Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/4578b8-b261-4988-90d4-b477a962e365/1/bajlRv9fvmlVwkLmYDpyjelkEHw.roa
File: bajlRv9fvmlVwkLmYDpyjelkEHw.roa (raw, json)
Hash identifier: UWjUSExV6trGasVtfkrKFBvjWlzMpx1kUGG2X3rpH9I=
Subject key identifier: 6D:A8:E5:46:FF:5F:BE:69:55:C2:42:E6:60:3A:72:8D:E9:64:10:7C
Certificate issuer: /CN=19d6ad902c949e9c5ecf896f8c50107eb659ffe7
Certificate serial: 01856F66FF600AD260A915F31851FDE0998C
Authority key identifier: 19:D6:AD:90:2C:94:9E:9C:5E:CF:89:6F:8C:50:10:7E:B6:59:FF:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GdatkCyUnpxez4lvjFAQfrZZ_-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/4578b8-b261-4988-90d4-b477a962e365/1/bajlRv9fvmlVwkLmYDpyjelkEHw.roa
Signing time: Sun 01 Jan 2023 22:14:59 +0000
ROA not before: Sun 01 Jan 2023 22:14:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 37.72.132.0/24 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:66:ff:60:0a:d2:60:a9:15:f3:18:51:fd:e0:99:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19d6ad902c949e9c5ecf896f8c50107eb659ffe7
Validity
Not Before: Jan 1 22:14:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6da8e546ff5fbe6955c242e6603a728de964107c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:29:2a:c6:00:74:2d:d2:f2:98:e3:a8:a4:14:
95:ff:4e:b1:07:b2:4e:df:de:50:3d:0d:90:c6:91:
d3:5f:26:55:c5:c5:f4:86:fd:d8:79:f6:8a:6d:d0:
da:63:c4:73:6e:c2:13:2d:86:9a:b4:fd:c4:5b:49:
cc:61:f6:8b:6f:c5:5a:37:e4:9a:6d:cd:9d:36:78:
33:66:7c:ab:89:9c:3a:7c:e6:6c:04:56:5d:4c:5b:
ba:9d:05:e4:d1:f9:d7:c5:9e:0d:df:15:5e:df:90:
42:d4:64:aa:42:d6:23:99:91:94:87:fe:5f:70:90:
a3:83:fa:cd:c5:8e:8e:fc:87:47:0e:10:ec:6c:b0:
47:4b:b0:c2:03:96:d4:8a:72:09:da:e5:49:21:94:
22:b3:a8:7f:4e:a0:bf:6e:20:66:c9:31:34:4f:9a:
80:1b:e4:e8:00:0f:a8:0a:33:e7:ed:64:53:cf:fa:
cf:86:56:29:3d:b5:d4:ff:18:bb:47:96:98:f1:14:
9a:3d:ef:3e:e0:43:c2:8d:b4:c9:7e:03:ca:3a:5d:
9f:da:15:04:df:04:2e:11:22:86:e9:c7:03:4c:dd:
90:f5:b5:b8:f5:21:29:42:2e:ed:ad:79:76:5a:5b:
a6:38:2b:5b:fb:03:2c:13:fd:69:a0:5b:ba:3d:c7:
2e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:A8:E5:46:FF:5F:BE:69:55:C2:42:E6:60:3A:72:8D:E9:64:10:7C
X509v3 Authority Key Identifier:
keyid:19:D6:AD:90:2C:94:9E:9C:5E:CF:89:6F:8C:50:10:7E:B6:59:FF:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GdatkCyUnpxez4lvjFAQfrZZ_-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4578b8-b261-4988-90d4-b477a962e365/1/bajlRv9fvmlVwkLmYDpyjelkEHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4578b8-b261-4988-90d4-b477a962e365/1/GdatkCyUnpxez4lvjFAQfrZZ_-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.72.132.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:18:c2:91:7e:89:23:d7:18:8f:23:14:41:95:46:37:6b:5d:
54:5e:0d:25:eb:29:37:5d:14:83:81:86:0c:da:34:17:ac:e1:
95:a7:16:ee:5e:28:70:8a:29:38:f1:9f:8e:20:5f:31:6b:64:
ab:3a:f4:f5:be:03:bc:d9:7c:39:68:6c:a3:6c:3b:48:66:9f:
3f:40:d5:1a:2f:77:b9:d0:34:a8:5e:ed:9c:7f:28:19:24:8b:
3e:be:be:96:85:96:2b:94:70:52:9a:44:64:75:77:7b:25:81:
2f:90:e7:cf:5c:3f:79:bc:0f:c0:1e:ce:b2:c9:2d:00:e6:87:
4d:5d:d8:ef:48:65:03:5b:46:a4:e6:77:a5:18:92:c3:55:e8:
4a:13:52:d4:22:0f:79:56:67:04:1c:95:0f:2d:b8:ab:bd:26:
50:5d:d4:b5:62:38:f9:ba:6a:6a:d1:bb:2f:68:9a:48:f1:8e:
3c:03:b6:f0:60:e4:a7:d0:8a:79:02:27:8d:c7:3e:05:d8:90:
8c:93:85:0c:a6:47:67:24:fd:d9:32:5c:58:7f:51:bb:07:e2:
ec:56:5a:49:c3:cd:00:dc:bf:8f:e9:e7:81:95:f2:d6:cb:e4:
8b:f4:bd:86:e7:d1:90:64:f7:42:15:ef:d8:eb:58:78:95:49:
4f:04:ab:89
-----BEGIN CERTIFICATE-----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Generated at Wed Jul 26 17:45:16 2023 by rpki-client on console-fra.rpki-client.org