Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/mC1beeD-YvTh9QvotIQORrXdLNc.roa
File: mC1beeD-YvTh9QvotIQORrXdLNc.roa (raw, json)
Hash identifier: J97bGY12wkEkBwaLvu+cVqP4pp9oX2QAa/F4YVYFLCE=
Subject key identifier: 98:2D:5B:79:E0:FE:62:F4:E1:F5:0B:E8:B4:84:0E:46:B5:DD:2C:D7
Certificate issuer: /CN=25e4aed3ef72bee3141660d1149e16d079205f3c
Certificate serial: 018C35E78768AF473D7B329417E54B8E4E02
Authority key identifier: 25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/mC1beeD-YvTh9QvotIQORrXdLNc.roa
Signing time: Mon 04 Dec 2023 17:36:54 +0000
ROA not before: Mon 04 Dec 2023 17:36:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 37.1.147.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:29:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:35:e7:87:68:af:47:3d:7b:32:94:17:e5:4b:8e:4e:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25e4aed3ef72bee3141660d1149e16d079205f3c
Validity
Not Before: Dec 4 17:36:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=982d5b79e0fe62f4e1f50be8b4840e46b5dd2cd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d8:f0:26:ed:b5:7a:9f:b3:81:2f:e8:ed:a3:
70:75:16:1d:bd:0d:57:5a:c6:66:3f:eb:74:88:d9:
4f:f6:a3:3f:76:a4:4f:51:76:2b:c5:a5:7b:34:f7:
e3:f8:1b:36:aa:7e:c9:13:94:39:06:1f:cb:dd:e3:
88:8e:fc:ed:6d:a9:1e:09:16:f3:de:79:3f:ed:1a:
83:35:78:ba:2c:bd:f7:70:26:78:ac:6f:fd:49:7c:
5a:80:8e:bd:52:ae:f4:cd:e3:a7:23:4f:56:4e:b7:
1f:2a:17:52:19:da:46:5c:c9:f0:2b:45:63:87:a4:
c8:6a:43:2b:16:f4:88:3a:ce:98:7f:0d:c2:66:5c:
c1:56:a1:ee:bf:03:98:3a:4d:ad:79:b7:43:29:93:
20:ab:89:39:a5:74:48:ad:8c:3d:24:7e:1b:17:75:
b1:95:38:8f:2c:57:15:b0:0f:6b:6d:28:ae:2d:62:
c0:2b:de:b0:74:a5:d4:44:d6:f3:be:22:8f:0e:ab:
77:13:cb:c5:f1:ed:30:e5:61:81:59:b3:2f:ce:50:
9d:24:6a:91:e8:0d:ad:8b:d4:67:14:5e:94:6f:f5:
6d:d9:47:16:6a:78:6c:23:35:b3:ae:ce:ea:fd:41:
fe:d9:26:fb:21:de:55:0b:16:c1:48:bd:9e:ab:94:
4e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:2D:5B:79:E0:FE:62:F4:E1:F5:0B:E8:B4:84:0E:46:B5:DD:2C:D7
X509v3 Authority Key Identifier:
keyid:25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/mC1beeD-YvTh9QvotIQORrXdLNc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.1.147.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:97:d3:db:ed:a0:3a:5e:37:a8:64:39:17:2e:f6:70:21:52:
2d:ef:5a:50:3a:01:e5:7d:e6:71:6b:86:cb:eb:6e:c4:53:0d:
08:32:84:d7:94:ee:1e:3c:ba:8e:8a:3e:4c:01:37:b7:74:20:
6b:97:c5:1b:75:e5:4f:90:ad:71:30:d0:1f:2d:33:db:fd:f5:
25:70:16:f0:f3:c4:78:f6:51:81:c0:de:78:76:33:5c:29:de:
ca:53:a5:30:7d:e3:2d:6a:73:50:63:cc:f9:7f:2f:3a:08:5f:
f0:64:87:4b:8c:fc:21:e7:e2:83:5d:7b:b5:20:1f:a8:95:4d:
b5:5a:6d:1b:e0:f8:6b:5d:21:44:10:60:63:e3:10:60:93:dd:
e8:de:ff:f1:c2:16:87:28:23:6e:96:0c:de:ba:e4:de:83:20:
0a:37:a1:e9:ea:c6:73:b8:bc:95:db:3b:1d:9a:5f:ca:5a:b1:
c9:a8:06:8d:73:31:d1:71:53:36:59:f8:13:24:79:56:6b:81:
cd:f5:30:a8:94:ff:2b:0c:03:8e:65:f5:d7:98:b1:77:cf:5d:
01:f4:55:3d:24:d0:bb:4e:b9:dc:34:fc:9f:f4:a3:40:4f:de:
b4:0f:88:d9:70:e8:95:39:24:97:74:c4:d3:8b:9f:e7:89:73:
e3:c1:10:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:08 2024 by rpki-client on console-ams.rpki-client.org