Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/d9b450-729d-48de-ab8f-cec40e425264/1/b8dPtG3yzp6aonaCzzn-cQ-BzG4.roa
File: b8dPtG3yzp6aonaCzzn-cQ-BzG4.roa (raw, json)
Hash identifier: PwH3pD/CL+iXLpn2eGsyKbBwNWW/jVpeM8XzSWS0w9A=
Subject key identifier: 6F:C7:4F:B4:6D:F2:CE:9E:9A:A2:76:82:CF:39:FE:71:0F:81:CC:6E
Certificate issuer: /CN=3f947c4fd2396d9edb8bc454405e57558d8b9502
Certificate serial: 0185724C62B480C6F21704DF1DCF6AEB7F1A
Authority key identifier: 3F:94:7C:4F:D2:39:6D:9E:DB:8B:C4:54:40:5E:57:55:8D:8B:95:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/d9b450-729d-48de-ab8f-cec40e425264/1/b8dPtG3yzp6aonaCzzn-cQ-BzG4.roa
Signing time: Mon 02 Jan 2023 11:44:46 +0000
ROA not before: Mon 02 Jan 2023 11:44:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50629
IP address blocks: 185.55.116.0/22 maxlen: 23
185.146.228.0/22 maxlen: 23
46.19.88.0/21 maxlen: 22
31.209.80.0/20 maxlen: 21
185.76.188.0/22 maxlen: 23
37.72.144.0/21 maxlen: 22
2a00:c380::/32 maxlen: 33
2a02:2918::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:4c:62:b4:80:c6:f2:17:04:df:1d:cf:6a:eb:7f:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f947c4fd2396d9edb8bc454405e57558d8b9502
Validity
Not Before: Jan 2 11:44:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6fc74fb46df2ce9e9aa27682cf39fe710f81cc6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:04:2a:3d:b4:02:52:4c:9a:38:77:2d:21:bf:
30:3a:d1:1f:0e:fb:36:17:f7:1f:cc:b4:fd:90:84:
ff:1e:b0:67:33:82:32:c4:9f:cb:6a:cb:5c:23:22:
d7:26:f6:4d:ac:dc:ba:30:d2:aa:eb:09:82:96:c8:
59:3c:9b:5c:3d:33:df:b6:53:64:b1:c8:70:96:fb:
ec:cd:75:bf:bc:4a:95:1e:e1:f8:61:34:a0:f3:45:
c2:d3:7a:fa:3d:f4:9a:23:7f:c2:74:b1:10:80:94:
a9:ef:12:fc:c2:9a:1f:d0:02:c9:bb:a2:0a:bd:fd:
c4:ef:d0:ff:1a:5f:c1:b6:c6:ed:dc:6d:56:ef:a8:
f0:a7:de:61:e3:6f:64:79:b1:fc:ef:9b:a0:81:e1:
78:a5:a1:21:02:46:69:ee:0a:06:24:14:47:84:e6:
9a:3e:73:a1:a1:11:ac:8d:a3:7b:64:08:d7:77:61:
85:62:cd:a7:43:60:93:de:d1:a3:ab:ca:6e:47:71:
29:5d:38:3d:a3:0b:2e:cf:17:82:ad:f5:4a:5d:28:
95:6d:ce:59:2b:82:a4:e8:72:e9:47:c5:66:12:94:
dc:ec:89:c1:87:22:dc:6f:fe:ef:92:a2:7a:90:30:
fe:dc:44:e6:90:08:1b:5d:6a:6e:92:fc:f0:d7:70:
c5:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:C7:4F:B4:6D:F2:CE:9E:9A:A2:76:82:CF:39:FE:71:0F:81:CC:6E
X509v3 Authority Key Identifier:
keyid:3F:94:7C:4F:D2:39:6D:9E:DB:8B:C4:54:40:5E:57:55:8D:8B:95:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d9b450-729d-48de-ab8f-cec40e425264/1/b8dPtG3yzp6aonaCzzn-cQ-BzG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d9b450-729d-48de-ab8f-cec40e425264/1/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.209.80.0/20
37.72.144.0/21
46.19.88.0/21
185.55.116.0/22
185.76.188.0/22
185.146.228.0/22
IPv6:
2a00:c380::/32
2a02:2918::/32
Signature Algorithm: sha256WithRSAEncryption
08:9a:3d:0a:90:7d:89:28:e6:10:8c:01:7b:53:a4:44:29:c2:
67:3a:70:65:a9:b3:4d:51:7f:ca:f8:5b:1d:d5:ae:8f:22:2c:
ab:37:dd:48:62:14:5b:e5:d5:2c:a9:72:2a:48:c1:a1:05:e4:
f5:9b:e2:51:9b:1e:07:3c:86:2c:a1:21:d9:9a:3c:36:03:3d:
5e:61:81:fb:d7:64:65:8f:23:02:d2:40:50:a2:d6:c8:31:b4:
a3:8f:4f:f2:97:f1:2a:ed:1c:7c:78:79:f5:a3:a5:0f:77:a5:
ac:24:38:9d:7b:95:5c:5e:6a:e3:cc:44:26:76:54:eb:8e:a9:
6a:c2:be:eb:79:48:90:fb:e1:96:27:2c:bc:bd:b1:e3:8f:20:
38:75:a5:1c:d5:16:7f:9c:59:c6:8d:98:97:e2:ad:f9:38:29:
45:4f:b6:d6:13:fc:6f:7a:d2:b5:7d:0c:8b:e6:c0:04:33:65:
e7:f2:f0:e0:12:aa:b8:52:70:2f:9b:1f:d8:0b:c1:f1:37:c1:
3c:79:90:8b:82:38:f5:28:fd:5e:f4:8c:7f:e5:c0:e0:10:0b:
a0:dd:a2:14:e0:2b:5c:97:e1:5a:fd:e9:8c:29:5b:5a:6b:ae:
76:91:4c:99:1b:7b:e7:d7:88:72:7c:ec:b1:91:c5:a4:07:c1:
40:04:13:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 02:54:05 2024 by rpki-client on console-ams.rpki-client.org