Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/020d47-2cc0-436b-b9f9-b73bfccb4e08/1/UlL19gAtsNd_kOfctzFo7qeaeoE.roa
File: UlL19gAtsNd_kOfctzFo7qeaeoE.roa (raw, json)
Hash identifier: 1jFSlCDGl1VlMZ8owp4AiZHPl9Udr+gzZZU7O1n4YSo=
Subject key identifier: 52:52:F5:F6:00:2D:B0:D7:7F:90:E7:DC:B7:31:68:EE:A7:9A:7A:81
Certificate issuer: /CN=37dee6acbc782b8c7696a40b28e80339619d0f1b
Certificate serial: 01856D9407089CBBBB20EBFA687725BD1957
Authority key identifier: 37:DE:E6:AC:BC:78:2B:8C:76:96:A4:0B:28:E8:03:39:61:9D:0F:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N97mrLx4K4x2lqQLKOgDOWGdDxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/020d47-2cc0-436b-b9f9-b73bfccb4e08/1/UlL19gAtsNd_kOfctzFo7qeaeoE.roa
Signing time: Sun 01 Jan 2023 13:44:55 +0000
ROA not before: Sun 01 Jan 2023 13:44:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49173
IP address blocks: 185.6.32.0/22 maxlen: 22
37.26.252.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:94:07:08:9c:bb:bb:20:eb:fa:68:77:25:bd:19:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37dee6acbc782b8c7696a40b28e80339619d0f1b
Validity
Not Before: Jan 1 13:44:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5252f5f6002db0d77f90e7dcb73168eea79a7a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9e:1f:3f:be:5c:4f:d7:83:5f:67:7e:cc:af:
82:e6:90:ef:db:c4:6c:f5:77:43:43:29:19:e4:84:
51:50:d6:85:a7:c0:34:ef:9e:af:74:10:67:6d:ce:
06:16:64:6a:16:86:ba:36:c9:66:78:6f:b5:f3:7f:
e1:e9:06:8d:88:84:d3:cf:8e:d4:c8:ba:72:92:1a:
59:57:1a:f8:de:e6:a7:fd:89:8f:ef:8f:0e:fc:9a:
43:dd:50:d7:c1:c8:ae:99:90:c7:50:94:eb:86:78:
4c:be:8e:82:48:62:fc:e6:84:25:eb:91:20:9d:b0:
70:a2:3c:27:f4:4e:ae:e1:e9:8c:4b:31:32:a4:e8:
ea:28:5f:81:bc:3a:24:f1:a5:69:68:86:84:05:83:
6f:fc:93:9b:81:32:5d:50:a7:52:0d:5c:33:e6:b0:
b8:7d:5c:a9:a3:bc:00:b1:69:3b:5d:1c:cd:88:8f:
90:45:0d:a7:fd:2a:51:cc:10:88:55:46:d9:77:8d:
88:93:ca:dd:6b:91:af:d5:ae:d5:b6:ff:d7:e2:cb:
cf:1c:31:38:7a:44:a8:bc:ad:b6:fc:c3:61:25:c6:
f5:a4:e2:15:04:c0:7d:5e:f3:49:51:33:5e:53:f7:
3b:01:81:5c:0b:19:4c:38:68:c3:58:62:be:a1:bf:
3b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:52:F5:F6:00:2D:B0:D7:7F:90:E7:DC:B7:31:68:EE:A7:9A:7A:81
X509v3 Authority Key Identifier:
keyid:37:DE:E6:AC:BC:78:2B:8C:76:96:A4:0B:28:E8:03:39:61:9D:0F:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N97mrLx4K4x2lqQLKOgDOWGdDxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/020d47-2cc0-436b-b9f9-b73bfccb4e08/1/UlL19gAtsNd_kOfctzFo7qeaeoE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/020d47-2cc0-436b-b9f9-b73bfccb4e08/1/N97mrLx4K4x2lqQLKOgDOWGdDxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.26.252.0/22
185.6.32.0/22
Signature Algorithm: sha256WithRSAEncryption
06:60:c8:eb:7f:6a:70:1f:0a:b1:e3:7a:8f:1a:a7:29:e9:81:
13:9b:05:ab:39:1a:f9:25:ab:e6:79:ad:b3:f3:0b:1f:e0:78:
12:92:ed:ac:9b:3f:d9:78:07:22:ea:d0:ac:6c:28:b1:47:c7:
b0:4f:a8:2e:20:86:2b:1e:d7:fe:ef:d5:41:13:e2:60:22:44:
4b:10:d6:f0:6e:61:ac:33:8e:85:e2:ce:f5:f7:4e:35:31:54:
3c:64:03:54:f9:a7:48:eb:a7:75:04:60:23:ab:af:1e:30:00:
5a:ba:8e:36:08:71:7a:45:db:04:54:fb:55:c1:d6:ac:61:44:
48:b6:00:c8:56:03:e4:0b:7a:58:5b:69:d4:ab:51:b7:d6:7c:
96:3f:37:c0:37:94:63:15:28:cc:fd:74:36:94:bd:97:af:a1:
5b:68:27:b4:2d:e0:1c:bc:71:7b:70:dc:70:ac:2b:49:b2:e5:
db:63:0b:73:04:70:9c:43:32:cc:4e:14:0a:28:e8:3d:1e:42:
de:8e:fe:a8:1f:3c:a8:b6:a3:88:1b:11:e2:2d:b0:5e:0b:05:
69:43:8a:11:1b:a7:e5:a9:4a:ae:41:29:5d:78:d3:37:9c:75:
ad:e3:9e:99:bc:19:f9:b4:aa:a0:8c:90:39:67:c9:da:61:d4:
63:db:76:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:40:21 2024 by rpki-client on console-fra.rpki-client.org