Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/cLNJNmnQN0877k9zikUgAVHtauI.roa
File: cLNJNmnQN0877k9zikUgAVHtauI.roa (raw, json)
Hash identifier: R4tOQz4qDJXKGNF9ZJPcF0BEgklIXn8zivxdLnOJi8Y=
Subject key identifier: 70:B3:49:36:69:D0:37:4F:3B:EE:4F:73:8A:45:20:01:51:ED:6A:E2
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 01886E4FD1F4CF033F0F18833BC326FE86F8
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/cLNJNmnQN0877k9zikUgAVHtauI.roa
Signing time: Tue 30 May 2023 20:18:24 +0000
ROA not before: Tue 30 May 2023 20:18:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49999
IP address blocks: 37.153.132.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:6e:4f:d1:f4:cf:03:3f:0f:18:83:3b:c3:26:fe:86:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: May 30 20:18:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=70b3493669d0374f3bee4f738a45200151ed6ae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b1:6b:9e:22:d7:0f:bc:7f:4c:14:c2:78:65:
72:c0:c5:1f:00:8b:33:05:23:ae:fa:24:bc:56:fc:
c8:ba:2a:f0:88:27:82:b0:6e:67:a3:0c:78:96:b4:
18:00:e7:4c:93:80:d8:f0:bb:2d:c9:48:05:82:5b:
ab:bb:7e:44:1a:ea:3f:ab:25:21:55:88:d5:53:a6:
53:ec:df:cf:ed:fc:77:36:85:95:5e:ef:b5:72:4a:
dc:cd:04:9f:0a:a6:39:c4:e2:4c:0d:64:36:69:ab:
99:b8:e6:52:f3:93:cf:2a:50:3a:16:50:34:18:02:
61:89:ab:5d:db:06:6d:f9:61:cb:36:5e:97:65:93:
b6:c4:aa:93:01:83:3f:bd:c4:27:1e:dc:90:cb:5f:
3f:9c:da:f1:bd:39:0a:e5:65:18:d9:6b:4a:55:29:
95:fa:b4:46:5f:fd:57:fd:ec:53:76:21:41:fe:1f:
60:48:65:32:a6:ed:a2:6a:92:13:4a:7c:ab:f5:e4:
22:f4:f0:cc:a5:a6:51:32:dc:46:6a:a6:eb:63:a7:
70:22:c1:c3:d0:95:be:f8:38:11:4c:e8:9d:18:d3:
8c:5b:68:7c:c4:8f:d3:7f:88:10:fc:29:8f:0b:ee:
cc:f9:be:77:7c:f7:25:0d:ec:42:b9:69:30:06:a5:
67:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:B3:49:36:69:D0:37:4F:3B:EE:4F:73:8A:45:20:01:51:ED:6A:E2
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/cLNJNmnQN0877k9zikUgAVHtauI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.153.132.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:03:45:b6:1e:36:b7:c5:b3:f1:0d:a5:19:d1:5c:ba:20:d3:
79:a0:87:b5:48:4b:47:17:1a:b4:b3:97:e7:31:00:97:1c:cc:
2d:0a:bb:fd:60:2d:fe:71:f5:e6:bb:1a:d8:53:af:b6:c0:87:
13:30:4d:89:84:b4:ea:5e:6b:16:76:1f:e0:00:fe:b1:bc:4d:
a3:c5:a2:9d:3a:53:08:60:97:f8:30:d1:2e:fc:9e:31:67:e0:
f3:4a:cf:7f:80:b3:ac:3e:53:01:f9:d3:d1:b0:34:8f:53:89:
60:96:0c:6b:3c:e5:35:ca:6b:cf:82:ba:55:e4:dc:1e:4f:ad:
ec:5c:61:a3:64:88:11:93:b9:c2:97:bf:5d:dc:b9:92:a6:b1:
5f:f5:2f:04:e7:f9:16:ae:20:94:33:e5:58:2f:c8:54:d8:db:
f6:01:03:19:46:ff:5d:86:5a:50:d7:66:37:08:bb:16:bc:2a:
cd:1a:1d:78:65:04:c4:f4:48:42:06:eb:8a:72:43:7e:94:84:
2e:7b:79:89:54:f9:77:51:97:a5:b7:d7:01:65:ce:08:85:51:
f7:82:10:0c:a9:32:50:8e:23:a7:75:7b:e3:e4:08:78:50:5c:
19:c0:c3:5c:9c:c3:9b:00:b7:aa:4d:6c:90:dc:cc:69:25:4a:
63:03:8b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:05 2023 by rpki-client on console-fra.rpki-client.org