Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/a89c01-6bb1-477c-94bc-5abe93aff642/1/eyKc0V8hcSR6goqq7yY2mmyaEsc.roa
File: eyKc0V8hcSR6goqq7yY2mmyaEsc.roa (raw, json)
Hash identifier: igqa6V9k50/GWWTpgfZee+G1zL1jdTo6B2Du0pnLOLY=
Subject key identifier: 7B:22:9C:D1:5F:21:71:24:7A:82:8A:AA:EF:26:36:9A:6C:9A:12:C7
Certificate issuer: /CN=c900ef3dd5dd1be15d08bb93cbdd63b4ac860e6b
Certificate serial: 0185728CA3F0793AB32BCB4C23BF80AB2BC0
Authority key identifier: C9:00:EF:3D:D5:DD:1B:E1:5D:08:BB:93:CB:DD:63:B4:AC:86:0E:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yQDvPdXdG-FdCLuTy91jtKyGDms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/a89c01-6bb1-477c-94bc-5abe93aff642/1/eyKc0V8hcSR6goqq7yY2mmyaEsc.roa
Signing time: Mon 02 Jan 2023 12:54:57 +0000
ROA not before: Mon 02 Jan 2023 12:54:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202544
IP address blocks: 185.151.136.0/22 maxlen: 22
185.149.168.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:8c:a3:f0:79:3a:b3:2b:cb:4c:23:bf:80:ab:2b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c900ef3dd5dd1be15d08bb93cbdd63b4ac860e6b
Validity
Not Before: Jan 2 12:54:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7b229cd15f2171247a828aaaef26369a6c9a12c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:52:86:55:68:24:2d:98:ec:22:0a:aa:9a:1a:
0d:16:3d:18:55:24:7c:3a:3a:50:13:58:93:2e:16:
61:0f:e5:eb:e2:88:1c:e9:03:e8:7e:c9:00:7f:b3:
54:31:88:ae:41:a4:46:5e:d9:41:cd:65:af:43:4b:
ff:e0:8a:f4:df:81:f4:04:08:00:77:84:20:3e:a8:
71:e5:02:8e:10:54:ca:82:62:7d:6e:b9:12:82:b4:
23:1f:29:c9:69:59:ba:07:e9:94:ec:52:38:24:1e:
67:a6:05:3d:d2:90:f4:e7:a0:29:69:27:00:81:fe:
14:f3:91:9a:b7:2b:97:78:4d:23:1d:aa:2b:db:26:
f0:07:3f:0a:12:73:ea:d8:e0:3f:b7:53:3d:73:84:
84:ae:86:71:f4:61:b6:00:5a:7a:51:39:2d:ae:3c:
85:ab:bc:b1:9d:5a:46:35:23:9f:75:4f:12:4d:36:
b6:f1:39:bd:ef:ee:41:54:7b:c8:ff:49:f3:ea:f5:
6e:e0:01:51:2a:07:06:cd:2f:28:83:46:f8:54:32:
fa:fc:2b:4a:c9:aa:88:e2:22:e9:a1:4e:3e:8e:5d:
b1:94:b7:11:5d:e9:55:65:ec:0f:81:7d:6e:44:84:
58:05:b2:aa:50:e4:0e:67:f0:00:c5:e0:d3:e7:0b:
14:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:22:9C:D1:5F:21:71:24:7A:82:8A:AA:EF:26:36:9A:6C:9A:12:C7
X509v3 Authority Key Identifier:
keyid:C9:00:EF:3D:D5:DD:1B:E1:5D:08:BB:93:CB:DD:63:B4:AC:86:0E:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yQDvPdXdG-FdCLuTy91jtKyGDms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/a89c01-6bb1-477c-94bc-5abe93aff642/1/eyKc0V8hcSR6goqq7yY2mmyaEsc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/a89c01-6bb1-477c-94bc-5abe93aff642/1/yQDvPdXdG-FdCLuTy91jtKyGDms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.149.168.0/22
185.151.136.0/22
Signature Algorithm: sha256WithRSAEncryption
63:35:87:9e:15:27:2c:21:fb:2d:28:12:b5:09:48:0e:39:98:
51:aa:6b:d9:f0:ea:69:d8:0f:c4:bf:d9:c5:9d:dd:1e:85:90:
d1:68:02:e2:7a:b7:93:a3:42:6a:be:ab:bc:58:ff:ae:dc:72:
b6:4f:c2:a1:0f:b6:e0:b5:16:18:ff:0f:4e:84:5f:42:6f:7a:
3c:b1:b0:0a:39:cd:31:2f:6c:53:54:52:d4:d7:25:a2:99:bc:
b5:17:a6:2b:b0:22:e0:0d:6e:81:3f:88:39:d0:8d:19:6f:8f:
d6:52:60:15:62:4a:fb:05:33:39:4f:02:a1:b1:5e:25:03:7c:
91:4e:b4:c0:4d:88:65:a9:7a:3f:e4:5f:08:da:cc:fd:f4:11:
ab:63:ce:5b:34:83:a0:5b:a9:9e:ab:49:26:c6:0a:6b:a6:3c:
a9:d0:be:d0:12:b9:c1:e7:2d:35:c2:38:74:65:88:6d:2a:00:
5f:ab:5a:b9:19:1a:ed:23:f2:00:84:ee:66:d9:34:fe:54:d7:
3e:53:69:6b:92:d1:04:50:49:8d:1a:60:58:13:28:0a:dc:5f:
f8:68:3a:72:32:04:96:82:65:0d:ee:63:b6:2b:57:f0:e4:1c:
f8:a9:b6:79:7f:e7:a1:6f:8c:0e:80:c8:b8:bd:10:06:98:1c:
7d:58:e8:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:18:45 2024 by rpki-client on console-ams.rpki-client.org