Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/c4c861-b327-41f2-820c-4c0a1c33fa8a/1/pr8cFOqSmyqzpu6bt6Pizmig1V8.roa
File: pr8cFOqSmyqzpu6bt6Pizmig1V8.roa (raw, json)
Hash identifier: J78AKj14wst5Um72ZgqDjtKKIlg1LMtEObuPFT1rQZA=
Subject key identifier: A6:BF:1C:14:EA:92:9B:2A:B3:A6:EE:9B:B7:A3:E2:CE:68:A0:D5:5F
Certificate issuer: /CN=084059a0ca6078a9b75daa66db806ff22c0eaad9
Certificate serial: 01856F4B7970F6F82E8B57F3BCD9EFBC20EB
Authority key identifier: 08:40:59:A0:CA:60:78:A9:B7:5D:AA:66:DB:80:6F:F2:2C:0E:AA:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEBZoMpgeKm3Xapm24Bv8iwOqtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/c4c861-b327-41f2-820c-4c0a1c33fa8a/1/pr8cFOqSmyqzpu6bt6Pizmig1V8.roa
Signing time: Sun 01 Jan 2023 21:44:55 +0000
ROA not before: Sun 01 Jan 2023 21:44:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 36236
IP address blocks: 185.37.38.0/24 maxlen: 24
185.37.39.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:4b:79:70:f6:f8:2e:8b:57:f3:bc:d9:ef:bc:20:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=084059a0ca6078a9b75daa66db806ff22c0eaad9
Validity
Not Before: Jan 1 21:44:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a6bf1c14ea929b2ab3a6ee9bb7a3e2ce68a0d55f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:84:50:9d:8d:72:aa:fa:a3:f7:ab:d3:37:c1:
eb:23:06:7f:7b:de:df:d8:43:dc:c8:4e:f5:43:29:
4f:88:cc:e0:1b:a6:59:fb:ff:fb:37:73:58:29:40:
73:45:43:bf:e5:36:6f:39:49:ec:f8:6e:d6:a1:3b:
44:d7:52:37:5f:4d:f6:7b:da:00:3c:43:d4:04:c1:
fe:70:ee:bf:d1:1d:4e:b9:2c:84:0e:0a:1e:56:b6:
6b:af:65:2c:b7:51:98:0e:f4:72:11:da:99:34:a4:
8e:5e:7f:4e:b2:46:d6:c4:0e:26:a5:25:78:cf:eb:
fa:df:d4:59:b9:13:cf:3c:85:0b:cf:08:18:29:84:
8d:78:66:dd:06:27:7f:63:b5:36:39:b6:fc:a9:eb:
dd:51:9c:85:ab:78:a2:3e:39:70:05:1f:bc:a5:6b:
b8:33:17:c1:6d:61:0c:77:5d:50:54:4c:fa:25:98:
a2:78:2b:d4:49:5e:ed:99:4e:78:b9:cf:23:59:f2:
d7:33:91:73:40:70:fb:aa:ce:b9:18:4f:8b:bd:63:
d8:7d:1b:d7:f2:aa:8d:20:b0:69:2b:f9:65:b7:62:
a3:3c:93:35:42:35:3d:9f:89:9b:7d:0d:72:bd:34:
f1:3a:bd:41:6b:24:57:11:81:3f:f5:ca:ad:a4:80:
95:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:BF:1C:14:EA:92:9B:2A:B3:A6:EE:9B:B7:A3:E2:CE:68:A0:D5:5F
X509v3 Authority Key Identifier:
keyid:08:40:59:A0:CA:60:78:A9:B7:5D:AA:66:DB:80:6F:F2:2C:0E:AA:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEBZoMpgeKm3Xapm24Bv8iwOqtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c4c861-b327-41f2-820c-4c0a1c33fa8a/1/pr8cFOqSmyqzpu6bt6Pizmig1V8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c4c861-b327-41f2-820c-4c0a1c33fa8a/1/CEBZoMpgeKm3Xapm24Bv8iwOqtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.37.38.0/23
Signature Algorithm: sha256WithRSAEncryption
09:cb:13:1d:63:7f:17:b6:31:58:f5:40:fc:a5:6d:35:49:d7:
29:a5:ed:24:ff:8d:a1:2f:5f:78:38:66:8f:d8:54:9e:af:0a:
62:8b:84:0e:27:53:19:58:5e:4c:91:f1:74:4b:99:4c:a4:9d:
fc:b2:8b:ac:1e:e8:1f:87:df:e4:e0:0e:82:7f:ae:dc:13:31:
ef:79:ce:db:4a:30:eb:cc:7c:f9:bb:2a:29:24:ab:f5:6f:a4:
3b:8a:c0:72:e4:b3:a8:08:de:ff:b3:d0:2d:64:1d:a2:9d:4d:
48:2d:ff:c6:a1:c7:da:e8:33:12:de:ce:3b:8b:a5:69:8b:2a:
f8:23:7e:bc:43:1d:4c:7e:7f:06:6a:2d:72:fe:9e:db:31:11:
ed:65:cd:7a:6d:c1:ff:da:4b:98:fa:d2:a6:70:3e:63:1b:87:
81:34:9f:57:52:ed:db:45:79:29:d2:de:c5:22:4f:20:e5:bb:
83:92:4a:ce:35:21:0a:08:b8:db:1f:24:8b:eb:d5:db:46:b0:
00:d1:a8:d5:fc:a4:06:1c:a2:11:4e:cb:aa:5a:cf:58:5a:67:
f9:6a:45:85:bb:56:da:c8:ad:1a:da:ff:18:03:a0:ab:42:7d:
e4:ba:7e:d0:49:90:e5:a1:14:5b:3e:44:68:40:f7:5e:7d:db:
49:c5:15:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:50:36 2024 by rpki-client on console-fra.rpki-client.org