Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/_bjK6OJX-W7vXcTJctLbxnY_Wtc.roa
File: _bjK6OJX-W7vXcTJctLbxnY_Wtc.roa (raw, json)
Hash identifier: cSseE7uQWZhGFOj6PlJ9z10DNgIkVURx4CsC4CLzVCM=
Subject key identifier: FD:B8:CA:E8:E2:57:F9:6E:EF:5D:C4:C9:72:D2:DB:C6:76:3F:5A:D7
Certificate issuer: /CN=64d171f93cc1ca716fc806e36a55852cdf4f1c1c
Certificate serial: 018572A80A88DA944989F88BE0D91E35C4AB
Authority key identifier: 64:D1:71:F9:3C:C1:CA:71:6F:C8:06:E3:6A:55:85:2C:DF:4F:1C:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNFx-TzBynFvyAbjalWFLN9PHBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/_bjK6OJX-W7vXcTJctLbxnY_Wtc.roa
Signing time: Mon 02 Jan 2023 13:24:53 +0000
ROA not before: Mon 02 Jan 2023 13:24:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57862
IP address blocks: 37.122.152.0/22 maxlen: 22
37.122.152.0/24 maxlen: 24
37.122.152.0/23 maxlen: 23
37.122.154.0/23 maxlen: 23
37.122.154.0/24 maxlen: 24
37.122.153.0/24 maxlen: 24
37.122.156.0/24 maxlen: 24
37.122.155.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 10 Mar 2023 12:57:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:a8:0a:88:da:94:49:89:f8:8b:e0:d9:1e:35:c4:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64d171f93cc1ca716fc806e36a55852cdf4f1c1c
Validity
Not Before: Jan 2 13:24:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fdb8cae8e257f96eef5dc4c972d2dbc6763f5ad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cf:15:48:53:96:d9:29:f8:ed:56:ea:49:77:
0b:96:64:89:c9:ed:a8:7a:ee:c8:e4:7d:f7:3e:3a:
b4:bc:9c:18:a7:bc:e5:df:e0:1c:d9:98:01:f8:bb:
c1:57:81:cf:e5:f3:4b:8a:2c:0d:bd:53:0d:43:02:
02:9b:21:65:5b:bd:0e:ce:24:f8:0e:82:bf:07:98:
bb:1b:3a:77:91:0a:64:55:b6:07:bc:d5:16:64:fb:
2e:ae:bf:9c:05:10:28:e8:30:1b:0b:e3:89:15:20:
fd:1a:89:e5:ed:75:be:16:08:0e:cc:88:de:9f:0a:
9c:b3:1c:cd:ba:02:e8:0a:e9:9d:7c:d1:5d:27:59:
65:30:a5:06:0f:bf:45:1e:ab:b2:b0:0b:0f:e3:2d:
69:b0:f4:e0:84:4e:b5:0a:e4:90:35:a4:94:73:c6:
09:db:0a:c9:53:50:18:c5:39:ad:e9:4b:81:fe:35:
5e:ab:67:27:42:c5:af:31:41:3b:4d:7f:e8:b9:71:
7e:85:a1:86:df:e0:a4:8d:5a:b1:7f:b6:56:3d:c6:
33:fc:94:da:0a:e7:00:09:ab:15:60:c7:12:76:06:
be:48:ef:57:ae:2e:f1:34:f9:a5:bc:6c:81:ba:50:
e1:33:8a:be:45:77:71:7d:ed:e5:5e:de:62:62:f3:
ac:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:B8:CA:E8:E2:57:F9:6E:EF:5D:C4:C9:72:D2:DB:C6:76:3F:5A:D7
X509v3 Authority Key Identifier:
keyid:64:D1:71:F9:3C:C1:CA:71:6F:C8:06:E3:6A:55:85:2C:DF:4F:1C:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNFx-TzBynFvyAbjalWFLN9PHBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/_bjK6OJX-W7vXcTJctLbxnY_Wtc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f2d9df-16eb-449e-83f0-a4635df47d70/1/ZNFx-TzBynFvyAbjalWFLN9PHBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.122.152.0-37.122.156.255
Signature Algorithm: sha256WithRSAEncryption
51:46:dc:a0:bd:26:c8:22:de:61:1d:dd:98:d9:91:96:9e:cc:
94:31:77:c4:07:75:7a:3d:77:6a:cc:d6:91:2f:2b:c2:f7:bc:
e7:b8:09:06:b4:94:93:f3:c7:37:fd:d7:6c:3b:e0:b4:a4:61:
a9:ea:95:34:a2:7b:2d:7c:3e:03:d6:b5:dd:e5:44:1f:c2:9a:
f6:9e:ed:54:d2:60:28:99:51:f4:2f:db:a6:3c:90:ff:ab:3a:
cd:ef:46:50:54:42:be:7c:c7:b1:6c:c1:1d:e9:4a:9a:83:13:
9f:a7:62:f5:e1:7c:2e:43:2f:c7:df:6b:70:4e:b1:af:3e:c4:
a0:7e:19:dd:5a:3a:67:6e:84:5f:19:09:1e:3d:e7:73:ec:cc:
4d:90:7d:a6:cf:c2:ff:7b:62:8b:11:62:5f:e2:b0:5b:b2:59:
a3:0d:ef:49:e4:51:60:3d:df:35:c9:09:40:72:04:57:82:3e:
1e:1a:86:0a:ac:dc:71:ae:4f:a8:2e:2d:90:dd:f5:19:c0:01:
04:34:e1:18:eb:cd:8f:3b:4c:12:e8:0f:70:6b:57:b6:b3:5b:
ac:7a:ef:d6:fb:2d:01:4c:1a:2b:e2:5c:1e:96:0a:80:74:1d:
bf:d4:f5:57:0b:36:94:97:67:b9:c3:b7:03:2d:4f:ff:1f:93:
42:84:2c:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:10 2024 by rpki-client on console-fra.rpki-client.org