Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/dEkumj9SMe3GQ-jRc6cEZg5cics.roa
File: dEkumj9SMe3GQ-jRc6cEZg5cics.roa (raw, json)
Hash identifier: bSzCOfAnG9byFMf1xzWkX8XMyBwvNwPS3oFyMy48ACY=
Subject key identifier: 74:49:2E:9A:3F:52:31:ED:C6:43:E8:D1:73:A7:04:66:0E:5C:89:CB
Certificate issuer: /CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Certificate serial: 018B2E6B257E58E5DC1996E58244DE1127EF
Authority key identifier: 2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/dEkumj9SMe3GQ-jRc6cEZg5cics.roa
Signing time: Sat 14 Oct 2023 13:40:55 +0000
ROA not before: Sat 14 Oct 2023 13:40:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211415
IP address blocks: 185.242.108.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:2e:6b:25:7e:58:e5:dc:19:96:e5:82:44:de:11:27:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Validity
Not Before: Oct 14 13:40:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=74492e9a3f5231edc643e8d173a704660e5c89cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d3:7b:a0:80:c8:d3:c0:03:cd:83:d1:c7:12:
c8:1c:f1:af:fa:d5:2d:2f:e5:1f:d6:9b:79:4c:56:
f0:3b:dd:80:99:00:3d:9e:51:b5:4c:5e:ad:66:53:
3f:58:4b:60:b1:3f:87:82:0b:3d:e1:af:f2:97:58:
08:12:a0:aa:d6:2c:80:56:b2:8c:57:dc:b9:63:6b:
2c:f0:0f:f1:af:c5:11:f1:ee:1d:1a:f6:67:7b:6c:
24:9d:23:14:1f:33:05:26:a5:55:a1:56:48:ab:4e:
cc:a3:a7:58:d4:fb:86:80:d7:08:d8:60:55:db:75:
59:0b:40:12:bc:57:e2:ae:ac:e1:61:1d:5e:11:e8:
53:a7:46:6e:56:7b:30:7c:f9:ba:e3:2b:c6:7b:cd:
41:0d:ec:01:c2:1c:68:4d:e8:62:a6:3d:ee:b5:12:
bc:f3:57:57:89:2a:a9:25:82:11:eb:ec:b4:82:e7:
3a:cd:00:51:83:98:71:ef:b2:5d:dc:65:3f:14:61:
ee:c1:78:c1:b2:81:19:c2:47:63:b5:5f:a9:30:af:
10:ad:ed:2f:fc:1b:7b:a8:27:ee:7e:b4:71:77:c7:
df:a1:1f:90:e8:36:a7:bf:11:21:2d:ea:70:09:93:
a0:e9:d4:81:27:6f:14:33:c0:d1:24:b5:4a:80:32:
c3:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:49:2E:9A:3F:52:31:ED:C6:43:E8:D1:73:A7:04:66:0E:5C:89:CB
X509v3 Authority Key Identifier:
keyid:2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/dEkumj9SMe3GQ-jRc6cEZg5cics.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/KxRai98ryhUPJe1Uone49lPv2z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.242.108.0/22
Signature Algorithm: sha256WithRSAEncryption
88:d1:05:5c:1a:95:b0:23:c6:f4:4e:67:f7:30:c8:10:0e:32:
c2:26:7c:b2:d8:a1:c9:c2:07:17:4c:35:8c:15:06:30:fe:9c:
97:67:b1:1c:69:37:d5:23:50:42:9e:5f:b3:9c:42:ca:83:c6:
63:b0:a9:2f:a9:3e:b7:ac:a8:f9:9e:40:de:3f:ab:f5:18:80:
30:3d:5d:65:99:5d:96:7a:fe:bc:40:c2:e8:a4:58:61:8f:cc:
ee:a5:79:97:47:f6:67:6a:c2:ab:fe:2c:e6:58:9e:ef:ad:67:
55:fa:49:98:b6:72:49:51:b5:fb:d7:6a:3e:f0:40:b4:aa:a5:
ca:1d:e4:60:3e:35:3a:8f:0f:af:a8:71:a0:47:a7:7d:bb:7c:
3c:41:53:88:8a:d4:fc:3a:eb:31:93:07:b2:34:49:ca:07:db:
f5:0f:0f:fd:db:9a:b9:c0:30:56:8f:f7:fd:07:f5:36:0f:00:
1c:b6:c0:72:78:95:61:f1:d1:82:70:49:a7:83:1e:7c:00:d0:
d4:08:b5:7b:63:c1:89:8f:01:1f:68:23:7f:42:b1:4d:ba:e4:
1e:5c:b4:4a:e7:7a:94:fc:b6:f9:34:e5:23:42:42:8b:c5:06:
52:50:71:0a:50:b5:af:17:8f:59:c8:e4:fa:24:d2:1a:8c:89:
0a:32:a5:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:49:57 2024 by rpki-client on console-fra.rpki-client.org