Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2604e0-91fa-4fe9-bb28-93a6192b1785/1/MsvRpJZUK3TJZKRFuytg1Ok04c4.roa
File: MsvRpJZUK3TJZKRFuytg1Ok04c4.roa (raw, json)
Hash identifier: +GiwKyCsusyoIubKhZxcB5PuQNnm62riyHtb1hH30GY=
Subject key identifier: 32:CB:D1:A4:96:54:2B:74:C9:64:A4:45:BB:2B:60:D4:E9:34:E1:CE
Certificate issuer: /CN=7d43b0ec79951d5d5580133e5329a90f2fee1c5b
Certificate serial: 01908833DC9EE1978D17BC99C547917D5BF8
Authority key identifier: 7D:43:B0:EC:79:95:1D:5D:55:80:13:3E:53:29:A9:0F:2F:EE:1C:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fUOw7HmVHV1VgBM-UympDy_uHFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/2604e0-91fa-4fe9-bb28-93a6192b1785/1/MsvRpJZUK3TJZKRFuytg1Ok04c4.roa
Signing time: Sat 06 Jul 2024 13:20:18 +0000
ROA not before: Sat 06 Jul 2024 13:20:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58318
IP address blocks: 37.130.196.0/24 maxlen: 24
37.130.197.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 15 Jul 2024 13:45:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:88:33:dc:9e:e1:97:8d:17:bc:99:c5:47:91:7d:5b:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d43b0ec79951d5d5580133e5329a90f2fee1c5b
Validity
Not Before: Jul 6 13:20:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=32cbd1a496542b74c964a445bb2b60d4e934e1ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0c:f3:98:0b:0f:90:1b:46:84:98:ee:4f:c0:
79:c1:bc:8b:d1:92:5c:f2:9a:10:5f:2f:4f:bd:e6:
a2:ca:3b:3a:5a:9b:10:c8:54:09:6f:d3:e3:7f:73:
66:4d:e1:0a:67:d9:5a:36:1b:fb:76:6d:55:e0:ae:
ac:62:ad:5c:3d:b8:ab:b8:98:9f:6e:7f:2c:57:8d:
16:fa:5a:b5:fe:dc:47:42:41:c4:59:9c:55:8b:f9:
37:74:fa:59:7a:cb:07:7f:c0:8f:7a:e8:58:da:73:
37:7b:db:93:ab:e1:70:56:5c:ff:e6:0f:17:13:d4:
4f:00:46:f8:f9:54:23:83:ac:00:f5:6e:61:5b:cf:
12:50:07:09:1f:dc:22:95:8b:2f:2c:40:82:2d:7c:
d0:de:2a:8a:d0:2c:81:d6:ca:93:76:08:6c:3b:59:
6b:f2:48:70:43:3f:98:56:c6:55:f7:0b:f7:33:45:
c6:0e:f7:e2:d2:c5:10:20:28:d4:ad:4e:21:9d:e7:
be:03:2c:c6:84:0b:98:f0:df:71:d6:56:78:d9:b1:
ea:46:13:52:1b:49:42:4f:91:dd:d7:33:f8:a8:1b:
22:25:56:26:43:f8:59:8b:ac:22:71:8f:e6:6f:31:
2c:94:f6:06:cc:dd:f5:d0:46:6b:da:a7:df:16:af:
7b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:CB:D1:A4:96:54:2B:74:C9:64:A4:45:BB:2B:60:D4:E9:34:E1:CE
X509v3 Authority Key Identifier:
keyid:7D:43:B0:EC:79:95:1D:5D:55:80:13:3E:53:29:A9:0F:2F:EE:1C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fUOw7HmVHV1VgBM-UympDy_uHFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2604e0-91fa-4fe9-bb28-93a6192b1785/1/MsvRpJZUK3TJZKRFuytg1Ok04c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2604e0-91fa-4fe9-bb28-93a6192b1785/1/fUOw7HmVHV1VgBM-UympDy_uHFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.130.196.0/23
Signature Algorithm: sha256WithRSAEncryption
4c:37:d4:12:de:23:0a:dd:3e:7d:bb:34:15:20:55:16:b5:8a:
27:cb:46:e9:e8:50:4e:a2:12:c3:3b:d7:dc:f1:5e:91:56:b5:
a1:4d:e2:6b:78:03:16:d4:b5:ae:59:a5:5b:d9:9a:21:0b:b1:
6a:3b:06:1e:a4:cc:ef:51:81:49:bb:0e:bc:ff:60:19:56:df:
5f:27:1b:8e:b3:1a:59:f2:c0:de:fa:37:47:a7:43:ee:db:83:
fe:9b:49:2e:36:a6:fc:88:88:47:fc:cd:ab:d0:ee:f5:e9:ce:
cf:75:8c:8f:a2:8b:43:53:61:b2:ae:ad:cc:72:d0:5d:72:bb:
74:c6:ed:ed:ee:0f:87:c9:dc:d7:58:04:7c:44:4d:3d:6a:b1:
09:03:de:d1:fa:56:1f:13:20:16:cc:0f:a0:01:ea:56:41:26:
7f:5f:20:43:8c:65:1f:08:69:0c:9e:63:63:88:d3:75:17:f1:
9f:46:f3:f6:f3:84:2b:59:dd:22:d8:cd:ad:ed:0e:7d:0e:b1:
f1:c4:1b:52:bd:91:44:4d:23:ae:56:fa:00:8e:87:41:73:b1:
99:be:1f:39:3c:05:0a:2f:ec:56:92:cd:83:13:1e:48:41:e4:
a5:20:ba:59:84:64:6f:c5:f1:fa:cf:c6:bf:b0:4d:e5:b8:43:
3a:66:fc:c8
-----BEGIN CERTIFICATE-----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Generated at Mon Jul 15 18:31:51 2024 by rpki-client on console-ams.rpki-client.org