Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/w-_eh5T_ow7L14X091s54wt4dfU.roa
File: w-_eh5T_ow7L14X091s54wt4dfU.roa (raw, json)
Hash identifier: d5K9Qhw5CTp8fSwaZm4QepZAumSg1tCLBj0MvFYhYeI=
Subject key identifier: C3:EF:DE:87:94:FF:A3:0E:CB:D7:85:F4:F7:5B:39:E3:0B:78:75:F5
Certificate issuer: /CN=0f6363d428b7915c108825f09706004b8ea3d4b5
Certificate serial: 01920E381358587C8075DEA2DFBC1D1D939F
Authority key identifier: 0F:63:63:D4:28:B7:91:5C:10:88:25:F0:97:06:00:4B:8E:A3:D4:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/w-_eh5T_ow7L14X091s54wt4dfU.roa
Signing time: Fri 20 Sep 2024 06:56:48 +0000
ROA not before: Fri 20 Sep 2024 06:56:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 37.143.4.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 23 Sep 2024 15:27:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:0e:38:13:58:58:7c:80:75:de:a2:df:bc:1d:1d:93:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f6363d428b7915c108825f09706004b8ea3d4b5
Validity
Not Before: Sep 20 06:56:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c3efde8794ffa30ecbd785f4f75b39e30b7875f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6d:1d:f9:91:67:14:16:5c:88:4b:7f:67:31:
08:53:b5:f1:b3:6a:bd:e1:33:cc:ce:72:77:1e:dc:
f1:ff:f7:48:d9:c0:e9:1d:b9:90:f7:0b:29:78:86:
ee:6b:a6:59:60:af:d9:9e:d7:d9:e8:18:b6:ae:05:
13:b8:eb:5d:f9:3a:e0:fc:63:84:7b:29:ff:f8:62:
34:e5:34:66:37:28:5a:bf:c9:d3:06:a3:bb:85:17:
d1:b3:f5:70:8e:54:b7:7a:9b:c5:22:7b:0a:1e:f2:
f7:38:7b:96:ab:36:0f:0f:0d:fb:de:4e:48:d0:6a:
db:be:a2:fc:7b:80:02:51:85:57:7c:cc:05:ec:33:
57:f7:f6:43:66:05:bd:f5:fa:78:bf:2b:a6:0f:6f:
81:ad:38:b5:07:d1:7d:fc:1b:ee:8c:35:32:0f:bb:
a2:1d:42:11:a1:f1:45:37:99:10:24:0c:a5:dd:b8:
5f:f2:5a:8d:a9:c9:7a:e1:5c:42:e6:32:93:5b:f7:
4a:31:2a:a6:a3:4f:86:42:b1:8d:42:18:2e:fc:ed:
30:cf:7b:43:22:f0:42:dc:dc:39:3d:38:77:70:bd:
3b:e0:7c:55:70:9a:9d:cc:9c:ce:10:5b:72:d9:d8:
52:bd:68:a6:ed:be:72:44:49:62:1d:7e:3a:62:fd:
6c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:EF:DE:87:94:FF:A3:0E:CB:D7:85:F4:F7:5B:39:E3:0B:78:75:F5
X509v3 Authority Key Identifier:
keyid:0F:63:63:D4:28:B7:91:5C:10:88:25:F0:97:06:00:4B:8E:A3:D4:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/w-_eh5T_ow7L14X091s54wt4dfU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.143.4.0/22
Signature Algorithm: sha256WithRSAEncryption
cf:73:82:3e:ff:3c:7e:a6:44:7e:9a:3e:65:90:21:41:7c:77:
94:4f:0c:0a:cf:01:1e:a3:43:e8:16:26:24:6c:19:0b:79:bd:
c1:e1:31:67:b7:b4:2f:ba:0d:79:98:66:05:4e:37:fe:70:14:
34:af:36:65:76:b5:d8:c7:29:9e:66:7b:67:f0:a0:d8:de:6e:
dc:fb:35:74:3b:f3:54:3c:ea:28:26:99:2d:0b:d4:43:25:ec:
7d:2f:cc:aa:03:18:b2:68:eb:59:d5:94:ff:4a:f6:b1:88:1b:
98:de:3a:21:1d:54:60:26:5a:fb:b4:75:9c:61:65:a6:77:06:
33:a0:ca:60:d4:ab:35:15:94:ee:30:9f:f3:43:bc:24:20:1f:
48:0a:70:af:81:c4:af:48:5d:ec:5d:04:55:59:a3:68:14:bf:
94:74:e2:15:65:c5:4c:b2:29:a2:a9:47:df:ea:61:88:c6:16:
3b:99:4c:be:83:e4:1b:43:5c:0e:f1:13:65:b1:27:99:4a:98:
aa:ba:dc:4c:47:fc:ab:87:b7:a2:69:90:d6:03:50:84:45:9b:
ac:0b:ef:d5:48:de:25:eb:08:ae:f7:ca:62:80:e9:3c:bf:de:
c0:38:3c:6b:32:78:8c:da:d4:14:45:98:e6:5d:f7:b8:6a:a1:
16:69:16:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:37:40 2025 by rpki-client