROA not before: Sun 01 Jan 2023 09:44:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211585
IP address blocks: 37.143.0.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:b8:38:d5:a8:0a:10:11:82:8f:bb:15:a8:e1:f1:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f6363d428b7915c108825f09706004b8ea3d4b5
Validity
Not Before: Jan 1 09:44:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=569e4695c7c52168d68dd5f389430c4f704c4564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a4:37:7d:1a:6b:56:e1:70:3e:ad:59:6f:ef:
39:a4:bd:59:a0:7e:02:5a:a5:9e:84:9f:42:ca:3b:
55:03:31:2c:aa:99:21:b2:7d:4b:df:d9:13:7e:c1:
39:ed:15:97:25:c6:6b:99:20:9c:e5:b7:0f:83:46:
5a:9d:0d:ac:06:c6:86:45:a1:58:83:e1:85:1c:93:
0c:89:c6:92:fa:e8:51:9f:6f:1f:1c:be:59:df:90:
cc:20:d1:38:6d:d7:5d:1c:23:1d:78:30:30:cb:c2:
c0:df:e8:c9:3e:a7:b2:7f:03:eb:4a:16:91:25:fe:
a1:82:96:17:18:b6:39:52:64:55:5a:83:23:0b:52:
59:e5:2f:dd:18:7e:23:7d:10:25:e4:c3:ef:c8:4a:
b6:2a:51:f7:ee:32:fe:89:5e:36:f5:2c:1c:4c:6e:
a9:d7:ca:36:f4:97:f6:ac:28:28:1f:c8:de:05:bb:
b9:0a:c5:ee:0a:27:ec:04:6f:68:fe:3e:56:e9:36:
74:4d:e7:d4:07:52:54:2d:c9:38:d5:66:6b:a2:86:
d4:14:09:14:a3:bf:49:ce:59:d5:dd:86:7a:a9:f7:
00:7c:3d:c6:21:11:f6:aa:bf:a8:8f:b6:90:f3:f6:
cc:a1:31:4d:0d:46:e9:28:63:99:fd:30:91:d2:43:
33:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:9E:46:95:C7:C5:21:68:D6:8D:D5:F3:89:43:0C:4F:70:4C:45:64
X509v3 Authority Key Identifier:
keyid:0F:63:63:D4:28:B7:91:5C:10:88:25:F0:97:06:00:4B:8E:A3:D4:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/Vp5GlcfFIWjWjdXziUMMT3BMRWQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.143.0.0/22
Signature Algorithm: sha256WithRSAEncryption
57:51:15:c7:eb:5f:57:6e:ed:97:d1:c0:37:ab:a0:70:e5:d7:
26:cd:8b:fb:c7:f0:8a:41:72:b2:31:cc:cb:4e:c8:14:6c:c7:
97:b0:fa:60:fc:66:d3:81:46:1b:11:1f:ea:6a:a2:dc:0b:6b:
d1:14:84:0d:00:19:36:c3:fc:be:1b:90:cf:08:31:97:8e:e2:
f0:6d:06:ad:99:09:2d:b3:37:a9:cc:1d:ae:9d:dd:29:63:cb:
e7:3a:59:42:43:8a:97:c3:9c:e7:8c:6a:b3:21:61:76:91:9a:
43:6f:f1:6f:d9:c8:6e:60:31:66:21:76:aa:e2:54:b7:d2:d1:
09:88:48:6c:86:4f:9c:c4:f9:0b:dc:7c:8a:3b:c2:81:86:bc:
62:f6:71:24:6e:4f:ec:6e:41:73:e8:b4:29:6f:7f:ee:8b:a0:
6c:2f:78:8f:fe:b4:cb:e2:c9:65:a9:7c:70:cc:a3:8d:1c:db:
e6:e2:10:67:9f:de:a6:98:6f:2d:e1:7e:ad:fc:2e:ba:20:8a:
47:71:b3:57:85:b2:78:12:b8:40:31:b0:69:27:5d:24:98:8d:
44:31:19:32:e8:37:0a:da:ec:61:33:05:38:d4:58:99:97:7e:
06:fc:89:01:30:4b:63:6e:84:a0:85:ba:9d:8f:76:8e:a6:e4:
70:7b:12:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:33 2023 by rpki-client on console-ams.rpki-client.org