Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/37Pr7gk3JZPWOE6EwOGRw4KALhA.roa
File: 37Pr7gk3JZPWOE6EwOGRw4KALhA.roa (raw, json)
Hash identifier: sWHGTXByIeqk5BUc9n5BoTsHCfIUgu/YymDmNgp2Z5I=
Subject key identifier: DF:B3:EB:EE:09:37:25:93:D6:38:4E:84:C0:E1:91:C3:82:80:2E:10
Certificate issuer: /CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec
Certificate serial: 01856FD4F72FC41AA1DFEEE68EAF5E406187
Authority key identifier: 25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/37Pr7gk3JZPWOE6EwOGRw4KALhA.roa
Signing time: Mon 02 Jan 2023 00:15:05 +0000
ROA not before: Mon 02 Jan 2023 00:15:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21859
IP address blocks: 193.118.32.0/19 maxlen: 24
185.207.112.0/22 maxlen: 24
23.90.128.0/18 maxlen: 24
193.118.96.0/19 maxlen: 19
192.169.96.0/19 maxlen: 24
192.169.104.0/22 maxlen: 24
199.182.232.0/21 maxlen: 24
104.166.128.0/18 maxlen: 24
2a0b:21c0::/29 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d4:f7:2f:c4:1a:a1:df:ee:e6:8e:af:5e:40:61:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec
Validity
Not Before: Jan 2 00:15:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dfb3ebee09372593d6384e84c0e191c382802e10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:04:26:73:7f:27:65:13:e9:a6:27:fa:12:e5:
a4:8d:e2:28:69:68:65:3e:c1:1d:cc:d3:80:8a:89:
29:01:cc:55:b9:ec:4b:41:28:97:73:1c:35:e4:71:
49:8b:ea:8c:f8:aa:33:f3:88:f5:75:9a:4a:d0:38:
33:a7:e6:0f:6d:d7:c1:47:66:65:d4:7e:78:1f:04:
9e:73:74:51:c1:48:66:92:f6:de:4b:46:29:70:c6:
60:3a:82:59:aa:88:8f:54:c9:e0:e8:d4:ba:94:8a:
38:84:ff:b2:8d:41:83:56:43:06:60:b1:e4:96:59:
4f:df:95:cb:90:fe:52:56:74:1a:93:f0:f6:4b:8e:
41:49:71:c9:78:db:03:bf:df:b8:25:1d:10:bc:1f:
b5:52:42:70:a0:e7:58:aa:d7:94:ea:d9:ad:0a:8c:
18:05:7c:39:bb:7b:55:2e:60:27:31:4c:73:44:d3:
3c:44:90:d7:01:ba:8b:e9:57:4d:6e:66:b5:77:a5:
05:c3:41:ee:2d:4c:f0:cd:1e:a8:84:19:02:19:14:
e3:92:0e:09:9e:f8:61:f7:bd:8a:87:83:06:ed:5b:
6a:5a:6c:96:76:1c:dc:95:ea:68:21:a3:94:e6:e4:
ab:91:9b:c4:2e:bf:46:b7:51:c4:10:0b:19:81:52:
31:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:B3:EB:EE:09:37:25:93:D6:38:4E:84:C0:E1:91:C3:82:80:2E:10
X509v3 Authority Key Identifier:
keyid:25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/37Pr7gk3JZPWOE6EwOGRw4KALhA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.90.128.0/18
104.166.128.0/18
185.207.112.0/22
192.169.96.0/19
193.118.32.0/19
193.118.96.0/19
199.182.232.0/21
IPv6:
2a0b:21c0::/29
Signature Algorithm: sha256WithRSAEncryption
52:b8:6f:9d:04:b2:c7:9d:5c:b2:60:14:c4:5f:ef:ac:db:d0:
16:fe:c8:d9:73:46:56:1a:da:c8:7a:36:ce:d4:7d:0b:53:29:
9f:dc:15:4a:7d:65:31:72:1d:62:75:2e:af:d9:21:66:9e:37:
2b:b4:1a:29:24:ea:cd:3a:35:91:85:6c:80:22:9f:f6:1a:e8:
a7:e8:6c:08:35:80:7e:05:05:a9:96:d5:1f:7e:cd:3b:ac:a3:
48:25:f7:aa:1a:31:b5:7e:61:a1:d0:51:b4:13:b5:97:eb:48:
27:57:5b:11:75:49:1e:8a:03:97:0e:bb:c5:ff:1c:5f:3e:e7:
e3:df:aa:2e:2e:57:fd:90:f0:eb:21:28:7e:a7:c6:ff:ca:0c:
7a:ed:7c:53:55:77:46:cf:1b:33:4b:6c:c2:a7:0e:ac:51:5c:
89:8e:7d:21:64:91:dd:e5:a5:77:7b:37:cb:5d:f2:35:9b:43:
35:f6:64:87:32:e9:fe:09:ed:ab:42:f1:99:b3:a9:bb:af:32:
94:2f:07:98:21:d8:75:de:29:04:d8:60:ea:6e:ab:00:88:ba:
05:d5:82:e5:64:3b:fe:6d:48:30:06:c6:6f:97:5a:e6:aa:d6:
8c:54:14:8c:f6:b7:d8:44:d6:55:f8:9a:b6:0a:eb:3e:c2:3c:
67:58:aa:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:20:50 2024 by rpki-client on console-fra.rpki-client.org