Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/WLqkoHsV95140pWbLn3TKN5-D_Q.roa
File: WLqkoHsV95140pWbLn3TKN5-D_Q.roa (raw, json)
Hash identifier: 53KxbFAtNjNUmx1+CnBU57fdjvMZFOaMp3QuGzeNkdI=
Subject key identifier: 58:BA:A4:A0:7B:15:F7:9D:78:D2:95:9B:2E:7D:D3:28:DE:7E:0F:F4
Certificate issuer: /CN=64d171f93cc1ca716fc806e36a55852cdf4f1c1c
Certificate serial: 018CC26D061089E338246CBB605D6A5B0CA8
Authority key identifier: 64:D1:71:F9:3C:C1:CA:71:6F:C8:06:E3:6A:55:85:2C:DF:4F:1C:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNFx-TzBynFvyAbjalWFLN9PHBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/WLqkoHsV95140pWbLn3TKN5-D_Q.roa
Signing time: Mon 01 Jan 2024 00:29:34 +0000
ROA not before: Mon 01 Jan 2024 00:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57862
IP address blocks: 37.122.152.0/22 maxlen: 22
37.122.152.0/24 maxlen: 24
37.122.152.0/23 maxlen: 23
37.122.154.0/23 maxlen: 23
37.122.154.0/24 maxlen: 24
37.122.153.0/24 maxlen: 24
37.122.156.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 04 Feb 2024 14:15:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:06:10:89:e3:38:24:6c:bb:60:5d:6a:5b:0c:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64d171f93cc1ca716fc806e36a55852cdf4f1c1c
Validity
Not Before: Jan 1 00:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=58baa4a07b15f79d78d2959b2e7dd328de7e0ff4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:dd:59:64:21:55:fe:b9:18:ca:29:56:d7:84:
a2:09:45:1c:34:2d:e3:c2:c8:8e:f2:c7:9f:20:4f:
6a:8c:1b:3d:2c:0e:fd:1a:47:0e:5c:07:7b:5d:1f:
cc:26:75:43:6c:ab:3d:63:2e:02:ab:07:bc:d0:1a:
8f:db:e8:44:1c:bb:f3:15:e6:92:bd:45:16:02:ae:
9b:26:a6:bc:c8:a9:dc:70:04:7d:e3:c6:6e:38:06:
0b:8e:72:cf:12:f8:ec:37:7a:fd:06:c4:2a:f7:7e:
f0:a3:02:ce:6f:40:0b:2b:13:44:07:51:5e:45:03:
8f:53:7a:20:9f:85:fa:72:30:63:22:b9:08:28:c4:
50:5e:48:b4:d9:98:3a:5e:94:24:51:7d:c5:dd:82:
e6:54:9e:01:fa:c4:07:12:45:20:1b:ef:c0:85:c6:
5b:9d:c7:0e:16:ca:c2:de:33:f6:06:7e:91:a8:f3:
99:c2:8c:bb:0f:f5:2f:7a:24:6d:e4:8c:39:6b:a5:
99:60:62:a3:a4:e3:27:3f:d0:1f:c2:6c:3c:5d:f7:
bb:40:ac:60:1c:69:2d:58:5e:f7:a5:7c:e8:18:0b:
6e:a5:42:04:89:e5:17:99:97:e8:5e:30:b7:92:48:
0b:b2:b7:be:6e:3f:15:f4:e0:c0:15:f2:fd:1c:27:
be:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:BA:A4:A0:7B:15:F7:9D:78:D2:95:9B:2E:7D:D3:28:DE:7E:0F:F4
X509v3 Authority Key Identifier:
keyid:64:D1:71:F9:3C:C1:CA:71:6F:C8:06:E3:6A:55:85:2C:DF:4F:1C:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNFx-TzBynFvyAbjalWFLN9PHBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/WLqkoHsV95140pWbLn3TKN5-D_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/ZNFx-TzBynFvyAbjalWFLN9PHBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.122.152.0-37.122.156.255
Signature Algorithm: sha256WithRSAEncryption
9f:94:77:c9:d7:64:29:ed:b5:46:c1:c5:b8:58:d4:97:f6:f5:
ec:81:63:83:4d:b7:a5:1b:0b:92:79:05:22:bd:19:4c:06:3f:
ca:a3:b8:1b:a7:42:93:78:ec:ab:08:c2:0f:59:13:14:6a:37:
54:5c:b8:b2:3d:ba:cc:be:79:e0:a5:a5:2c:dc:fe:31:4f:04:
86:d2:b4:6b:19:a3:c4:76:32:fb:0f:1b:c9:17:14:90:1e:2d:
26:52:23:fe:50:13:e8:ae:8d:25:e0:2c:96:58:a4:a9:bf:6e:
00:58:76:c7:31:77:80:6c:78:42:30:6d:f4:b9:e6:3e:14:59:
83:60:9e:f7:f0:b9:00:39:f1:17:85:dc:4a:36:2b:ff:2b:f7:
bd:91:0d:38:78:07:33:c9:de:cb:63:21:72:fb:33:2b:48:d7:
53:bb:77:bf:67:88:1b:7d:52:28:39:2e:29:d7:1b:13:a0:f1:
e5:33:9e:e6:3e:03:f0:45:90:51:61:a2:c1:11:03:b2:fb:81:
81:36:d0:99:a1:18:ae:54:61:c0:78:3d:14:88:79:c1:9a:31:
16:c3:04:aa:49:6d:22:d9:26:4c:a4:09:97:8d:a7:d6:a9:cd:
10:c9:ad:99:ec:41:ab:b5:90:59:8f:7f:7e:2d:6f:01:0f:0c:
56:ae:03:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 4 16:33:27 2024 by rpki-client on console-ams.rpki-client.org