Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/ev_RCeTmmjSgDKAqWgHAo13OSpg.roa
File: ev_RCeTmmjSgDKAqWgHAo13OSpg.roa (raw, json)
Hash identifier: qhX2Z2pxler1XI6+lB4wLFvj0xaBNGlzbJy3MBml6CQ=
Subject key identifier: 7A:FF:D1:09:E4:E6:9A:34:A0:0C:A0:2A:5A:01:C0:A3:5D:CE:4A:98
Certificate issuer: /CN=9f2bc3c5564d434381cb78ba47ad58be4d3deaa8
Certificate serial: 01856B25521DA3624E62C215CE67FD895FB6
Authority key identifier: 9F:2B:C3:C5:56:4D:43:43:81:CB:78:BA:47:AD:58:BE:4D:3D:EA:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyvDxVZNQ0OBy3i6R61Yvk096qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/ev_RCeTmmjSgDKAqWgHAo13OSpg.roa
Signing time: Sun 01 Jan 2023 02:24:45 +0000
ROA not before: Sun 01 Jan 2023 02:24:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199231
IP address blocks: 185.4.228.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:25:52:1d:a3:62:4e:62:c2:15:ce:67:fd:89:5f:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f2bc3c5564d434381cb78ba47ad58be4d3deaa8
Validity
Not Before: Jan 1 02:24:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7affd109e4e69a34a00ca02a5a01c0a35dce4a98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:05:7c:1a:8d:ab:0d:d3:88:81:45:ea:f5:08:
6e:b7:c5:9c:e2:e1:ce:67:4b:ae:26:4d:d3:bf:de:
b9:6e:18:a3:2f:c8:53:6a:ca:e1:cb:8c:6b:4b:a5:
c0:b2:7f:95:5e:b7:d1:fc:4e:61:bc:54:dd:20:3b:
5f:c4:8f:6f:93:89:25:ef:c6:f6:1d:f7:b6:f2:bc:
e4:d4:3a:a3:d4:2c:35:bd:b0:2b:e3:ce:2e:a4:08:
1b:6f:75:13:80:a7:4b:c6:18:ab:10:50:be:ac:30:
8e:4d:36:b8:e1:62:04:e7:2d:b6:6b:66:14:b8:7a:
5c:3c:53:ed:2a:e0:c5:a5:9b:19:43:51:56:c0:7f:
70:a3:4e:19:28:5e:12:41:8b:c9:90:b7:1e:cb:94:
e8:d0:8e:31:6d:c8:40:78:a0:88:87:53:c6:df:4b:
96:64:c0:75:3a:50:36:d9:e6:94:cb:36:09:12:0e:
b3:81:02:55:a6:61:52:a3:eb:e7:13:10:76:d1:1c:
67:84:3b:53:2d:db:6e:2a:76:26:16:16:b9:ab:50:
b4:a6:50:da:c9:36:47:d5:05:05:4d:27:9b:e6:8a:
93:a3:60:3d:b1:db:c5:01:2e:f5:4c:36:4d:56:1e:
7c:d8:f5:aa:a2:ef:27:e2:e6:5b:bf:b1:34:59:ef:
61:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:FF:D1:09:E4:E6:9A:34:A0:0C:A0:2A:5A:01:C0:A3:5D:CE:4A:98
X509v3 Authority Key Identifier:
keyid:9F:2B:C3:C5:56:4D:43:43:81:CB:78:BA:47:AD:58:BE:4D:3D:EA:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyvDxVZNQ0OBy3i6R61Yvk096qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/ev_RCeTmmjSgDKAqWgHAo13OSpg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/nyvDxVZNQ0OBy3i6R61Yvk096qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.4.228.0/22
Signature Algorithm: sha256WithRSAEncryption
bd:b2:c1:97:4e:1e:5d:fd:21:3a:51:81:2e:db:6c:a2:e5:b0:
18:ef:d6:ea:07:4c:47:6f:88:77:c4:1a:7f:9e:c9:38:9c:e6:
84:52:23:47:e3:b6:a5:ab:27:ed:70:b5:23:99:88:de:67:6d:
c1:7e:9d:ff:4b:1e:2d:11:eb:2b:c1:a7:59:cf:4e:74:78:87:
27:1e:7d:6f:65:62:85:01:fb:b8:6a:eb:3f:9a:a6:07:32:08:
2a:70:fb:58:fe:62:ff:bd:79:ab:f9:ee:5f:c5:36:f5:e7:b7:
f9:a1:0d:1d:e0:89:b5:86:f1:63:12:ed:b2:80:1e:b0:f5:93:
6f:aa:07:c6:fd:f6:7c:b8:44:1e:49:e4:25:e0:4c:a4:9b:f4:
7e:d9:20:a3:d4:f3:31:ec:8d:80:64:86:4f:83:d2:bb:65:73:
ae:f9:21:33:7a:cb:13:35:85:92:04:e5:f4:53:9e:53:a1:85:
58:7d:93:c5:9e:88:0e:d5:4e:36:a4:ad:cb:d4:4c:c1:79:32:
ff:d1:af:21:cb:ed:31:20:6d:83:6e:0b:6d:e9:cf:21:3f:7a:
af:85:11:8f:ff:77:4b:a6:f3:34:55:1a:37:67:65:90:20:23:
b7:70:04:c6:cf:76:a3:13:03:c9:53:31:35:ae:e1:2b:20:ac:
92:e4:84:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:23 2024 by rpki-client on console-fra.rpki-client.org