Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/zHJ2iYGaK-wOgyQD4X8RhEfIU4U.roa
File: zHJ2iYGaK-wOgyQD4X8RhEfIU4U.roa (raw, json)
Hash identifier: zaXl2Y/TnO4X6Iw+oJRCyG1gVEJHhBpVtf+q14uXiC0=
Subject key identifier: CC:72:76:89:81:9A:2B:EC:0E:83:24:03:E1:7F:11:84:47:C8:53:85
Certificate issuer: /CN=5e1bf6a319da2489816aedba1b4fd0cc7ddf3e1e
Certificate serial: 01876F8F3390F836FFBE3C7DA0F63CF90CF9
Authority key identifier: 5E:1B:F6:A3:19:DA:24:89:81:6A:ED:BA:1B:4F:D0:CC:7D:DF:3E:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xhv2oxnaJImBau26G0_QzH3fPh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/zHJ2iYGaK-wOgyQD4X8RhEfIU4U.roa
Signing time: Tue 11 Apr 2023 09:04:28 +0000
ROA not before: Tue 11 Apr 2023 09:04:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39386
IP address blocks: 37.224.192.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Apr 2023 09:39:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:6f:8f:33:90:f8:36:ff:be:3c:7d:a0:f6:3c:f9:0c:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e1bf6a319da2489816aedba1b4fd0cc7ddf3e1e
Validity
Not Before: Apr 11 09:04:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cc727689819a2bec0e832403e17f118447c85385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fe:24:8e:3c:90:7f:90:3c:10:ad:4b:a5:0d:
55:5c:55:69:39:75:08:c8:6c:8b:48:8b:4a:35:45:
42:53:53:30:a0:47:f8:45:a8:1e:bc:e8:3b:47:3c:
d9:bc:f5:f3:ad:76:27:61:6c:d3:39:fe:24:50:05:
05:b0:00:30:09:eb:ca:61:2c:a1:65:61:2b:6d:5f:
ff:36:57:50:01:a4:d3:5a:a2:f5:26:88:a9:fb:fc:
55:81:6d:0e:be:d8:3a:3d:76:46:ea:ed:4e:0b:79:
9b:17:69:fe:11:ab:db:39:b5:07:45:a6:ab:45:d0:
28:ca:48:d8:33:96:56:9c:40:ba:41:79:bb:a5:95:
1a:91:ce:c7:5a:70:01:b7:85:6b:d5:9d:8b:72:89:
78:6e:d7:7c:ab:af:2c:a4:14:1e:7b:b8:2c:cd:8b:
47:a4:88:d3:24:45:72:30:d8:d2:c6:8d:47:fd:5b:
65:8d:7c:35:e8:57:17:26:62:6a:1e:0c:25:d1:f6:
b6:fc:52:79:84:88:0e:82:8f:b3:d8:18:e9:c4:7b:
ca:f5:6a:e8:b6:48:4b:bf:6d:df:9a:1d:f5:7a:ec:
8a:35:75:fb:bf:5f:04:bf:5a:49:ab:93:8b:f4:a1:
57:d7:8b:88:0f:72:1a:7e:f1:89:80:04:7c:2b:93:
b0:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:72:76:89:81:9A:2B:EC:0E:83:24:03:E1:7F:11:84:47:C8:53:85
X509v3 Authority Key Identifier:
keyid:5E:1B:F6:A3:19:DA:24:89:81:6A:ED:BA:1B:4F:D0:CC:7D:DF:3E:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xhv2oxnaJImBau26G0_QzH3fPh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/zHJ2iYGaK-wOgyQD4X8RhEfIU4U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.224.192.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:47:91:26:22:04:3a:c2:69:ac:6e:51:d5:13:42:f6:fb:e6:
58:40:21:f7:38:55:57:b1:f7:01:e2:3a:bc:7d:87:e8:71:82:
84:24:3e:0f:13:a5:35:f8:90:5a:84:4d:4d:bf:c7:3f:cf:b8:
52:df:b7:77:33:c9:6b:ea:f3:0f:ef:b5:09:ce:74:12:93:38:
fa:c3:f2:f2:60:4e:7b:3e:16:10:00:36:0a:42:39:99:5e:1c:
59:02:a7:70:86:39:5d:a2:26:68:0b:c7:9a:f3:e3:82:63:15:
fd:6c:55:43:1c:a5:95:f3:69:ef:6a:44:a3:42:70:be:28:f5:
c6:b0:c8:ae:77:83:5b:ad:89:6f:27:60:73:a2:3c:e2:ca:76:
bf:ef:33:6b:92:e5:ec:43:cf:71:94:41:bb:d5:af:33:9e:92:
cb:59:c8:e3:1b:2e:77:07:e5:25:cb:d5:ad:9f:92:50:aa:6b:
6a:02:52:22:14:03:e5:1e:ae:2a:0c:62:56:e3:f9:b9:c2:31:
86:96:a9:42:ad:e9:a4:48:f4:c8:24:fe:fc:4c:51:f3:b8:38:
2c:af:a0:89:96:4d:c1:77:af:12:f1:5e:dc:42:75:e6:45:43:
9a:e9:c1:a4:39:95:0b:89:96:d7:57:f8:42:4a:6e:32:c8:b8:
47:89:6f:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:08 2024 by rpki-client on console-ams.rpki-client.org