Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/9GE1BodoYrk0PS4pN8jsevcsfWw.roa
File: 9GE1BodoYrk0PS4pN8jsevcsfWw.roa (raw, json)
Hash identifier: Eei6+a2S+b1TmRMTJOBijnDqd066sm5gNYK3cBlZBvI=
Subject key identifier: F4:61:35:06:87:68:62:B9:34:3D:2E:29:37:C8:EC:7A:F7:2C:7D:6C
Certificate issuer: /CN=e22277fdf65828ef40b58ce101946595507f1330
Certificate serial: 018571957CE4CD26436D1E62469D8A17485C
Authority key identifier: E2:22:77:FD:F6:58:28:EF:40:B5:8C:E1:01:94:65:95:50:7F:13:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4iJ3_fZYKO9AtYzhAZRllVB_EzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/9GE1BodoYrk0PS4pN8jsevcsfWw.roa
Signing time: Mon 02 Jan 2023 08:25:00 +0000
ROA not before: Mon 02 Jan 2023 08:25:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200083
IP address blocks: 62.182.16.0/21 maxlen: 21
185.41.8.0/22 maxlen: 22
2a04:84c0::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:95:7c:e4:cd:26:43:6d:1e:62:46:9d:8a:17:48:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e22277fdf65828ef40b58ce101946595507f1330
Validity
Not Before: Jan 2 08:25:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f4613506876862b9343d2e2937c8ec7af72c7d6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:22:81:e7:36:90:36:b9:fd:c4:b8:6c:86:a4:
16:94:68:98:a7:4d:69:8c:12:a1:ea:ca:0d:2b:fa:
44:58:de:9c:82:a2:0b:61:8d:58:91:d0:ae:ab:3d:
ba:54:9c:49:74:50:91:00:c1:30:96:5d:f1:33:47:
e4:53:ec:7d:d4:0d:b7:d0:90:91:71:ea:02:f7:0b:
e5:76:ba:e9:55:c4:b8:d8:03:9f:e7:42:27:8c:b7:
71:4a:ec:6a:65:ec:7c:26:24:3e:da:0b:51:ee:8f:
10:4e:ca:3b:b7:9e:18:11:d5:3f:17:f6:ed:00:9e:
5c:8f:5c:ba:6f:b3:58:57:5e:65:3e:94:6a:b5:dc:
ba:08:47:bb:d4:d6:bb:b8:02:d6:32:48:e5:96:57:
8d:f6:92:62:93:2c:61:09:9c:7d:7b:51:2e:a6:97:
2e:7c:de:95:90:42:4c:72:91:f0:22:95:5a:98:10:
47:be:ff:09:6c:e5:df:4d:ba:79:03:22:7f:7b:44:
df:87:fa:8d:22:ee:a4:fb:55:25:3c:09:ad:4e:22:
8e:aa:c2:ee:cb:71:c1:0d:b3:b4:87:7b:1d:c9:69:
67:95:05:10:7b:be:9f:4b:ec:6c:82:7e:3f:78:22:
c2:9a:88:68:45:06:8c:7b:0c:c9:91:5b:1e:d4:45:
66:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:61:35:06:87:68:62:B9:34:3D:2E:29:37:C8:EC:7A:F7:2C:7D:6C
X509v3 Authority Key Identifier:
keyid:E2:22:77:FD:F6:58:28:EF:40:B5:8C:E1:01:94:65:95:50:7F:13:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4iJ3_fZYKO9AtYzhAZRllVB_EzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/9GE1BodoYrk0PS4pN8jsevcsfWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.182.16.0/21
185.41.8.0/22
IPv6:
2a04:84c0::/32
Signature Algorithm: sha256WithRSAEncryption
22:cb:25:55:ba:de:87:7d:b8:2d:26:b8:8f:67:b4:30:ef:98:
69:4f:1a:b0:42:d1:4d:5c:da:2f:2e:7a:57:2d:3b:3b:1a:d5:
20:69:54:2d:de:90:cd:ea:d3:95:4a:db:eb:85:4a:1e:c6:4d:
92:6e:62:76:de:a7:6f:d1:25:fa:73:3a:22:b7:f9:72:33:2f:
96:d7:f5:14:0f:d7:97:08:56:df:b8:1a:89:01:3d:46:79:99:
b4:69:d9:81:10:54:cf:aa:16:e3:95:97:57:e6:57:65:fe:0a:
7d:ee:46:3f:c5:26:bc:a2:29:2e:96:2c:43:6c:b9:fe:56:ec:
d1:34:1a:f5:f0:b1:27:4b:3c:40:e3:44:fe:8f:9f:3e:0b:c5:
f6:f0:46:6d:4b:cc:03:31:6b:cb:d0:74:86:70:31:8a:c0:13:
e5:46:08:57:05:d2:a3:7f:4d:ea:23:69:75:3b:ea:d0:bb:a4:
23:03:8a:e1:9b:3a:99:70:1f:55:ba:71:af:e6:68:b7:58:36:
68:54:84:e7:8f:df:f3:fd:de:8d:c2:2e:e9:5b:df:21:f0:03:
ad:a1:0b:60:a1:30:c8:49:23:c8:11:6f:32:34:2f:dc:85:66:
90:e8:49:dc:32:21:74:d8:a2:dd:a4:2e:ea:de:14:9d:45:32:
91:f9:4a:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:30 2024 by rpki-client on console-fra.rpki-client.org