Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/hwKihf6MHarJ_VHSyXMdBLWVCSw.roa
File: hwKihf6MHarJ_VHSyXMdBLWVCSw.roa (raw, json)
Hash identifier: IuDR7R8L2bl2fhyJhJQV3/uSyd6PLUrvMR4bxdcxR9w=
Subject key identifier: 87:02:A2:85:FE:8C:1D:AA:C9:FD:51:D2:C9:73:1D:04:B5:95:09:2C
Certificate issuer: /CN=37fb004e397ddf04e7d05f3643a036f21836ff10
Certificate serial: 01856D661B3B4B842D14D47B28162BDDFAD2
Authority key identifier: 37:FB:00:4E:39:7D:DF:04:E7:D0:5F:36:43:A0:36:F2:18:36:FF:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N_sATjl93wTn0F82Q6A28hg2_xA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/hwKihf6MHarJ_VHSyXMdBLWVCSw.roa
Signing time: Sun 01 Jan 2023 12:54:46 +0000
ROA not before: Sun 01 Jan 2023 12:54:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206566
IP address blocks: 185.183.8.0/22 maxlen: 22
2a0a:ff80::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:30:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:66:1b:3b:4b:84:2d:14:d4:7b:28:16:2b:dd:fa:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37fb004e397ddf04e7d05f3643a036f21836ff10
Validity
Not Before: Jan 1 12:54:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8702a285fe8c1daac9fd51d2c9731d04b595092c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b9:c5:4b:40:b4:2f:fe:16:8a:4a:f2:f7:72:
f5:ac:97:5c:ea:8e:db:82:0c:db:31:8a:bb:a1:4b:
59:17:a5:a9:e2:be:46:2e:7b:8d:28:21:cf:68:9a:
da:1c:8f:98:83:f3:87:c0:55:47:be:54:cd:78:05:
97:14:2e:dc:ec:e3:15:84:e0:f6:8e:0b:0d:55:d7:
23:06:73:3c:77:d0:07:78:1f:b3:cf:5c:39:b4:08:
83:68:8c:a4:78:7a:f4:11:73:1b:b1:c4:72:5e:8a:
16:02:4b:7c:60:ee:46:9b:f8:1c:05:8f:e6:d3:43:
b7:b7:c2:23:e5:aa:bf:38:93:aa:b8:57:fe:9e:28:
9a:72:25:00:b3:46:3f:b5:83:d1:f1:70:43:cd:df:
61:0a:d8:e2:20:a2:86:60:55:04:cd:a5:8a:3e:f9:
36:db:d1:b6:05:5c:48:b9:4f:a6:3e:2f:02:b6:6e:
56:a4:bc:0e:9a:b8:e8:b7:15:39:80:61:b5:7e:55:
28:a7:9a:0d:07:bb:0f:e0:d2:85:db:fc:14:ff:d1:
51:78:55:3b:e8:81:47:f2:c1:f9:44:34:71:fb:47:
9d:e1:18:a5:76:a8:9d:c0:6b:11:81:28:a6:d3:14:
77:3b:91:8c:59:5b:39:25:8d:44:4a:66:e3:57:16:
db:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:02:A2:85:FE:8C:1D:AA:C9:FD:51:D2:C9:73:1D:04:B5:95:09:2C
X509v3 Authority Key Identifier:
keyid:37:FB:00:4E:39:7D:DF:04:E7:D0:5F:36:43:A0:36:F2:18:36:FF:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N_sATjl93wTn0F82Q6A28hg2_xA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/hwKihf6MHarJ_VHSyXMdBLWVCSw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.183.8.0/22
IPv6:
2a0a:ff80::/32
Signature Algorithm: sha256WithRSAEncryption
01:3f:bb:f2:00:ce:1f:03:3d:5d:4d:2e:08:7b:85:0c:45:3a:
ff:f1:ee:ee:e2:ef:a2:0c:13:5d:7b:88:48:46:7c:16:c2:70:
37:33:c2:7a:7d:b1:55:96:e4:3c:c5:c2:be:95:a9:61:ed:11:
d6:0d:e8:67:85:5c:88:d0:84:9d:52:df:f1:5b:65:8d:c3:09:
b3:3e:2c:7e:1d:9a:63:6c:bc:ee:de:c9:b6:75:2b:66:46:0c:
ae:54:de:eb:df:2d:35:4d:e0:09:1a:a2:94:f9:60:a9:08:09:
f6:53:d1:85:41:5a:f9:92:95:0d:36:a6:7d:8d:f7:6b:f1:64:
0e:bd:97:c7:a7:43:0e:db:8f:c7:97:f9:99:95:42:17:4c:e2:
ca:32:d1:3d:0c:bb:59:55:f4:1c:45:dc:fd:ab:e8:d0:57:3c:
08:68:db:0e:6f:42:95:ed:f0:0a:2a:f4:16:a3:0c:27:e5:44:
7e:e7:4e:79:ac:cc:e8:47:db:ae:aa:00:a1:7a:4b:2c:b5:fa:
a5:87:92:2c:e9:9e:60:ff:80:0a:3d:da:fd:8b:c1:13:db:e7:
be:38:ee:6c:ad:7b:d2:a7:7a:93:98:ef:65:25:bb:42:a1:96:
f5:28:c2:8f:cc:2f:12:72:23:05:42:63:85:8f:df:9c:59:70:
ee:3f:3c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:02 2024 by rpki-client on console-fra.rpki-client.org