Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/eMwmsssVAWLyPyq4cmVlpvjQrVw.roa
File: eMwmsssVAWLyPyq4cmVlpvjQrVw.roa (raw, json)
Hash identifier: OERn0rfsatoS9Xbr6vxSkYoHwBp0GRiE6fjL1Q4HtB8=
Subject key identifier: 78:CC:26:B2:CB:15:01:62:F2:3F:2A:B8:72:65:65:A6:F8:D0:AD:5C
Certificate issuer: /CN=a15e3f974b5f974656ccf4d45596caad1b9096d4
Certificate serial: 0185729EDA258BD9F791D9D0FB31E9A3C649
Authority key identifier: A1:5E:3F:97:4B:5F:97:46:56:CC:F4:D4:55:96:CA:AD:1B:90:96:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/eMwmsssVAWLyPyq4cmVlpvjQrVw.roa
Signing time: Mon 02 Jan 2023 13:14:51 +0000
ROA not before: Mon 02 Jan 2023 13:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34549
IP address blocks: 185.220.149.0/24 maxlen: 24
2a0b:f841::/32 maxlen: 48
Validation: Failed, certificate revoked on Tue 10 Jan 2023 21:37:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:9e:da:25:8b:d9:f7:91:d9:d0:fb:31:e9:a3:c6:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a15e3f974b5f974656ccf4d45596caad1b9096d4
Validity
Not Before: Jan 2 13:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=78cc26b2cb150162f23f2ab8726565a6f8d0ad5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:72:55:12:d0:7c:13:a9:a7:bd:b9:7a:d4:ae:
21:a2:a4:ff:f9:a9:b0:b7:3b:2f:60:de:38:d7:ff:
bc:d0:41:e8:84:f8:65:68:b4:21:be:99:1c:85:69:
82:b6:a8:11:4e:dc:1e:47:e0:90:70:c8:65:f1:71:
f4:f9:bd:10:30:b4:92:d1:12:8f:12:ae:3f:a2:86:
c1:2e:dd:9a:42:6e:34:51:3a:7d:fc:fa:2e:0b:96:
5c:75:61:b9:f2:b5:00:8d:30:6e:85:4a:c8:a0:5a:
5f:cd:69:ad:68:a8:05:43:cf:78:ee:ca:35:fb:5f:
84:3d:ef:33:58:ca:57:cc:84:d2:e9:60:03:71:de:
34:0b:76:35:9b:0d:fe:5d:41:5c:93:73:74:01:3e:
b5:a8:e6:f3:78:37:a5:67:67:00:4a:be:e8:2a:19:
aa:60:3e:02:05:b4:4b:20:24:ff:39:44:d5:b1:c7:
b6:62:de:3c:91:e7:3a:90:78:cc:fd:c8:f4:a1:4c:
a2:68:18:64:24:85:21:f2:0a:40:d7:09:ca:0a:f6:
af:7b:22:fe:79:68:b9:45:2f:1e:1f:4f:a2:9c:e0:
fb:0b:1d:5b:5b:76:5d:80:9c:51:f0:d0:e5:56:eb:
8f:28:6a:d3:ff:a6:a4:c7:aa:33:cb:38:72:54:c7:
70:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:CC:26:B2:CB:15:01:62:F2:3F:2A:B8:72:65:65:A6:F8:D0:AD:5C
X509v3 Authority Key Identifier:
keyid:A1:5E:3F:97:4B:5F:97:46:56:CC:F4:D4:55:96:CA:AD:1B:90:96:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/eMwmsssVAWLyPyq4cmVlpvjQrVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.220.149.0/24
IPv6:
2a0b:f841::/32
Signature Algorithm: sha256WithRSAEncryption
77:01:50:6f:ff:2d:7a:cc:57:4f:61:7b:8c:f7:d2:89:b7:f1:
c1:05:3e:12:4e:32:2c:e7:f1:1e:b9:47:44:34:04:7d:38:73:
a2:a6:22:25:e6:13:8b:fc:c3:91:30:65:01:fc:3f:62:5c:a2:
dc:54:a0:70:49:af:5d:53:f0:51:59:20:64:2f:e0:f1:1f:ac:
18:74:cf:7b:0a:4e:f1:b2:25:d5:e8:9d:71:14:4e:60:5a:a6:
99:da:d5:08:2d:0f:cb:e9:46:0d:29:a8:36:a2:2a:69:cd:e3:
16:bb:57:cb:62:79:4a:f3:6c:b4:3c:72:eb:3d:96:1f:50:13:
a7:63:a6:06:49:01:b1:aa:e5:d5:6c:c7:93:8e:b5:c1:e8:3e:
2e:f2:e7:dd:37:c9:16:d5:1c:24:57:60:27:30:bb:3f:71:89:
bf:37:7e:52:a4:b8:f4:48:fe:23:d6:64:31:c9:25:8d:00:12:
5b:fe:9d:cf:06:be:c8:d4:70:ba:40:9b:f7:15:10:43:c6:6b:
cc:45:86:49:83:4f:cf:e9:3b:9f:26:17:80:a0:f9:46:bc:e6:
ee:78:e7:3b:cd:bc:74:46:72:97:8c:a8:f5:86:1b:c6:e7:09:
e7:48:fb:3f:11:b9:8c:00:f7:66:8e:eb:8e:c3:4d:90:f4:9a:
d9:5b:96:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:26 2024 by rpki-client on console-ams.rpki-client.org