Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2604e0-91fa-4fe9-bb28-93a6192b1785/1/ApXmkBhJFMscEP6gl-SQ-0yC3Ns.roa
File: ApXmkBhJFMscEP6gl-SQ-0yC3Ns.roa (raw, json)
Hash identifier: C+8ESQQGBxblRistpyf+Gyw3EywcqIpNaWOYknK97vY=
Subject key identifier: 02:95:E6:90:18:49:14:CB:1C:10:FE:A0:97:E4:90:FB:4C:82:DC:DB
Certificate issuer: /CN=7d43b0ec79951d5d5580133e5329a90f2fee1c5b
Certificate serial: 0185723A26E9057E6DDDC58BE9F0A9D273E4
Authority key identifier: 7D:43:B0:EC:79:95:1D:5D:55:80:13:3E:53:29:A9:0F:2F:EE:1C:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fUOw7HmVHV1VgBM-UympDy_uHFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/2604e0-91fa-4fe9-bb28-93a6192b1785/1/ApXmkBhJFMscEP6gl-SQ-0yC3Ns.roa
Signing time: Mon 02 Jan 2023 11:24:51 +0000
ROA not before: Mon 02 Jan 2023 11:24:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61400
IP address blocks: 37.130.195.0/24 maxlen: 24
185.45.82.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:3a:26:e9:05:7e:6d:dd:c5:8b:e9:f0:a9:d2:73:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d43b0ec79951d5d5580133e5329a90f2fee1c5b
Validity
Not Before: Jan 2 11:24:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0295e690184914cb1c10fea097e490fb4c82dcdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a7:5b:f4:e0:fd:52:b3:ce:e1:fe:2a:d7:5a:
23:e8:0e:ef:71:ff:9a:c3:66:f9:61:df:7f:17:fa:
85:cf:50:3e:62:90:7b:d1:33:9d:a4:7e:c3:ee:45:
aa:f4:1e:79:c9:f3:34:27:9c:7a:b8:55:8c:09:7a:
f5:55:61:b2:f9:0d:aa:2b:de:1c:c1:a4:3f:93:e1:
a9:a7:2d:a6:fc:47:a1:60:eb:cb:52:d1:14:19:e3:
2d:50:87:aa:f1:83:a7:02:fb:76:03:92:3c:70:21:
7c:bd:9e:c0:79:d2:1f:44:a6:02:c2:c2:31:4d:8f:
af:89:fc:12:d0:2b:89:38:8c:b2:52:2f:7c:9b:ef:
8f:cd:2c:86:47:88:7a:e7:e8:4f:5b:e0:19:00:96:
db:e5:09:c8:75:31:e4:c3:9f:7c:97:43:5f:46:1b:
c8:be:49:31:50:83:ac:1a:26:42:74:0f:22:14:5e:
3f:27:f4:3b:eb:b6:93:98:ac:d3:8c:4b:99:f8:c5:
aa:ba:cc:58:8c:cc:81:5f:11:26:35:1d:93:cf:6d:
cf:b3:75:28:fb:8a:e1:77:1a:24:a8:62:88:74:1f:
8c:d1:6c:f6:dd:24:6c:49:e8:92:ef:e9:bb:30:46:
ef:f5:2c:60:4d:f8:54:8a:18:0a:fb:3d:b4:0f:5a:
0f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:95:E6:90:18:49:14:CB:1C:10:FE:A0:97:E4:90:FB:4C:82:DC:DB
X509v3 Authority Key Identifier:
keyid:7D:43:B0:EC:79:95:1D:5D:55:80:13:3E:53:29:A9:0F:2F:EE:1C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fUOw7HmVHV1VgBM-UympDy_uHFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2604e0-91fa-4fe9-bb28-93a6192b1785/1/ApXmkBhJFMscEP6gl-SQ-0yC3Ns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2604e0-91fa-4fe9-bb28-93a6192b1785/1/fUOw7HmVHV1VgBM-UympDy_uHFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.130.195.0/24
185.45.82.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:84:a9:83:48:da:a8:b1:71:e9:d1:46:40:18:fb:1a:c4:d6:
bf:4b:31:9d:40:33:05:f6:ab:57:c6:a1:11:b4:ae:50:e3:5e:
2d:6f:c4:55:b1:b4:03:d2:cd:94:63:93:4a:60:3f:6c:b2:66:
36:ce:2a:94:a7:09:83:8c:64:44:10:2a:16:36:49:dd:08:30:
af:39:7b:65:dc:6f:1f:6e:45:5a:5f:05:ee:10:4d:40:28:4a:
d4:9f:69:08:69:e0:11:bc:ea:4b:61:87:25:ac:6c:9f:85:93:
59:1a:70:85:1f:d3:6d:32:be:62:84:ae:fb:36:24:31:90:80:
8d:63:6d:24:9e:4f:d2:81:27:42:8f:77:b1:9e:be:87:09:54:
e4:47:ba:76:f0:58:58:1f:cd:4e:03:cb:a2:28:ce:4c:cb:d3:
f0:4f:b9:04:04:65:3e:04:8e:54:d4:57:ba:01:73:16:86:8f:
14:3a:88:31:69:29:d2:52:87:3f:ea:04:97:ab:59:47:48:ca:
6a:46:9a:a0:10:85:d7:9a:7d:3a:ae:10:97:6f:97:d0:be:8d:
46:22:b7:47:62:cf:75:28:61:47:e1:9e:2d:b3:cc:92:19:47:
01:ae:5b:36:90:94:e0:3e:c4:ad:58:75:f7:53:2e:50:ca:a4:
e3:6c:17:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:04 2024 by rpki-client on console-ams.rpki-client.org