Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/xQSKRXX2yi64YOZXqMY4-CuJpHQ.roa
File: xQSKRXX2yi64YOZXqMY4-CuJpHQ.roa (raw, json)
Hash identifier: Vp/UgBv0ArMcX3TVI47ITHQAg8WPeUILZ9epRewZ34k=
Subject key identifier: C5:04:8A:45:75:F6:CA:2E:B8:60:E6:57:A8:C6:38:F8:2B:89:A4:74
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 0188298444E38539FD45A758EDAA47FF9279
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/xQSKRXX2yi64YOZXqMY4-CuJpHQ.roa
Signing time: Wed 17 May 2023 11:41:54 +0000
ROA not before: Wed 17 May 2023 11:41:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210654
IP address blocks: 37.128.205.0/24 maxlen: 24
37.128.204.0/24 maxlen: 24
37.128.206.0/24 maxlen: 24
37.128.207.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:29:84:44:e3:85:39:fd:45:a7:58:ed:aa:47:ff:92:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: May 17 11:41:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c5048a4575f6ca2eb860e657a8c638f82b89a474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:65:84:36:f8:ea:f6:80:0c:e2:87:2f:84:9d:
ff:08:b9:74:7d:00:35:37:63:ff:f8:90:c1:8c:99:
d9:8c:5e:e4:cb:17:53:c7:e9:2e:04:f4:22:7e:f6:
81:c7:a2:8a:7b:d9:65:54:fa:64:eb:0f:e1:be:c4:
a7:5d:c4:27:b4:1e:3a:ae:c0:06:07:97:a0:75:66:
ed:97:ad:fa:15:fe:d5:7c:57:77:6d:27:00:7e:e3:
7a:51:f4:69:3c:d4:a1:b1:8b:56:ce:b1:b3:ea:a2:
34:e8:cc:f9:5d:c3:82:22:d0:43:52:b2:da:9b:8a:
27:e9:f4:96:65:ae:14:14:a3:87:62:9f:1b:d6:ef:
58:fb:3a:66:d8:14:3d:b0:03:be:4b:f3:65:a4:9a:
16:31:29:4d:2e:d8:bb:ca:11:dc:35:f3:09:29:4c:
e7:9f:59:a1:35:42:d4:8b:ab:a8:25:08:73:b8:aa:
05:aa:33:35:69:e5:98:fc:c4:f1:bc:d4:9a:5a:8e:
5b:c1:c4:42:9d:9d:a2:b3:b3:77:4e:de:c4:e4:ef:
c7:32:1a:5c:7a:b3:c0:83:42:af:92:3e:f1:46:ae:
a6:e8:53:a3:40:22:72:fe:ef:0c:9d:5b:21:37:09:
f2:b8:d7:b6:f1:67:42:5e:e4:d8:df:80:d8:c1:16:
51:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:04:8A:45:75:F6:CA:2E:B8:60:E6:57:A8:C6:38:F8:2B:89:A4:74
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/xQSKRXX2yi64YOZXqMY4-CuJpHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.128.204.0/22
Signature Algorithm: sha256WithRSAEncryption
b8:2b:34:60:2e:8c:fe:29:34:7f:e6:a9:46:c4:ab:d4:a2:a5:
e4:58:fc:9c:3a:ad:37:fd:ae:83:79:b4:0c:c4:ba:c9:5d:28:
c9:3c:5b:89:19:ed:b4:44:90:68:19:33:25:f1:94:9a:bb:54:
6e:27:25:a3:9c:af:4e:d4:ef:64:f6:bd:04:92:7d:a2:1c:4d:
a7:78:aa:76:c9:91:1d:62:1a:26:2a:3c:04:d4:fc:f4:4e:28:
fa:89:83:f1:cd:8b:63:a5:80:45:fb:23:d4:38:b0:31:3b:a9:
fa:4d:b1:0d:32:8a:b5:dd:b3:11:a7:d8:fe:80:7e:fb:a5:49:
98:59:62:c7:26:9b:0c:cb:9b:59:15:0f:86:51:9a:65:e1:7e:
13:d0:81:07:a1:06:69:8d:bd:70:9d:21:21:88:5e:1c:4d:1f:
0a:03:34:04:62:b2:32:fb:06:a6:74:96:48:d3:8c:30:4d:62:
ba:d8:b6:91:6a:86:02:eb:57:38:f9:07:e1:11:7d:99:d1:66:
57:11:b8:8d:e4:96:7f:33:36:e2:ae:78:54:a0:ba:76:62:59:
d8:b3:a3:aa:b0:57:12:94:6e:78:0b:ea:5e:54:dc:ef:0a:96:
4c:56:83:f3:cf:d4:4c:34:b7:27:ed:e0:04:ec:12:37:fc:a1:
11:8b:fc:a9
-----BEGIN CERTIFICATE-----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Generated at Fri Jul 28 12:41:53 2023 by rpki-client on console-ams.rpki-client.org