Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/46b155-8f43-4df2-8b81-5fa287d545e8/1/wFjDDSoMktF4_l4O_Fl68as5u8I.roa
File: wFjDDSoMktF4_l4O_Fl68as5u8I.roa (raw, json)
Hash identifier: twFXMLC9dQV2xCw/JVzXkq/yXV0kXPxVIGTjv05BxuA=
Subject key identifier: C0:58:C3:0D:2A:0C:92:D1:78:FE:5E:0E:FC:59:7A:F1:AB:39:BB:C2
Certificate issuer: /CN=2f1bd749074f6f977265a1d06c3b1d93b1d358cd
Certificate serial: 01856B40FC1E01DA18F2D8E0B1087BC05A84
Authority key identifier: 2F:1B:D7:49:07:4F:6F:97:72:65:A1:D0:6C:3B:1D:93:B1:D3:58:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxvXSQdPb5dyZaHQbDsdk7HTWM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/46b155-8f43-4df2-8b81-5fa287d545e8/1/wFjDDSoMktF4_l4O_Fl68as5u8I.roa
Signing time: Sun 01 Jan 2023 02:54:59 +0000
ROA not before: Sun 01 Jan 2023 02:54:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13231
IP address blocks: 37.9.252.0/24 maxlen: 24
37.9.252.0/23 maxlen: 23
37.9.253.0/24 maxlen: 24
37.9.255.0/24 maxlen: 24
37.9.254.0/23 maxlen: 23
37.9.254.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:40:fc:1e:01:da:18:f2:d8:e0:b1:08:7b:c0:5a:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f1bd749074f6f977265a1d06c3b1d93b1d358cd
Validity
Not Before: Jan 1 02:54:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c058c30d2a0c92d178fe5e0efc597af1ab39bbc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a5:f7:fb:b6:ea:24:0e:dc:af:94:2e:df:92:
98:a7:fa:82:18:19:d5:67:3e:40:0f:29:68:32:f3:
01:da:56:27:ee:9c:fb:1b:b0:02:ab:bc:1a:f2:74:
62:f1:c7:72:5d:d1:54:b5:67:ef:59:52:e2:d8:05:
e0:0e:a4:e6:b3:7e:2f:ae:43:a1:e6:d0:3c:58:cf:
51:fc:25:89:a2:07:1d:04:6d:a7:77:b0:94:2d:5e:
4b:f1:5f:bf:31:4c:99:44:fe:0b:f0:32:b2:41:98:
40:24:53:2c:8e:0e:3a:70:f3:05:03:59:a7:9c:5a:
8a:30:4a:59:bf:78:fe:fa:a5:4d:73:b3:6b:bb:d0:
78:5b:46:88:b3:90:3a:84:9d:eb:cb:0f:a1:00:9d:
7f:4c:af:95:fd:83:c0:f1:53:5a:9f:00:f7:2b:44:
cb:67:10:14:68:ec:43:b1:5b:2a:51:34:d0:48:ae:
eb:0a:7e:2a:0a:51:a0:51:46:aa:c9:fb:b6:b6:c6:
38:0c:fd:2f:2f:8a:d0:17:5e:f9:02:33:29:ae:84:
81:97:81:de:be:fc:83:a9:c0:ff:b3:b0:d7:e6:3a:
b3:dc:c5:34:53:ce:14:7b:60:29:dd:4f:4a:d4:df:
74:0d:ed:4b:6a:92:13:36:46:52:4d:15:63:d1:49:
37:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:58:C3:0D:2A:0C:92:D1:78:FE:5E:0E:FC:59:7A:F1:AB:39:BB:C2
X509v3 Authority Key Identifier:
keyid:2F:1B:D7:49:07:4F:6F:97:72:65:A1:D0:6C:3B:1D:93:B1:D3:58:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxvXSQdPb5dyZaHQbDsdk7HTWM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/46b155-8f43-4df2-8b81-5fa287d545e8/1/wFjDDSoMktF4_l4O_Fl68as5u8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/46b155-8f43-4df2-8b81-5fa287d545e8/1/LxvXSQdPb5dyZaHQbDsdk7HTWM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.9.252.0/22
Signature Algorithm: sha256WithRSAEncryption
57:67:1d:9e:58:ee:60:15:7b:7b:94:7a:66:8a:78:54:76:c1:
97:3d:cc:26:87:db:7b:88:66:b7:57:7c:d8:10:8a:45:ff:76:
99:79:ad:1d:60:95:ab:d4:72:d3:f5:84:9b:13:a2:17:b1:af:
70:ea:ed:01:64:1e:dc:1a:20:cf:74:c2:c1:9b:d8:c6:64:93:
fe:33:a2:53:aa:01:95:41:a2:b2:67:56:2a:26:fb:33:4b:9f:
0c:35:4a:b0:ef:cb:a4:a6:ce:fa:da:ca:0f:44:fa:e5:c7:a9:
23:ca:76:62:43:bd:ac:85:12:db:9f:2a:c1:9f:75:20:82:c3:
12:87:40:05:d0:51:0f:17:55:e1:ce:a5:2f:e7:86:52:55:0d:
b4:0e:57:3f:d7:93:fc:34:91:06:1a:4b:03:ff:3b:1e:64:21:
65:9c:19:5b:1f:b9:0b:1c:5a:59:a3:dd:02:a4:50:35:5f:60:
10:99:bf:7c:2f:ab:a4:31:4c:78:cd:e3:25:ff:f6:9b:ad:f4:
ad:e9:c4:bb:7d:76:15:6e:1b:57:1a:44:ea:2a:39:23:06:5c:
62:da:56:e3:5f:7c:4b:81:14:c9:4c:a1:1e:cd:d4:49:98:46:
76:61:33:f7:28:bf:a6:83:a3:5b:a5:2a:02:ea:ac:73:66:a5:
70:b7:0b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:36 2024 by rpki-client on console-fra.rpki-client.org