Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/ReKJnIP-mznRJyDmZJfqYErvDzU.roa
File: ReKJnIP-mznRJyDmZJfqYErvDzU.roa (raw, json)
Hash identifier: hx2moOhC6G8ra6ZYx42/WtR94cYhILpq6KIJWkGHnOY=
Subject key identifier: 45:E2:89:9C:83:FE:9B:39:D1:27:20:E6:64:97:EA:60:4A:EF:0F:35
Certificate issuer: /CN=eba8db3b54d081c30bf51bdc7b19e4f6480b7f53
Certificate serial: 018572FA5D5F52387E6FC08D57FD867DD726
Authority key identifier: EB:A8:DB:3B:54:D0:81:C3:0B:F5:1B:DC:7B:19:E4:F6:48:0B:7F:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/66jbO1TQgcML9Rvcexnk9kgLf1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/ReKJnIP-mznRJyDmZJfqYErvDzU.roa
Signing time: Mon 02 Jan 2023 14:54:48 +0000
ROA not before: Mon 02 Jan 2023 14:54:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 185.218.223.0/24 maxlen: 24
185.218.222.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:fa:5d:5f:52:38:7e:6f:c0:8d:57:fd:86:7d:d7:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eba8db3b54d081c30bf51bdc7b19e4f6480b7f53
Validity
Not Before: Jan 2 14:54:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=45e2899c83fe9b39d12720e66497ea604aef0f35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d7:37:09:9f:21:a3:c5:d9:09:1b:66:03:af:
c7:8b:a9:8b:97:ab:c1:af:16:db:26:1c:0e:48:d6:
9c:73:af:41:7c:e2:21:f8:8f:a9:9e:22:d6:1a:9a:
43:f3:c6:c0:7e:7e:51:cb:ba:79:3a:c5:68:ab:c0:
4e:6a:0d:d3:66:e4:de:6f:f5:ee:21:7d:12:c4:80:
5e:76:72:9e:64:93:18:cc:12:6d:7f:a5:ea:62:7f:
9d:d8:b1:e9:2b:b4:88:c1:e5:d2:c7:71:fe:79:65:
b7:0b:39:a8:54:45:ba:5e:0f:56:4b:6c:e4:54:80:
ff:6a:26:c5:64:86:84:90:93:56:0b:1f:69:16:47:
59:61:d2:d9:66:dd:22:ae:c3:73:5d:b0:d8:79:71:
44:60:b0:f1:46:e1:55:d7:02:bc:7a:22:e2:1f:09:
7b:cb:f2:9e:0c:fb:9b:c4:a8:d8:a9:3e:e6:b4:5c:
19:a8:18:1a:f1:ce:21:7f:b9:bc:0c:8e:a4:ba:ac:
76:c9:12:b9:1c:ba:99:1c:1b:62:ef:f6:db:57:34:
ca:c5:2f:b2:d2:2a:b1:de:f8:ca:1c:73:3c:75:32:
55:d6:d3:2d:ce:6f:4c:5a:66:8e:84:48:2d:a6:ba:
32:19:f3:68:9d:8c:c6:55:6b:e5:88:f4:4a:59:de:
34:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:E2:89:9C:83:FE:9B:39:D1:27:20:E6:64:97:EA:60:4A:EF:0F:35
X509v3 Authority Key Identifier:
keyid:EB:A8:DB:3B:54:D0:81:C3:0B:F5:1B:DC:7B:19:E4:F6:48:0B:7F:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/66jbO1TQgcML9Rvcexnk9kgLf1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/ReKJnIP-mznRJyDmZJfqYErvDzU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6ccf03-090d-416e-86cf-e9dc3f1cf824/1/66jbO1TQgcML9Rvcexnk9kgLf1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.222.0/23
Signature Algorithm: sha256WithRSAEncryption
59:d9:36:ab:4f:52:c1:1a:20:52:d0:56:d2:8c:75:74:a6:8c:
4c:4c:e1:71:86:bd:a2:7c:e5:45:2c:32:90:83:b9:b8:64:5a:
b0:8d:84:af:ca:a6:16:64:37:27:d6:e1:23:5c:d0:9d:69:a6:
d7:3a:f4:cb:4e:19:68:2a:7a:7e:b7:43:2e:8a:ee:88:fd:f8:
d0:a7:4d:b1:c6:79:c1:da:6d:43:e3:5f:fe:6a:42:a5:93:cc:
38:d1:69:42:4b:28:e0:fd:10:c4:c7:ed:ad:d8:3f:de:9c:6b:
b9:f8:d2:cc:b1:c2:41:a3:98:13:50:90:35:5c:1f:bc:29:8e:
3d:3a:95:1d:0b:b5:ab:e7:44:82:ea:d7:e4:9e:59:2c:4b:ea:
da:01:20:43:b3:bd:d7:f5:d9:51:76:bf:af:72:5a:90:52:be:
d0:91:d0:65:f7:bc:e9:68:88:f8:82:8b:eb:26:0b:bd:9e:c6:
b6:91:81:05:bc:05:cc:da:2e:fc:4d:12:14:0e:be:74:4f:68:
85:fb:4e:4b:d1:d2:b2:24:15:e9:ae:c5:7e:e6:0b:c3:e2:12:
39:30:3f:38:0b:e1:c4:eb:2b:94:57:09:58:24:2b:ea:76:80:
84:d4:c6:28:b7:e4:b0:26:de:c8:6e:b1:39:62:d4:eb:d6:de:
aa:dd:a8:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:05 2024 by rpki-client on console-fra.rpki-client.org