Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/79733f-5332-451b-86af-142a2b98f4c8/1/8pqGM516-PbehKlA7OyAHGPXdCU.roa
File: 8pqGM516-PbehKlA7OyAHGPXdCU.roa (raw, json)
Hash identifier: IKbj4PaAtqCZRU1sPIFqNqMVhveSYtqWc6dCCOK1TGc=
Subject key identifier: F2:9A:86:33:9D:7A:F8:F6:DE:84:A9:40:EC:EC:80:1C:63:D7:74:25
Certificate issuer: /CN=1c020297839c7390df20251a5c0930e6a672bee3
Certificate serial: 01856EB90CF10BEA89AB21130B87E79B0878
Authority key identifier: 1C:02:02:97:83:9C:73:90:DF:20:25:1A:5C:09:30:E6:A6:72:BE:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAICl4Occ5DfICUaXAkw5qZyvuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/79733f-5332-451b-86af-142a2b98f4c8/1/8pqGM516-PbehKlA7OyAHGPXdCU.roa
Signing time: Sun 01 Jan 2023 19:04:59 +0000
ROA not before: Sun 01 Jan 2023 19:04:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50558
IP address blocks: 37.32.112.0/20 maxlen: 20
37.32.120.0/24 maxlen: 24
37.32.124.0/23 maxlen: 23
185.49.96.0/24 maxlen: 24
185.49.96.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:b9:0c:f1:0b:ea:89:ab:21:13:0b:87:e7:9b:08:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c020297839c7390df20251a5c0930e6a672bee3
Validity
Not Before: Jan 1 19:04:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f29a86339d7af8f6de84a940ecec801c63d77425
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:35:cb:05:c8:14:66:49:70:18:a8:53:65:c9:
d0:86:12:30:b9:dd:7c:85:5a:82:42:3e:7c:70:f3:
74:7c:c7:be:59:a1:4c:e1:7d:1d:70:4f:4f:c4:98:
3a:76:d2:30:47:ce:c1:9c:23:39:27:2f:6c:bc:c6:
14:83:85:8b:f4:61:3d:fa:51:45:5e:ef:e3:1e:07:
1a:75:26:d2:4d:d4:75:74:80:04:14:f5:ca:1c:77:
cf:7a:de:0c:40:24:88:6f:44:db:7f:f9:b8:00:85:
6b:f5:40:88:55:31:ed:74:2f:29:03:d6:4f:b9:57:
16:07:2a:85:9b:84:27:73:aa:27:0f:2d:a2:bc:1e:
3e:a2:d3:85:a5:b6:e9:d2:92:27:58:f5:df:0a:66:
60:a2:a8:d2:58:e3:36:64:2d:3a:04:3f:cd:94:9d:
18:fb:07:71:2f:8a:5e:88:72:d8:97:ff:4b:84:d1:
99:39:41:0e:e4:fc:11:94:c0:71:40:d3:dd:14:71:
b8:6e:f1:38:e0:27:b6:b1:14:ac:fd:c0:30:31:f0:
0e:2d:c1:ff:f0:02:3b:1b:53:e0:de:0c:91:21:ef:
6d:87:4c:ff:32:a2:71:f7:68:44:bd:72:50:ed:11:
fc:43:33:98:7f:e6:46:17:b0:1c:0d:11:89:4c:7f:
7d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:9A:86:33:9D:7A:F8:F6:DE:84:A9:40:EC:EC:80:1C:63:D7:74:25
X509v3 Authority Key Identifier:
keyid:1C:02:02:97:83:9C:73:90:DF:20:25:1A:5C:09:30:E6:A6:72:BE:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAICl4Occ5DfICUaXAkw5qZyvuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/79733f-5332-451b-86af-142a2b98f4c8/1/8pqGM516-PbehKlA7OyAHGPXdCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/79733f-5332-451b-86af-142a2b98f4c8/1/HAICl4Occ5DfICUaXAkw5qZyvuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.32.112.0/20
185.49.96.0/22
Signature Algorithm: sha256WithRSAEncryption
42:15:c5:8b:ec:dc:c0:ff:0e:2e:1b:cc:e0:7c:95:1e:b2:5b:
50:bd:be:b1:44:0c:ce:28:bd:c9:85:c4:5e:4b:0c:a5:61:d3:
d6:c7:ed:2d:c6:86:68:f5:2b:ff:df:9d:18:03:57:58:63:3b:
77:f1:f7:6e:d9:ab:0c:53:93:e8:54:50:cf:ed:a1:81:df:98:
6b:c0:bf:7c:4e:3f:dc:58:a5:ea:b1:43:3a:44:7b:2b:2f:3f:
fc:91:93:c6:b9:aa:7d:9a:b3:58:cc:38:de:e9:9e:29:1e:fd:
95:10:05:a7:71:81:d6:00:6b:d0:dd:44:b9:48:33:02:77:fb:
51:27:f3:2b:3f:3d:17:a1:00:b8:54:34:a5:94:2c:79:b4:af:
45:bb:ba:3d:27:56:c1:f4:b2:9b:a8:37:ef:c2:56:34:8f:66:
34:ff:d0:90:01:2d:7c:67:24:e5:48:4a:76:61:7a:82:a6:42:
d1:21:68:dd:05:69:92:93:87:84:e9:b4:4b:7a:c4:81:d4:20:
53:16:4d:a6:0e:9a:ca:56:f4:68:6f:c3:08:a0:87:a1:c1:6f:
30:5b:a6:26:08:e7:df:7b:78:3d:88:c4:4a:30:80:54:ef:4d:
a4:33:e4:46:ac:41:ec:f8:da:3f:c2:c8:b9:f0:f2:c4:9e:67:
e5:69:38:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:32 2023 by rpki-client on console-fra.rpki-client.org