Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/73764d-f250-4e3d-bb6f-21c4c6d6b6cb/1/DB4LFr52j_-ZsZXGB7dKZKsSpZU.roa
File: DB4LFr52j_-ZsZXGB7dKZKsSpZU.roa (raw, json)
Hash identifier: 4/JQq6Fy9YUZN9tY5Ed2pR0j8LXKq/UJkYuaCgffgiI=
Subject key identifier: 0C:1E:0B:16:BE:76:8F:FF:99:B1:95:C6:07:B7:4A:64:AB:12:A5:95
Certificate issuer: /CN=ea641eade1955dd4b907916b99e021039ecc33e8
Certificate serial: 0185701ED46B88B14845155621DA5EF7F024
Authority key identifier: EA:64:1E:AD:E1:95:5D:D4:B9:07:91:6B:99:E0:21:03:9E:CC:33:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6mQereGVXdS5B5FrmeAhA57MM-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/73764d-f250-4e3d-bb6f-21c4c6d6b6cb/1/DB4LFr52j_-ZsZXGB7dKZKsSpZU.roa
Signing time: Mon 02 Jan 2023 01:35:46 +0000
ROA not before: Mon 02 Jan 2023 01:35:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203180
IP address blocks: 185.142.172.0/22 maxlen: 24
2a0d:540::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:1e:d4:6b:88:b1:48:45:15:56:21:da:5e:f7:f0:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea641eade1955dd4b907916b99e021039ecc33e8
Validity
Not Before: Jan 2 01:35:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0c1e0b16be768fff99b195c607b74a64ab12a595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e9:3e:e6:6a:0f:5a:0d:9f:2f:a4:94:90:a6:
41:97:79:eb:01:2f:2d:41:4c:95:dc:e5:25:13:51:
93:8c:b6:53:c8:97:91:cc:b5:bd:3e:5e:89:fb:ba:
b8:e1:f3:e9:a0:c2:84:da:71:c0:f4:7a:77:2e:fb:
79:87:2a:08:03:54:c3:c7:58:c6:57:2d:75:ef:fc:
36:a3:02:9b:49:39:9d:82:81:bc:e8:10:09:98:b5:
01:72:82:06:96:cf:71:c3:c9:30:00:58:32:c6:1f:
d4:68:ee:35:3b:91:d0:5e:ef:89:22:d2:99:e4:58:
3a:6f:d1:a1:7d:49:95:c9:04:aa:24:3d:dd:61:1c:
ea:07:18:c9:5a:6e:3a:6e:15:6d:16:f7:c6:81:f0:
d4:84:52:a9:19:f2:db:cd:62:ba:86:44:96:68:3f:
ae:8a:98:8d:83:42:78:90:16:1e:6f:0b:5a:18:48:
58:12:15:e7:ae:fa:97:ad:7c:53:04:ab:36:c8:85:
b5:6a:a5:16:6f:af:70:5d:80:b4:a6:ee:69:ef:60:
80:2a:20:fb:f3:c3:dd:5f:5f:ac:a0:f1:64:2b:0d:
da:70:83:07:50:57:5d:62:ee:e9:b1:76:e6:ff:cb:
d6:dd:fc:a9:7d:88:67:d2:7a:c0:36:f1:26:91:5b:
bd:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:1E:0B:16:BE:76:8F:FF:99:B1:95:C6:07:B7:4A:64:AB:12:A5:95
X509v3 Authority Key Identifier:
keyid:EA:64:1E:AD:E1:95:5D:D4:B9:07:91:6B:99:E0:21:03:9E:CC:33:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6mQereGVXdS5B5FrmeAhA57MM-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/73764d-f250-4e3d-bb6f-21c4c6d6b6cb/1/DB4LFr52j_-ZsZXGB7dKZKsSpZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/73764d-f250-4e3d-bb6f-21c4c6d6b6cb/1/6mQereGVXdS5B5FrmeAhA57MM-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.142.172.0/22
IPv6:
2a0d:540::/29
Signature Algorithm: sha256WithRSAEncryption
4e:e6:49:a6:06:c0:57:fb:1d:2e:e4:51:51:84:67:3f:df:59:
a3:cc:e7:29:f2:ff:0e:12:f7:2d:f0:31:dd:94:6c:e8:1e:90:
85:19:05:d0:51:ef:98:40:72:08:35:6c:ca:14:da:9a:56:43:
87:dc:c9:69:18:73:61:1f:32:c5:04:65:27:e9:95:86:57:76:
87:cf:6f:63:00:44:8b:c1:66:44:ee:8a:85:9b:57:6f:bf:be:
c4:5c:b3:53:c8:26:00:ba:65:f3:4d:e1:73:d4:ff:be:a7:b0:
8c:40:0d:06:ff:8f:33:2c:c5:43:92:66:7a:e5:0c:74:8b:1c:
c1:24:10:c2:8d:86:3f:d0:25:e3:fc:2b:5f:74:f7:ae:93:3c:
d3:55:a1:5a:84:5e:03:53:2b:57:27:5a:08:1f:16:bb:8e:48:
3e:eb:51:d5:2a:21:2d:20:24:84:1f:77:56:1a:3e:50:81:a4:
e3:c2:c4:2c:98:44:b9:f8:7c:c5:85:c5:a2:7e:8e:27:ad:9d:
0a:10:25:c6:e6:ca:02:76:8f:94:c4:a8:87:8b:9f:b8:64:6c:
7c:b4:9c:a1:bf:4c:1c:e6:34:bf:63:6e:a2:3c:ec:c2:79:ea:
25:47:7d:46:7b:4d:89:59:6c:f1:3d:ae:6c:60:2d:96:a9:51:
18:7e:c6:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:56 2024 by rpki-client on console-ams.rpki-client.org