Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zp7nX_w7TEYASIRkAUXVISgDUHs.roa
File: zp7nX_w7TEYASIRkAUXVISgDUHs.roa (raw, json)
Hash identifier: 1GLnUwEOkJip2wjdS7MRE3gsPYl3BGxy6SUTYtsneBA=
Subject key identifier: CE:9E:E7:5F:FC:3B:4C:46:00:48:84:64:01:45:D5:21:28:03:50:7B
Certificate issuer: /CN=cccdf6516237d425e9ae3817ecb141f481773c12
Certificate serial: 01857014FE85B09BE353976793ABFE177CB8
Authority key identifier: CC:CD:F6:51:62:37:D4:25:E9:AE:38:17:EC:B1:41:F4:81:77:3C:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zM32UWI31CXprjgX7LFB9IF3PBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zp7nX_w7TEYASIRkAUXVISgDUHs.roa
Signing time: Mon 02 Jan 2023 01:25:02 +0000
ROA not before: Mon 02 Jan 2023 01:25:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210649
IP address blocks: 37.140.249.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:14:fe:85:b0:9b:e3:53:97:67:93:ab:fe:17:7c:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cccdf6516237d425e9ae3817ecb141f481773c12
Validity
Not Before: Jan 2 01:25:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ce9ee75ffc3b4c46004884640145d5212803507b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:d7:b5:7f:be:1e:4a:6a:c2:69:48:fc:99:8c:
e0:df:6a:b9:d4:45:fc:69:dd:25:7d:3a:be:62:9a:
38:78:63:6d:cb:9d:f4:08:76:2b:c1:7c:17:2d:a0:
e0:dd:4a:fb:18:eb:32:ed:7e:3d:6c:36:af:fe:79:
07:29:c8:55:bb:d6:fc:f4:5b:65:af:ac:b4:d9:9e:
e1:e2:3f:80:ef:4c:b6:69:77:75:1b:cd:62:1c:3e:
ac:43:30:8e:e4:44:5a:b7:62:83:92:28:d5:5e:63:
00:5d:7b:2e:3f:58:9b:be:6b:fa:65:2a:6b:72:36:
8e:e0:43:1f:01:5c:73:27:a2:5f:58:9d:78:7d:74:
0e:65:3b:92:7e:59:27:a1:d4:fc:20:14:c7:ac:7d:
70:3a:20:56:ed:33:97:66:c7:3b:f8:1d:7c:23:9a:
1d:a9:17:3a:5e:c2:fe:0b:ab:7b:b2:6d:aa:fd:2c:
9e:af:f5:26:51:67:88:3c:fb:7f:9b:51:29:f4:01:
c4:01:e9:74:e3:8c:63:db:7a:57:d1:2a:f7:ac:20:
70:f0:1c:d1:77:73:41:48:b2:e5:64:e5:23:94:33:
f8:4d:49:51:7a:68:48:57:0c:7c:ac:6f:97:a5:55:
77:56:5c:0f:42:d5:18:b5:f5:f0:d2:ed:6e:6b:da:
3b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:9E:E7:5F:FC:3B:4C:46:00:48:84:64:01:45:D5:21:28:03:50:7B
X509v3 Authority Key Identifier:
keyid:CC:CD:F6:51:62:37:D4:25:E9:AE:38:17:EC:B1:41:F4:81:77:3C:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zM32UWI31CXprjgX7LFB9IF3PBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zp7nX_w7TEYASIRkAUXVISgDUHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zM32UWI31CXprjgX7LFB9IF3PBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.140.249.0/24
Signature Algorithm: sha256WithRSAEncryption
90:8a:e9:68:9e:30:d9:42:03:12:8e:f3:a9:f2:fa:5a:80:8f:
6b:73:ee:de:52:66:d2:0d:e5:f7:1f:fa:e8:bb:bb:af:b9:b6:
d2:e2:52:09:09:24:18:cb:e5:95:f4:d3:ba:23:fb:d0:00:11:
16:e6:6f:e1:a4:78:e8:99:41:8c:fc:b8:10:46:88:bc:ca:da:
cb:c2:85:68:45:8a:d4:78:45:31:e0:c6:f5:ce:ac:33:49:0b:
92:c7:04:8b:7e:3c:06:e4:71:8a:49:3a:90:ce:17:89:f5:47:
70:28:cb:0a:d8:f8:34:42:36:67:b1:3f:06:9a:71:b0:6a:a7:
d3:be:89:f2:a7:b7:6b:d2:0c:7f:94:5f:9a:6d:e5:61:b0:bd:
34:a7:54:2e:fe:64:94:4a:8b:ab:f4:bd:04:08:5d:cd:86:56:
cf:1a:79:de:d5:44:33:f5:1c:39:2f:9e:d2:a7:cc:b9:22:cb:
0e:54:67:74:10:64:23:0e:0d:2e:50:55:ac:39:fc:59:4a:92:
6e:3b:e9:2a:16:42:f1:a2:f2:e0:9b:02:d8:51:51:c1:31:e3:
0c:bc:4b:d5:6f:9a:14:d9:a8:94:1f:d6:db:14:fa:e5:3a:b3:
f2:91:54:16:91:52:ea:fe:f4:7e:1e:2b:ef:e8:91:db:87:81:
00:1f:48:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:09 2024 by rpki-client on console-ams.rpki-client.org