Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/RGl6S1o1LjAaF4mnIBDj4RXZh60.roa
File: RGl6S1o1LjAaF4mnIBDj4RXZh60.roa (raw, json)
Hash identifier: g7bWLp5Rozq9FhyaRuavy7u8RHXtVsMwQbl66FS+q3c=
Subject key identifier: 44:69:7A:4B:5A:35:2E:30:1A:17:89:A7:20:10:E3:E1:15:D9:87:AD
Certificate issuer: /CN=64e7553292af595426ee1d7dc919a2104894752b
Certificate serial: 01864986FADC61F54ADE0A32A32093337D87
Authority key identifier: 64:E7:55:32:92:AF:59:54:26:EE:1D:7D:C9:19:A2:10:48:94:75:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZOdVMpKvWVQm7h19yRmiEEiUdSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/RGl6S1o1LjAaF4mnIBDj4RXZh60.roa
Signing time: Mon 13 Feb 2023 06:47:08 +0000
ROA not before: Mon 13 Feb 2023 06:47:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205209
IP address blocks: 185.223.0.0/22 maxlen: 22
141.226.250.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 13 Feb 2023 06:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:49:86:fa:dc:61:f5:4a:de:0a:32:a3:20:93:33:7d:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64e7553292af595426ee1d7dc919a2104894752b
Validity
Not Before: Feb 13 06:47:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=44697a4b5a352e301a1789a72010e3e115d987ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3c:41:00:46:25:fe:51:e8:a8:8b:5c:da:cb:
51:8a:6a:2d:e7:d4:cd:b0:18:fb:ff:ed:cc:20:01:
a4:bf:81:43:19:55:83:d1:16:e8:2b:cb:9e:17:6a:
c7:36:c4:6f:ec:a1:9c:50:7d:c4:c5:dd:8a:59:01:
96:1c:34:ee:b2:8a:1c:54:aa:9e:2e:b4:ea:31:72:
b0:57:7b:18:be:ba:1f:44:a7:e4:c8:13:3c:0a:dd:
75:46:da:cd:8a:de:31:09:2b:f2:1c:a9:4b:52:79:
5b:d6:2c:47:3b:e9:3c:e0:e4:85:3c:2b:08:93:1e:
fa:1b:32:a8:dc:e5:56:5c:1f:96:c5:c1:25:bf:07:
c0:19:c0:83:70:d6:92:82:be:85:8f:c5:b9:0b:b0:
b9:9a:01:68:27:c6:bc:5e:21:a2:44:9a:2c:b0:03:
23:7d:03:f9:f5:1b:27:ff:a6:35:a1:92:86:2e:65:
66:59:fc:60:71:6b:32:49:a1:3a:eb:ee:d5:dc:19:
3e:25:19:d8:cc:95:9d:b0:39:3c:ba:55:ae:60:b8:
4e:92:b7:c6:cd:9e:6b:fc:a5:fa:5c:c1:1c:c0:bd:
bb:c7:6d:91:52:86:d5:84:48:ac:77:eb:d9:9d:ef:
6f:16:b3:e0:3a:5f:d6:d1:5c:fa:5b:87:53:0a:e8:
af:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:69:7A:4B:5A:35:2E:30:1A:17:89:A7:20:10:E3:E1:15:D9:87:AD
X509v3 Authority Key Identifier:
keyid:64:E7:55:32:92:AF:59:54:26:EE:1D:7D:C9:19:A2:10:48:94:75:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZOdVMpKvWVQm7h19yRmiEEiUdSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/RGl6S1o1LjAaF4mnIBDj4RXZh60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e66a57-65ef-4644-8f50-c14faf43be14/1/ZOdVMpKvWVQm7h19yRmiEEiUdSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.226.250.0/23
185.223.0.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:71:d4:bd:74:3e:8c:d9:a1:79:4b:95:9c:9d:af:36:c1:bf:
6d:46:24:b5:1a:9a:6e:7f:87:5a:88:28:75:a4:5d:ed:a1:9e:
a6:a5:fd:be:1f:78:d9:5e:27:bf:dd:04:70:d0:cb:6d:60:05:
ab:94:7a:97:11:af:09:53:ea:36:a6:0d:a1:2f:25:2f:c9:a5:
6a:e9:49:ef:d9:76:7e:3a:cb:07:83:85:42:5b:87:14:65:30:
66:46:ab:d2:8d:26:d4:78:58:96:fe:67:93:ff:31:d8:ab:ba:
ae:86:7b:47:e9:1d:cf:21:f4:62:56:91:8c:e0:f3:ef:8c:99:
4a:56:b4:78:ce:6b:9c:9e:f8:a1:6a:85:20:c1:cc:67:94:8f:
19:a9:13:ba:87:a8:df:68:99:92:21:e3:1c:58:34:30:71:34:
fc:01:a4:57:7f:66:8a:5e:c9:e4:9b:98:37:c6:d9:c6:7b:69:
8f:ba:82:85:b5:d4:01:69:84:2f:3e:0e:07:36:24:eb:55:23:
b2:a9:70:31:2f:b0:90:90:d4:bb:ff:f7:25:07:85:c3:b0:b7:
73:49:2f:03:04:f7:ef:13:a7:60:bb:89:48:65:17:da:1a:49:
fe:94:2b:f3:7b:2d:be:d7:45:9a:73:4c:23:90:36:63:9e:b6:
37:2c:93:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:57 2024 by rpki-client on console-fra.rpki-client.org