Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/c8f02b-0abc-41fe-bc54-ac800c6d976f/1/ALlYHTx6gpDMQq7y7S7UOTpt45M.roa
File: ALlYHTx6gpDMQq7y7S7UOTpt45M.roa (raw, json)
Hash identifier: NAwmtWt/DGIzmANJwpVt1rduJ2q/ayYPmkL9iZkfXEU=
Subject key identifier: 00:B9:58:1D:3C:7A:82:90:CC:42:AE:F2:ED:2E:D4:39:3A:6D:E3:93
Certificate issuer: /CN=2ac78fd517a75f77f3f4fd229ac5e6732560c6e1
Certificate serial: 0185735611C97858F6E93729EEE7461F0B2F
Authority key identifier: 2A:C7:8F:D5:17:A7:5F:77:F3:F4:FD:22:9A:C5:E6:73:25:60:C6:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KseP1RenX3fz9P0imsXmcyVgxuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/c8f02b-0abc-41fe-bc54-ac800c6d976f/1/ALlYHTx6gpDMQq7y7S7UOTpt45M.roa
Signing time: Mon 02 Jan 2023 16:34:58 +0000
ROA not before: Mon 02 Jan 2023 16:34:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43779
IP address blocks: 37.235.78.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:29:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:56:11:c9:78:58:f6:e9:37:29:ee:e7:46:1f:0b:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac78fd517a75f77f3f4fd229ac5e6732560c6e1
Validity
Not Before: Jan 2 16:34:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=00b9581d3c7a8290cc42aef2ed2ed4393a6de393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:9d:f1:84:60:fc:7a:91:8a:75:3e:22:6c:2b:
99:eb:5c:89:77:fb:bc:61:bb:34:08:9a:15:2a:81:
7b:37:9c:ba:0f:47:c1:d6:f3:67:6a:cf:a1:9b:65:
4f:47:8c:98:50:51:57:06:89:8b:db:13:ca:2e:bc:
41:88:b0:fe:98:60:6a:40:5f:d8:a2:bd:ce:21:3a:
27:7b:53:d2:b4:aa:d8:7a:8c:9b:bd:71:5c:6f:85:
56:4a:7a:c0:7a:4c:36:f9:e8:39:3c:f3:da:f2:0c:
30:57:c7:ce:79:b2:4a:f5:5e:86:45:d5:81:9b:ed:
ae:24:43:1a:9d:48:8a:90:5e:35:7a:13:b5:7d:51:
90:3e:f8:77:9b:d3:4b:31:11:f5:3f:75:5d:e2:20:
6b:df:f6:44:33:32:3d:4f:e4:b3:95:63:a2:04:4e:
d7:0a:06:5e:f4:73:ba:f0:c2:88:b0:c1:5e:25:04:
49:c9:09:d0:ed:e3:ac:f0:31:18:b2:80:ef:51:38:
d9:ba:e2:c9:88:2e:52:e5:2f:ae:00:e1:37:72:6d:
23:03:79:93:7d:39:8c:3f:70:14:95:ba:cf:be:a4:
8b:28:65:e9:15:b8:49:6e:11:e1:4f:56:a0:21:90:
6b:8f:8f:1c:79:25:99:e9:1f:64:86:17:4c:17:06:
7c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:B9:58:1D:3C:7A:82:90:CC:42:AE:F2:ED:2E:D4:39:3A:6D:E3:93
X509v3 Authority Key Identifier:
keyid:2A:C7:8F:D5:17:A7:5F:77:F3:F4:FD:22:9A:C5:E6:73:25:60:C6:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KseP1RenX3fz9P0imsXmcyVgxuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c8f02b-0abc-41fe-bc54-ac800c6d976f/1/ALlYHTx6gpDMQq7y7S7UOTpt45M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c8f02b-0abc-41fe-bc54-ac800c6d976f/1/KseP1RenX3fz9P0imsXmcyVgxuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.235.78.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:3e:79:e0:ea:2b:d9:7e:5b:e3:16:b0:7c:e9:3c:b4:d8:ba:
2d:ab:c4:25:03:25:70:28:1a:90:9c:69:47:86:cb:50:48:42:
e8:b8:41:f3:2b:44:d4:c6:f5:41:2c:15:d9:72:d1:81:82:9c:
54:04:19:d4:74:8b:ca:8a:ba:03:f2:6c:4f:4e:9d:17:70:f9:
5b:bc:3a:f8:19:a1:73:c8:f2:e5:4d:1f:f4:fe:cf:2d:e5:0a:
f7:19:b8:0a:89:21:7d:8f:54:6b:84:5f:41:fc:9d:8b:95:6d:
38:c3:82:a8:0c:45:e7:ab:35:f8:e4:d2:fb:68:cc:f4:35:c2:
c8:81:8d:4a:f6:64:c3:dc:9d:d5:3e:72:0f:4e:c6:32:88:ac:
ce:3f:bf:78:e9:3d:2f:fa:c7:51:ed:b8:e2:09:ff:e0:f9:f9:
c1:ac:64:93:a2:61:f1:2a:62:51:04:64:ea:10:75:24:d3:be:
34:71:cc:d8:68:8a:f3:81:11:6b:e1:4a:c8:61:94:3d:56:58:
6f:c3:9a:80:26:7f:48:9f:80:69:0e:73:5c:05:06:08:a6:f7:
ff:9e:d3:95:3c:7c:fd:b6:45:af:04:f4:37:d3:c1:9e:04:30:
4d:c1:b5:4e:a3:8b:58:73:7a:2b:a5:30:3f:fa:81:75:63:c9:
c8:4d:e8:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:15 2024 by rpki-client on console-ams.rpki-client.org