Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eyCHsduxPujrRzMe2GXhpJ1kA0U.roa
File: eyCHsduxPujrRzMe2GXhpJ1kA0U.roa (raw, json)
Hash identifier: cyqPd1GbIRjaBXjXoLpKqJQKrChOgkO1KNHFzTYzUc0=
Subject key identifier: 7B:20:87:B1:DB:B1:3E:E8:EB:47:33:1E:D8:65:E1:A4:9D:64:03:45
Certificate issuer: /CN=7b26cfcda397163d835c897adea9071e61c8bc4d
Certificate serial: 018571FA167849E491765ED8FF7AF8FAA5B6
Authority key identifier: 7B:26:CF:CD:A3:97:16:3D:83:5C:89:7A:DE:A9:07:1E:61:C8:BC:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eybPzaOXFj2DXIl63qkHHmHIvE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eyCHsduxPujrRzMe2GXhpJ1kA0U.roa
Signing time: Mon 02 Jan 2023 10:14:53 +0000
ROA not before: Mon 02 Jan 2023 10:14:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24971
IP address blocks: 185.8.164.0/23 maxlen: 23
185.8.166.0/24 maxlen: 24
37.205.8.0/22 maxlen: 22
37.205.12.0/22 maxlen: 22
2a03:3b40:100::/40 maxlen: 40
2a03:3b40::/40 maxlen: 40
2a03:3b40:200::/39 maxlen: 39
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:fa:16:78:49:e4:91:76:5e:d8:ff:7a:f8:fa:a5:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b26cfcda397163d835c897adea9071e61c8bc4d
Validity
Not Before: Jan 2 10:14:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7b2087b1dbb13ee8eb47331ed865e1a49d640345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:f9:1f:43:d8:09:39:58:7f:39:d8:f7:af:ea:
86:2f:fd:a9:4c:f1:8d:6a:63:30:95:fa:a0:44:29:
5d:e5:ed:86:72:5c:ce:a2:d0:48:51:bd:d9:78:67:
8e:14:d3:37:ea:af:76:53:74:b2:f6:42:10:78:55:
de:f4:93:a9:06:67:e5:94:6d:c7:0c:4f:ee:40:3b:
73:4c:77:4e:b5:a4:64:9c:14:a9:57:7c:d4:b9:f6:
45:64:02:b2:68:3a:2b:8f:14:a8:43:71:78:36:fc:
43:27:01:29:ce:35:10:f1:c3:09:e2:56:2a:97:a6:
d4:84:08:d4:cc:66:af:10:e9:39:9e:4c:9e:d7:72:
fd:f0:2b:7a:2f:5c:30:8b:b9:2a:69:1f:46:17:5f:
6b:9e:04:20:2b:42:67:1c:aa:86:82:30:47:43:ee:
e4:e4:bf:2b:34:eb:2b:fb:74:06:ee:36:31:57:47:
ca:7e:17:63:75:8b:c6:6b:91:b3:7d:1f:2a:30:74:
9e:e7:d1:55:b3:a5:97:23:02:1f:c5:85:4a:d5:74:
18:df:50:40:53:64:e1:fd:2b:30:99:39:92:dd:74:
16:a8:c5:fa:3f:99:49:69:f5:3d:71:6c:25:8c:43:
3c:b2:e8:ad:46:f3:e3:b5:f6:c3:de:05:63:0e:39:
4b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:20:87:B1:DB:B1:3E:E8:EB:47:33:1E:D8:65:E1:A4:9D:64:03:45
X509v3 Authority Key Identifier:
keyid:7B:26:CF:CD:A3:97:16:3D:83:5C:89:7A:DE:A9:07:1E:61:C8:BC:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eybPzaOXFj2DXIl63qkHHmHIvE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eyCHsduxPujrRzMe2GXhpJ1kA0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/89757a-911a-41b7-bad1-6cd51c84c015/1/eybPzaOXFj2DXIl63qkHHmHIvE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.205.8.0/21
185.8.164.0-185.8.166.255
IPv6:
2a03:3b40::/38
Signature Algorithm: sha256WithRSAEncryption
26:d6:87:b3:89:52:5a:97:1f:73:1d:f4:6c:6b:9b:f5:86:63:
b7:a0:5b:a4:89:bf:28:e1:9f:5c:9b:b8:7b:30:c0:95:cb:e4:
23:66:b0:9a:b2:5f:60:f1:fb:d3:6b:1e:58:1a:ae:32:f7:27:
78:82:cd:95:b6:6a:d7:20:d0:f9:71:6d:63:b2:db:23:dc:fd:
d9:ea:fe:f1:4e:eb:61:13:b3:dd:49:6a:72:5f:a3:41:aa:9c:
31:28:07:04:c5:a9:66:a4:59:6f:2f:80:ab:41:15:d1:34:e5:
b8:9a:bc:19:25:7d:11:e4:62:2b:09:36:96:31:2f:6e:08:91:
b9:86:78:d1:b7:bf:0d:03:ae:1a:20:ea:88:69:81:da:e8:8e:
4e:27:c3:51:a5:7b:e3:0e:70:72:ef:94:ff:55:da:90:e9:8c:
63:15:bb:a3:2d:b7:04:f6:5f:c4:45:37:89:68:43:b3:4d:50:
25:94:6d:ba:41:a2:03:a2:3d:24:b8:d5:3a:4a:23:43:fa:e1:
76:1a:b2:9b:fc:7a:7d:86:b0:e8:b0:70:c3:23:cf:e3:75:c1:
be:71:ce:8c:c7:31:58:56:3f:da:ba:7a:ef:03:00:0b:8e:94:
6d:8a:9e:31:af:10:6c:3b:dd:ee:20:ff:5f:eb:11:04:12:3d:
06:a0:b3:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:14 2023 by rpki-client on console-fra.rpki-client.org