Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/c8f02b-0abc-41fe-bc54-ac800c6d976f/1/mJvlhoeemfLf4d0PPMqf0wIVbzE.roa
File: mJvlhoeemfLf4d0PPMqf0wIVbzE.roa (raw, json)
Hash identifier: lvJtkjytEp2UEzlbZkyBRPv4qQCRE/b2ZZXro47vkk4=
Subject key identifier: 98:9B:E5:86:87:9E:99:F2:DF:E1:DD:0F:3C:CA:9F:D3:02:15:6F:31
Certificate issuer: /CN=2ac78fd517a75f77f3f4fd229ac5e6732560c6e1
Certificate serial: 0185735612D071FD2A99399E0DA8952D9A62
Authority key identifier: 2A:C7:8F:D5:17:A7:5F:77:F3:F4:FD:22:9A:C5:E6:73:25:60:C6:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KseP1RenX3fz9P0imsXmcyVgxuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/c8f02b-0abc-41fe-bc54-ac800c6d976f/1/mJvlhoeemfLf4d0PPMqf0wIVbzE.roa
Signing time: Mon 02 Jan 2023 16:34:58 +0000
ROA not before: Mon 02 Jan 2023 16:34:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58109
IP address blocks: 37.235.72.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:29:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:56:12:d0:71:fd:2a:99:39:9e:0d:a8:95:2d:9a:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac78fd517a75f77f3f4fd229ac5e6732560c6e1
Validity
Not Before: Jan 2 16:34:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=989be586879e99f2dfe1dd0f3cca9fd302156f31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6e:1a:59:e1:01:2b:98:22:54:d5:bb:37:cc:
d3:9f:5c:1f:63:08:46:2b:06:9f:b7:01:db:fd:e0:
3f:ae:a0:8a:0d:ea:a6:40:36:49:df:50:32:26:ac:
1d:0f:76:f7:ae:96:69:77:0f:aa:ee:0e:a1:96:a0:
1f:9b:74:47:c1:95:a1:fc:8e:4d:a9:a0:ab:ab:a1:
85:53:cc:78:c2:19:67:ec:89:4a:67:99:ad:4d:21:
85:79:02:a7:0e:6f:b2:44:e2:ed:5e:71:b8:1b:e7:
64:d4:be:a2:2c:00:c4:95:4a:81:ab:a0:bd:51:4d:
6c:4c:d0:66:ce:a4:f9:f8:8b:9a:14:28:4f:a8:78:
ff:1e:44:03:1e:6d:65:26:26:50:46:f6:3c:b0:1a:
10:85:81:39:53:ce:03:37:a9:3f:83:ac:c7:7b:c5:
2c:3d:87:88:9c:24:b5:f4:ee:07:c4:8e:c9:d6:b2:
f6:9b:8a:5b:be:21:4a:7b:ff:49:28:bf:a6:65:50:
d4:71:e5:38:53:8c:bd:bf:5c:09:a7:c9:ef:d0:be:
be:51:35:be:01:a7:dc:a9:de:04:65:60:26:ef:21:
0d:f6:f8:ea:b0:37:fe:86:d8:fc:82:26:7e:a0:66:
ac:52:b9:40:e5:bf:36:cc:43:f8:82:32:da:ef:db:
3d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:9B:E5:86:87:9E:99:F2:DF:E1:DD:0F:3C:CA:9F:D3:02:15:6F:31
X509v3 Authority Key Identifier:
keyid:2A:C7:8F:D5:17:A7:5F:77:F3:F4:FD:22:9A:C5:E6:73:25:60:C6:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KseP1RenX3fz9P0imsXmcyVgxuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c8f02b-0abc-41fe-bc54-ac800c6d976f/1/mJvlhoeemfLf4d0PPMqf0wIVbzE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c8f02b-0abc-41fe-bc54-ac800c6d976f/1/KseP1RenX3fz9P0imsXmcyVgxuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.235.72.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:75:fb:94:9c:a4:7d:69:01:71:ce:d3:1d:f7:ec:89:5d:03:
ae:6d:fd:03:e9:90:c3:f3:29:9c:c9:ba:61:8f:56:b0:54:f6:
54:e3:a2:98:25:36:05:6f:64:d7:d8:22:df:5d:71:1b:ee:ef:
28:b4:2c:a8:2d:43:07:c2:89:e9:4c:61:59:5b:87:d7:e4:8b:
49:f9:92:35:ee:48:1a:c8:d9:41:ef:fa:cb:d8:85:be:e1:db:
35:c1:21:93:2f:65:ad:94:ca:84:dd:03:c1:b9:4f:1e:9d:44:
41:86:9d:2e:cb:bc:b7:ee:ba:ed:34:25:bb:bc:c4:cf:2b:c4:
0d:1f:32:44:f7:44:a9:fb:3d:58:cf:04:01:f1:9b:6a:37:55:
7b:5d:8f:72:a3:e5:2f:45:74:70:ca:e0:10:2e:9a:be:89:87:
58:99:01:ae:4d:d3:9c:af:0f:2e:5c:01:e9:bc:46:01:2f:36:
6f:c3:4e:f7:a4:1c:80:36:83:44:90:c8:9e:17:ac:1f:36:b4:
c2:47:5c:35:6e:15:06:69:b2:06:91:e8:d0:1a:df:f1:91:16:
d3:ef:df:2f:02:3b:27:f5:19:72:ea:5c:68:7a:26:f1:00:91:
72:be:f1:b6:56:7c:3d:1d:96:3e:59:35:e5:9a:a7:7b:48:68:
df:c6:8c:f6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVzVhLQcf0qmTmeDaiVLZpiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYzc4ZmQ1MTdhNzVmNzdmM2Y0ZmQyMjlhYzVlNjczMjU2
MGM2ZTEwHhcNMjMwMTAyMTYzNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ODliZTU4Njg3OWU5OWYyZGZlMWRkMGYzY2NhOWZkMzAyMTU2ZjMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAum4aWeEBK5giVNW7N8zTn1wfYwhG
KwaftwHb/eA/rqCKDeqmQDZJ31AyJqwdD3b3rpZpdw+q7g6hlqAfm3RHwZWh/I5N
qaCrq6GFU8x4whln7IlKZ5mtTSGFeQKnDm+yROLtXnG4G+dk1L6iLADElUqBq6C9
UU1sTNBmzqT5+IuaFChPqHj/HkQDHm1lJiZQRvY8sBoQhYE5U84DN6k/g6zHe8Us
PYeInCS19O4HxI7J1rL2m4pbviFKe/9JKL+mZVDUceU4U4y9v1wJp8nv0L6+UTW+
Aafcqd4EZWAm7yEN9vjqsDf+htj8giZ+oGasUrlA5b82zEP4gjLa79s9KQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJib5YaHnpny3+HdDzzKn9MCFW8xMB8GA1UdIwQY
MBaAFCrHj9UXp1938/T9IprF5nMlYMbhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3NlUDFSZW5YM2Z6OVAwaW1zWG1jeVZneHVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9jOGYwMmItMGFiYy00MWZlLWJjNTQt
YWM4MDBjNmQ5NzZmLzEvbUp2bGhvZWVtZkxmNGQwUFBNcWYwd0lWYnpFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9jOGYwMmItMGFiYy00MWZlLWJjNTQtYWM4MDBjNmQ5NzZm
LzEvS3NlUDFSZW5YM2Z6OVAwaW1zWG1jeVZneHVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJetIMA0G
CSqGSIb3DQEBCwUAA4IBAQA+dfuUnKR9aQFxztMd9+yJXQOubf0D6ZDD8ymcybph
j1awVPZU46KYJTYFb2TX2CLfXXEb7u8otCyoLUMHwonpTGFZW4fX5ItJ+ZI17kga
yNlB7/rL2IW+4ds1wSGTL2WtlMqE3QPBuU8enURBhp0uy7y37rrtNCW7vMTPK8QN
HzJE90Sp+z1YzwQB8ZtqN1V7XY9yo+UvRXRwyuAQLpq+iYdYmQGuTdOcrw8uXAHp
vEYBLzZvw073pByANoNEkMieF6wfNrTCR1w1bhUGabIGkejQGt/xkRbT798vAjsn
9Rly6lxoeibxAJFyvvG2Vnw9HZY+WTXlmqd7SGjfxoz2
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:49 2024 by rpki-client on console-fra.rpki-client.org