Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/RxRG0uP_ZpMqOrxBX6aiYrKtBoU.roa
File: RxRG0uP_ZpMqOrxBX6aiYrKtBoU.roa (raw, json)
Hash identifier: 5PKj52CiWGF9d4BxX5iHIxQ0g02MD/1YtDjTLhWiAt0=
Subject key identifier: 47:14:46:D2:E3:FF:66:93:2A:3A:BC:41:5F:A6:A2:62:B2:AD:06:85
Certificate issuer: /CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6
Certificate serial: 018B8BACBFFBEDA141C2ABD29F010ABF89D2
Authority key identifier: 14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/RxRG0uP_ZpMqOrxBX6aiYrKtBoU.roa
Signing time: Wed 01 Nov 2023 16:17:16 +0000
ROA not before: Wed 01 Nov 2023 16:17:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211252
IP address blocks: 37.0.8.0/24 maxlen: 24
37.0.10.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:8b:ac:bf:fb:ed:a1:41:c2:ab:d2:9f:01:0a:bf:89:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6
Validity
Not Before: Nov 1 16:17:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=471446d2e3ff66932a3abc415fa6a262b2ad0685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:80:f8:87:fb:3e:0a:d4:13:85:12:30:2d:c4:
ee:7f:0b:e2:23:dd:5b:00:07:7e:eb:ff:34:b1:93:
ac:a3:82:66:e4:20:d2:21:93:0b:67:28:36:3b:26:
9b:41:43:6f:90:d6:6b:10:64:89:4a:db:2c:34:44:
a3:ca:1c:83:f4:4d:3d:69:d3:1a:af:ab:29:c2:6d:
a6:4a:a6:79:45:f0:a1:36:a0:2d:b0:03:64:87:78:
bc:d9:6a:31:08:d9:3d:a5:96:c1:83:10:5e:92:7c:
1f:f8:6d:65:5d:01:f8:4d:5f:5b:cd:6d:cf:de:6d:
39:b6:0d:ce:0c:f0:08:21:3a:2b:08:30:b4:e2:4b:
8f:3c:c9:9f:26:49:aa:92:6a:38:f2:23:4b:27:05:
f8:2d:05:0f:d3:cf:c2:3d:3a:bf:8e:54:cb:66:25:
bc:b7:80:84:b5:15:78:4b:f6:93:c8:ed:2c:b7:c4:
fa:bf:57:76:8f:3b:ee:28:af:9e:cb:82:24:16:32:
f4:be:82:42:b4:92:78:4b:b0:26:38:eb:5f:a9:af:
86:aa:69:9f:ac:b3:65:df:71:ae:db:34:ea:06:0c:
e1:99:36:1e:e4:d1:6a:fb:ec:e9:41:92:62:68:20:
e1:f1:5a:1d:4a:32:f3:60:29:f2:81:01:30:0f:0e:
4a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:14:46:D2:E3:FF:66:93:2A:3A:BC:41:5F:A6:A2:62:B2:AD:06:85
X509v3 Authority Key Identifier:
keyid:14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/RxRG0uP_ZpMqOrxBX6aiYrKtBoU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.0.8.0/24
37.0.10.0/23
Signature Algorithm: sha256WithRSAEncryption
51:99:02:78:ff:2a:22:6d:68:66:03:4a:a3:de:54:f4:31:5e:
94:f6:41:86:57:a4:45:75:cd:d6:2f:ba:03:66:f1:98:b8:66:
96:e3:3c:f5:57:5c:f4:7a:cd:3b:30:7b:f7:a4:4b:05:c7:2f:
c3:2e:59:74:0e:6a:fa:6c:c2:95:13:85:3f:93:68:7b:44:e8:
aa:d8:7f:8f:47:97:cd:b9:23:1c:13:a9:c4:db:ca:3e:8b:d5:
c2:5f:7e:a7:9c:92:22:0b:b5:07:1b:35:05:f5:b7:f2:b0:76:
3e:26:e7:8b:56:12:2e:3d:c9:aa:0c:d0:15:58:7d:a5:80:f1:
c1:4f:15:fc:1a:13:f1:f4:03:4b:71:c8:e0:ba:a7:9c:4f:3b:
1b:4f:3d:4a:bc:78:52:58:74:cf:e0:40:45:1d:1c:a7:f4:31:
95:85:94:bd:82:0e:6d:1f:dd:61:2c:bb:3f:95:58:da:3f:ad:
08:a5:ec:4d:59:72:da:0d:0a:b3:33:61:68:65:15:71:d2:5e:
58:89:bd:31:64:a7:6c:4a:47:99:a7:21:4e:73:da:cd:cf:73:
80:2f:ad:2c:b9:b0:26:2d:63:ff:24:a7:d2:37:8d:4b:95:d0:
c2:9e:02:74:f6:07:27:38:5c:f1:52:6d:27:b9:4b:c9:7b:07:
6c:44:07:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:30 2023 by rpki-client on console.sobornost.net