Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/cd2983-218c-457d-811b-5d42e1fa45b9/1/6phTxOGLrwIaWXXQ1RcceBtF3j8.roa
File: 6phTxOGLrwIaWXXQ1RcceBtF3j8.roa (raw, json)
Hash identifier: ZQNhSS8Ce65L+xBnS54Er6Dz3dr+0rJljECIn52yBsI=
Subject key identifier: EA:98:53:C4:E1:8B:AF:02:1A:59:75:D0:D5:17:1C:78:1B:45:DE:3F
Certificate issuer: /CN=bb8321c05d501edb499190c0c4a3089d246c5b76
Certificate serial: 0185720C678BE07102A570BB3CADC0D1D005
Authority key identifier: BB:83:21:C0:5D:50:1E:DB:49:91:90:C0:C4:A3:08:9D:24:6C:5B:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4MhwF1QHttJkZDAxKMInSRsW3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/cd2983-218c-457d-811b-5d42e1fa45b9/1/6phTxOGLrwIaWXXQ1RcceBtF3j8.roa
Signing time: Mon 02 Jan 2023 10:34:53 +0000
ROA not before: Mon 02 Jan 2023 10:34:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211439
IP address blocks: 37.44.215.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:0c:67:8b:e0:71:02:a5:70:bb:3c:ad:c0:d1:d0:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8321c05d501edb499190c0c4a3089d246c5b76
Validity
Not Before: Jan 2 10:34:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ea9853c4e18baf021a5975d0d5171c781b45de3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:7c:20:7b:ba:fa:97:eb:98:69:a8:3d:25:92:
c5:2f:dd:69:83:02:1d:b4:02:ff:7c:ec:05:66:de:
d4:8c:4a:e0:e1:36:ed:79:3c:b0:75:a0:be:c6:45:
2d:6c:04:41:42:1d:bb:bb:4a:0c:6e:9b:c9:dc:69:
5b:78:fb:05:34:50:e0:12:58:70:f5:a6:d5:c7:bb:
02:d6:29:bd:e0:cd:34:3e:fe:68:a9:9b:ff:48:51:
a8:89:3b:70:37:0c:27:f0:c5:d4:56:c5:36:f2:e2:
e4:15:d0:85:bf:71:2a:e7:4e:3c:73:5f:93:c7:52:
68:7a:e1:14:62:29:76:17:a6:ff:af:1d:c2:71:19:
d1:61:18:21:26:9a:a5:18:77:62:80:23:77:1e:f1:
56:44:50:73:d3:cd:9e:65:cb:61:02:26:46:e5:be:
89:a1:a7:79:32:cf:a0:22:9d:68:5b:5f:53:2d:c9:
70:37:d1:1a:d7:b8:c2:0d:61:34:bc:fe:23:08:1c:
88:ec:ce:f6:fd:3e:d8:e2:a6:26:f6:67:24:9f:f3:
5f:81:00:11:06:a9:44:c9:45:8a:9e:1e:7a:10:2d:
e6:38:b0:f9:b3:5f:16:1d:04:be:9f:f7:5b:1d:28:
92:fc:94:9d:1f:a1:7b:35:a4:a3:34:31:fb:92:6e:
75:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:98:53:C4:E1:8B:AF:02:1A:59:75:D0:D5:17:1C:78:1B:45:DE:3F
X509v3 Authority Key Identifier:
keyid:BB:83:21:C0:5D:50:1E:DB:49:91:90:C0:C4:A3:08:9D:24:6C:5B:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4MhwF1QHttJkZDAxKMInSRsW3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/cd2983-218c-457d-811b-5d42e1fa45b9/1/6phTxOGLrwIaWXXQ1RcceBtF3j8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/cd2983-218c-457d-811b-5d42e1fa45b9/1/u4MhwF1QHttJkZDAxKMInSRsW3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.44.215.0/24
Signature Algorithm: sha256WithRSAEncryption
84:14:fe:26:51:86:46:a1:82:e8:f3:e4:e7:3a:19:74:3d:c4:
35:15:37:50:e4:7b:0a:ad:e4:d9:ad:45:b7:86:3c:a8:f4:4c:
33:8e:f7:38:41:c0:9d:d5:ba:ec:28:06:b9:f7:2a:f5:0a:a9:
c1:31:d4:33:84:ca:ae:88:a8:01:33:ca:ff:64:01:56:f1:b9:
d5:5a:08:81:bf:da:f0:9a:71:c6:48:ac:4d:d1:28:bc:40:b4:
b6:a3:55:42:22:d0:46:1e:0b:e8:2b:57:03:8e:b0:89:e1:82:
34:52:66:0d:73:23:32:5a:64:04:fc:23:e7:5d:27:86:38:b1:
a0:b5:28:fa:53:39:48:af:7e:c3:cf:1f:4c:b4:7f:88:2a:28:
48:65:22:ad:81:96:da:a0:ec:bb:1f:26:4c:02:fe:e4:16:9d:
da:c4:9c:f7:78:47:2c:62:75:79:91:34:43:c7:5b:2b:e3:84:
ba:ce:f5:c9:08:b2:ad:8b:63:e3:0b:51:11:7f:57:ec:63:d4:
50:60:3e:1f:28:f7:1c:df:f5:e2:94:2e:76:11:19:9b:73:60:
90:e0:b1:77:c9:08:b5:71:b0:2c:00:3e:d5:bf:ec:01:46:19:
1d:e3:07:70:47:68:40:77:00:99:10:b0:b2:34:f5:e7:a2:ec:
66:56:18:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:47 2023 by rpki-client on console-fra.rpki-client.org