Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/N7gttaUPeJ_3AHVmL-D9wI8P6xk.roa
File: N7gttaUPeJ_3AHVmL-D9wI8P6xk.roa (raw, json)
Hash identifier: 1uIDasLKp5oY4se6jFcGHVLjL2j506A8dIE+bbVSt80=
Subject key identifier: 37:B8:2D:B5:A5:0F:78:9F:F7:00:75:66:2F:E0:FD:C0:8F:0F:EB:19
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 01859BE5AF0128F50BC15D8EBDB09E611003
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/N7gttaUPeJ_3AHVmL-D9wI8P6xk.roa
Signing time: Tue 10 Jan 2023 13:36:39 +0000
ROA not before: Tue 10 Jan 2023 13:36:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15723
IP address blocks: 37.128.203.0/24 maxlen: 24
37.128.202.0/24 maxlen: 24
37.128.201.0/24 maxlen: 24
185.81.219.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:9b:e5:af:01:28:f5:0b:c1:5d:8e:bd:b0:9e:61:10:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Jan 10 13:36:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=37b82db5a50f789ff70075662fe0fdc08f0feb19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:85:de:42:d4:9a:94:4f:69:59:6a:5d:35:2a:
45:0f:71:ff:1f:58:67:c3:e0:e3:b4:c2:3c:d6:09:
1d:8b:69:c3:4c:1f:f0:7f:c2:9c:e2:07:e4:ee:0b:
b7:e6:e1:bc:b1:0e:f5:a6:fe:99:5c:a9:34:da:6f:
c6:3d:97:91:a9:38:06:61:2e:44:54:5d:f8:91:c7:
48:26:0c:c8:55:24:e9:88:6c:a4:ef:81:83:e5:f4:
43:ab:e5:64:4d:07:23:79:0f:ff:d2:f2:59:10:03:
b8:b2:ac:74:ff:89:40:71:07:c5:15:63:cd:7b:da:
d8:c3:9c:e5:6c:78:c0:b7:6e:5b:f9:08:20:77:95:
45:55:95:2f:e5:fa:44:5f:8f:b1:f8:85:a0:44:b4:
77:83:13:7a:89:78:7f:f6:d9:4f:e6:38:5c:78:54:
93:f7:3d:c0:02:6b:d7:e0:cd:f1:c2:dc:c4:11:d5:
40:02:b7:c4:ee:97:f8:9c:29:ec:d0:20:00:62:3b:
87:1a:5d:fc:34:76:42:a6:a3:26:6b:ad:27:13:70:
62:e7:86:e5:af:d7:cc:1e:3e:0c:b9:86:b4:98:31:
83:5b:64:dc:56:c2:a8:ad:da:88:69:3b:87:3c:95:
b2:69:27:b6:d4:1e:d4:ce:a0:ab:44:c0:04:24:d9:
ab:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:B8:2D:B5:A5:0F:78:9F:F7:00:75:66:2F:E0:FD:C0:8F:0F:EB:19
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/N7gttaUPeJ_3AHVmL-D9wI8P6xk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.128.201.0-37.128.203.255
185.81.219.0/24
Signature Algorithm: sha256WithRSAEncryption
64:74:c3:13:19:2c:08:ff:f2:ce:bf:33:37:02:51:22:a7:5c:
12:a7:4a:71:12:f8:9a:ad:21:3b:ce:30:8f:85:ed:6f:ea:75:
e1:1e:26:d9:fb:0e:6e:b6:45:6a:db:10:61:50:86:8f:14:e3:
cf:57:65:dd:1c:d7:06:a1:48:4f:dc:b8:cb:f7:22:be:e1:ae:
9d:30:2e:6f:28:b0:37:79:f9:c8:ea:5a:c6:8a:4c:bd:d2:ae:
58:25:3b:14:79:7b:7c:f4:93:35:3a:67:97:56:ab:82:f4:54:
3f:18:e0:d2:75:c1:cd:34:56:3d:7c:7d:56:dd:82:fb:65:25:
da:5d:83:1f:a1:7e:c0:62:af:7d:af:1b:77:6e:22:e3:e0:e2:
4c:cb:1d:a7:34:03:70:71:79:4b:94:3b:4f:1f:16:b7:7d:e8:
d3:08:8b:e7:06:7c:28:a2:6c:14:7d:84:7c:57:ee:a1:1d:0c:
80:82:6e:87:f8:19:04:1c:7a:ac:18:1e:e2:bb:81:1f:bd:00:
42:bc:82:4e:d5:bb:4a:0e:e5:0e:cd:91:5a:5c:b1:86:86:2f:
d1:8d:f6:96:27:54:cb:83:57:51:21:50:06:96:8a:27:f3:73:
b3:da:99:0a:52:42:12:0c:b1:d3:68:bc:6f:43:15:a4:b0:1f:
93:c7:fc:26
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:50 2023 by rpki-client on console-ams.rpki-client.org