Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/5k0HXqp8e_Do7OEXgiG200y42Vo.roa
File: 5k0HXqp8e_Do7OEXgiG200y42Vo.roa (raw, json)
Hash identifier: YjRqZAXEhsxKGHtc1+H2+R7vVsrs8VgpJFRz1LsvcJM=
Subject key identifier: E6:4D:07:5E:AA:7C:7B:F0:E8:EC:E1:17:82:21:B6:D3:4C:B8:D9:5A
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 0185A15071232C2B3979CA708E45D80D4D22
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/5k0HXqp8e_Do7OEXgiG200y42Vo.roa
Signing time: Wed 11 Jan 2023 14:51:21 +0000
ROA not before: Wed 11 Jan 2023 14:51:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15723
IP address blocks: 37.128.203.0/24 maxlen: 24
37.128.202.0/24 maxlen: 24
37.128.201.0/24 maxlen: 24
185.81.219.0/24 maxlen: 24
185.81.216.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a1:50:71:23:2c:2b:39:79:ca:70:8e:45:d8:0d:4d:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Jan 11 14:51:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e64d075eaa7c7bf0e8ece1178221b6d34cb8d95a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ae:0b:39:ff:47:82:e3:56:2d:26:d6:7f:a2:
07:8d:0c:07:92:a4:80:3c:94:1a:8d:6c:5e:14:09:
06:a6:7d:30:44:31:31:88:0b:9e:3b:1e:3c:4f:d1:
88:de:b9:7c:34:02:a3:f8:39:84:6e:8c:77:09:13:
41:b8:79:8b:d1:38:4c:a9:97:19:d6:4b:58:38:5f:
d3:a6:90:05:9b:12:f2:87:0f:12:39:1f:36:9c:43:
48:33:90:a0:ac:a7:6a:2a:7d:10:ce:93:ba:04:dc:
97:80:d9:d6:b6:10:ae:1d:a5:6e:78:8d:c7:f1:ad:
fa:3d:a4:06:f0:94:d5:fe:66:89:34:1f:d0:67:b3:
11:f6:a4:8f:17:5f:8a:db:44:a7:7d:91:fb:39:39:
60:a6:68:d7:1c:e7:bb:ed:ff:80:4a:e5:b1:4e:b4:
a6:fd:48:da:9b:27:c1:ee:88:70:8d:21:23:9c:73:
65:90:07:3f:77:83:ce:27:c5:95:68:93:3f:41:31:
59:e5:aa:42:39:82:aa:b0:91:17:ca:48:06:87:e5:
43:a6:bc:88:6d:37:08:c7:c7:57:11:be:be:59:19:
d1:51:f9:f2:f2:48:b4:59:50:97:46:41:0f:9a:83:
b4:e2:75:55:08:8b:c3:d5:6a:7a:39:cf:40:06:16:
3f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:4D:07:5E:AA:7C:7B:F0:E8:EC:E1:17:82:21:B6:D3:4C:B8:D9:5A
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/5k0HXqp8e_Do7OEXgiG200y42Vo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.128.201.0-37.128.203.255
185.81.216.0/24
185.81.219.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:c2:7c:25:88:ef:9b:80:98:22:60:8c:70:7e:70:38:55:ba:
46:09:34:b4:70:85:66:13:6e:7e:1b:2d:47:c8:45:fb:9a:1d:
b8:91:1d:4e:9c:3f:3a:03:f1:92:9d:08:51:7c:78:63:a7:90:
f1:72:0b:2f:35:eb:aa:a9:98:70:81:2d:28:d3:89:9d:04:95:
46:89:dc:90:ec:22:01:1a:68:21:d6:79:bb:f7:49:d8:b4:39:
78:b8:3d:cc:c8:75:44:ed:56:2f:6a:01:ba:ba:6e:ba:09:c4:
86:33:c4:19:ce:2e:85:b0:90:a5:2c:d1:29:0b:84:9d:f2:fe:
c2:f7:c1:6b:1e:98:14:9f:74:6e:1e:4d:cd:c6:58:d0:f5:c2:
b0:f2:c1:65:81:f7:91:a3:19:c3:d5:17:93:66:91:90:6f:09:
3f:fb:99:e1:81:79:c5:cf:54:49:a6:83:4f:85:d8:24:a1:86:
50:7a:b4:1e:43:ab:0f:5b:fb:1e:9e:b7:bb:95:0f:5e:f3:d6:
5f:c1:e5:49:e6:87:72:dc:d6:96:75:87:4b:78:f0:11:b0:ff:
da:ca:fd:af:3c:b8:4b:b6:ae:5f:35:8b:49:40:d9:56:04:f8:
91:dc:71:07:e8:4a:8c:77:3e:67:70:44:f3:18:e6:37:e6:69:
23:a1:c2:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:50 2023 by rpki-client on console-ams.rpki-client.org