Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/c4c861-b327-41f2-820c-4c0a1c33fa8a/1/gzb9Mxbc7QpwqKEjV910JfL_3OY.roa
File: gzb9Mxbc7QpwqKEjV910JfL_3OY.roa (raw, json)
Hash identifier: gTLIb03599YgOb/kyeR8Jm8MNWeht9f47glLWgdXdj4=
Subject key identifier: 83:36:FD:33:16:DC:ED:0A:70:A8:A1:23:57:DD:74:25:F2:FF:DC:E6
Certificate issuer: /CN=084059a0ca6078a9b75daa66db806ff22c0eaad9
Certificate serial: 01856F4B770FA7D8BE36CEC5C13A10002439
Authority key identifier: 08:40:59:A0:CA:60:78:A9:B7:5D:AA:66:DB:80:6F:F2:2C:0E:AA:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEBZoMpgeKm3Xapm24Bv8iwOqtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/c4c861-b327-41f2-820c-4c0a1c33fa8a/1/gzb9Mxbc7QpwqKEjV910JfL_3OY.roa
Signing time: Sun 01 Jan 2023 21:44:54 +0000
ROA not before: Sun 01 Jan 2023 21:44:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13789
IP address blocks: 185.37.36.0/24 maxlen: 24
185.37.37.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:4b:77:0f:a7:d8:be:36:ce:c5:c1:3a:10:00:24:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=084059a0ca6078a9b75daa66db806ff22c0eaad9
Validity
Not Before: Jan 1 21:44:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8336fd3316dced0a70a8a12357dd7425f2ffdce6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:6e:f4:7f:9a:a8:81:89:fb:49:16:dc:9d:3a:
5e:cb:ac:de:40:27:da:67:c2:ff:59:e2:dd:41:26:
c2:5d:c1:80:96:db:84:b8:3e:a9:91:51:bb:62:ae:
50:9b:5e:d4:9d:6e:9b:71:31:bf:bd:10:68:f0:b4:
a3:69:1b:02:91:04:ca:4d:73:22:72:d9:9a:57:6a:
87:68:be:16:cd:12:7a:42:2e:83:1f:69:fb:a0:e9:
81:4a:07:46:35:8e:89:9c:c7:2d:f4:e5:f2:f8:82:
ed:fe:b0:ab:41:32:4b:40:80:ed:53:be:d0:10:85:
85:fc:5a:64:fa:da:d5:b9:b7:3f:4f:c7:0c:52:17:
4e:06:dc:e4:19:d5:91:38:84:e2:aa:ca:47:56:b1:
d7:5f:39:4a:66:6c:c5:a7:06:82:48:45:48:76:d3:
29:23:cf:67:3b:c4:d2:27:3e:4a:15:96:2c:c2:9b:
80:b8:30:24:88:1b:87:f4:a6:ed:8e:90:3b:a9:2b:
ae:f4:d2:1c:77:66:b9:6c:64:4e:28:76:07:f8:17:
23:33:f1:e4:38:10:90:5d:3f:49:fd:62:0f:a0:a3:
68:40:e4:f3:d9:14:81:1c:80:22:b9:14:86:6a:a2:
d0:a6:e0:b6:7a:10:fe:e7:14:ac:d2:f4:5a:b9:f9:
eb:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:36:FD:33:16:DC:ED:0A:70:A8:A1:23:57:DD:74:25:F2:FF:DC:E6
X509v3 Authority Key Identifier:
keyid:08:40:59:A0:CA:60:78:A9:B7:5D:AA:66:DB:80:6F:F2:2C:0E:AA:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEBZoMpgeKm3Xapm24Bv8iwOqtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c4c861-b327-41f2-820c-4c0a1c33fa8a/1/gzb9Mxbc7QpwqKEjV910JfL_3OY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c4c861-b327-41f2-820c-4c0a1c33fa8a/1/CEBZoMpgeKm3Xapm24Bv8iwOqtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.37.36.0/23
Signature Algorithm: sha256WithRSAEncryption
64:4e:c3:84:12:54:ae:9b:66:17:a4:31:ef:4c:f5:38:94:6e:
b2:4b:14:9f:52:90:e8:be:e9:bf:6a:3f:0b:02:2b:44:af:63:
1e:9e:90:fb:b0:81:e5:cb:bf:4b:4c:51:a2:e5:4a:c1:e2:9f:
ed:60:4a:1c:d1:bb:86:11:dc:47:46:b9:4c:96:77:db:ef:ce:
5f:54:d0:04:11:6e:1d:93:c7:de:38:37:f5:01:d5:9d:7e:6c:
68:a8:e6:b6:9c:4c:2f:2c:ec:a6:6a:9d:be:7c:03:e6:c8:1b:
46:13:4a:39:1f:5a:4f:69:a3:87:bb:10:18:ad:c9:c9:1b:c3:
37:5e:43:10:46:2d:9f:15:b4:40:ac:01:b7:46:00:29:38:e6:
83:8b:7f:c5:9f:f6:06:12:86:e2:08:4d:72:d7:c0:e0:a5:0c:
6f:9f:27:c7:3f:29:e0:f8:fc:af:e2:14:e9:fd:de:8e:ba:d9:
13:5e:bb:1c:3e:97:7e:d3:3c:d8:38:31:1e:dc:98:eb:0e:d0:
d5:be:97:6d:07:5d:85:6f:bb:63:93:68:0d:47:fb:6c:58:ea:
c4:64:2d:67:54:0c:35:c4:4e:75:29:8b:6f:08:b9:79:18:20:
39:e4:74:0b:ce:f1:2c:4b:f8:48:5e:cd:94:a9:7d:30:02:75:
1c:dd:66:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:41:27 2024 by rpki-client on console-ams.rpki-client.org