Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/ewisDT2D70t2IjM-my44mSQBx3w.roa
File: ewisDT2D70t2IjM-my44mSQBx3w.roa (raw, json)
Hash identifier: jlo5KqTK3H6xh31E7m8rr1lDBA4WjsIuuL7aVm0v/qk=
Subject key identifier: 7B:08:AC:0D:3D:83:EF:4B:76:22:33:3E:9B:2E:38:99:24:01:C7:7C
Certificate issuer: /CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Certificate serial: 018DAE024AA5A06F351EAA0676A0A474BBFE
Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/ewisDT2D70t2IjM-my44mSQBx3w.roa
Signing time: Thu 15 Feb 2024 18:23:22 +0000
ROA not before: Thu 15 Feb 2024 18:23:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216271
IP address blocks: 185.168.28.0/22 maxlen: 22
185.201.136.0/22 maxlen: 22
2a06:b3c0::/29 maxlen: 29
2a06:b440::/29 maxlen: 29
2a06:cac0::/29 maxlen: 29
2a11:2f40::/29 maxlen: 29
2a11:3b40::/29 maxlen: 29
2a11:9600::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 20 Feb 2024 09:46:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ae:02:4a:a5:a0:6f:35:1e:aa:06:76:a0:a4:74:bb:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Validity
Not Before: Feb 15 18:23:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7b08ac0d3d83ef4b7622333e9b2e38992401c77c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:7a:4a:53:e8:c9:d4:d2:ca:50:6f:77:8c:6e:
77:e1:a1:e7:ef:2f:51:3d:26:f4:b3:ee:dd:fe:25:
f2:bf:08:4a:de:1c:54:b7:f7:64:7e:01:ba:43:00:
d9:0a:fd:f0:72:37:c1:da:95:81:91:91:84:dd:a6:
b2:c3:d1:84:fd:5c:66:f4:62:45:65:86:b7:f5:fa:
d7:a7:a3:19:35:69:44:8a:c9:75:47:7e:b3:4b:51:
20:88:c3:0f:9a:d9:14:1d:18:1b:1a:09:cb:e2:89:
62:bf:58:cc:75:35:9b:78:44:b4:f9:e1:c8:cd:7b:
20:27:a0:1e:de:16:73:5c:c3:a8:05:84:fc:38:9c:
e2:eb:b7:32:60:08:f9:94:df:cc:69:eb:b6:11:6a:
8b:ce:cd:e8:48:49:f8:7d:1c:95:3e:77:5b:b0:83:
aa:a0:86:b8:de:61:88:c6:e6:3c:4e:17:1b:4c:6c:
9d:64:3f:22:e7:9b:88:e7:b7:6c:c8:2b:a5:a4:76:
32:c0:6d:95:8c:a4:e6:40:04:8e:67:da:84:67:e9:
98:f0:60:79:a6:32:3e:e0:74:f7:73:2c:39:b7:c8:
3b:99:4a:3b:b5:0a:3a:b9:79:32:3f:80:60:c6:9b:
29:63:29:18:aa:a8:70:b1:28:03:bc:ca:3d:49:0e:
6c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:08:AC:0D:3D:83:EF:4B:76:22:33:3E:9B:2E:38:99:24:01:C7:7C
X509v3 Authority Key Identifier:
keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/ewisDT2D70t2IjM-my44mSQBx3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.168.28.0/22
185.201.136.0/22
IPv6:
2a06:b3c0::/29
2a06:b440::/29
2a06:cac0::/29
2a11:2f40::/29
2a11:3b40::/29
2a11:9600::/29
Signature Algorithm: sha256WithRSAEncryption
90:24:90:a9:8e:57:89:ad:51:34:53:21:0d:0f:c7:4c:54:e3:
4b:67:ed:cb:d5:cf:5d:11:7b:50:f1:01:91:48:c1:07:f2:95:
4d:16:c2:67:0d:a0:eb:2e:ef:3b:ac:b5:c2:85:7b:36:65:f6:
c2:51:56:98:9d:0b:fb:97:10:8f:bc:92:52:2c:db:a5:92:c9:
d4:8e:68:a6:41:f0:09:ea:1d:8b:3a:f0:d0:a6:72:49:cb:55:
fd:4b:cd:af:db:ef:df:3a:7d:0a:85:d5:09:31:33:08:e8:59:
6e:7e:ce:9b:d8:b5:db:bd:71:c5:e6:ae:e2:9a:f3:d4:f9:57:
d9:90:94:4b:53:4d:ca:b7:71:b8:1a:2b:b1:7d:ce:2d:46:23:
91:15:21:71:53:09:e2:5e:9c:45:88:48:57:6b:a0:2b:71:1e:
91:d5:48:20:23:aa:7a:9d:cd:b1:5a:84:40:f2:ac:c2:04:b7:
b9:f7:6c:a1:d7:3c:97:89:23:f3:57:cc:1f:19:ed:20:40:b0:
e3:8d:e0:22:38:d4:18:c4:f2:ad:c4:97:d8:cf:32:62:bd:45:
a0:28:28:fc:e9:2e:cb:dd:49:c2:2c:ed:b2:ac:63:94:da:39:
ad:75:f0:9c:b7:84:34:24:a3:11:d9:e5:bb:ef:e8:eb:ab:6a:
4c:7b:cf:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:02 2024 by rpki-client on console-ams.rpki-client.org