Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/MiZDr5bLUc0OWO-u5CH__emeP5s.roa
File: MiZDr5bLUc0OWO-u5CH__emeP5s.roa (raw, json)
Hash identifier: xmYGs/o+LaoiW0y5Quxe2hN6umRTU/6EZTegAzzVYdg=
Subject key identifier: 32:26:43:AF:96:CB:51:CD:0E:58:EF:AE:E4:21:FF:FD:E9:9E:3F:9B
Certificate issuer: /CN=1b368e70269de660cbc14df9c763b018788a1ffc
Certificate serial: 018CCA98F8D6230408F63E3594285FCADD84
Authority key identifier: 1B:36:8E:70:26:9D:E6:60:CB:C1:4D:F9:C7:63:B0:18:78:8A:1F:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GzaOcCad5mDLwU35x2OwGHiKH_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/MiZDr5bLUc0OWO-u5CH__emeP5s.roa
Signing time: Tue 02 Jan 2024 14:34:31 +0000
ROA not before: Tue 02 Jan 2024 14:34:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204824
IP address blocks: 185.218.48.0/22 maxlen: 23
2a0b:d340::/29 maxlen: 30
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:49:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:98:f8:d6:23:04:08:f6:3e:35:94:28:5f:ca:dd:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b368e70269de660cbc14df9c763b018788a1ffc
Validity
Not Before: Jan 2 14:34:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=322643af96cb51cd0e58efaee421fffde99e3f9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:eb:a5:c7:38:73:32:79:26:97:c2:f0:1a:86:
6d:65:47:28:34:55:ea:b1:12:5c:d4:4b:f2:1c:ec:
b6:44:da:78:29:69:51:24:6e:f9:87:d0:b7:d5:6b:
4d:31:6d:be:4b:08:93:82:00:1c:78:3b:15:c5:33:
2f:97:98:5b:97:f6:45:b0:11:1b:4c:5b:9c:fa:c2:
91:36:4e:00:50:e8:f7:6c:ab:64:db:63:d8:6a:66:
95:58:2c:52:f0:89:c9:e5:ad:fe:ec:de:fb:a3:52:
bb:02:33:ba:1b:c8:af:db:cd:09:b7:ab:97:ae:d6:
2a:0a:dc:55:98:85:e7:bc:cf:85:c9:b8:a4:b3:73:
7c:f5:b6:74:17:58:a7:a2:ff:89:56:32:bd:1f:8e:
88:12:38:96:2f:d6:8e:1a:dc:f5:ae:c0:07:9d:98:
81:30:65:5d:d8:6c:77:b3:d7:4a:79:12:5b:41:81:
39:af:70:13:39:16:f3:2f:bd:50:b2:47:86:f2:47:
38:12:2a:3b:33:62:89:1d:b1:63:d8:3c:59:40:9b:
3c:6f:53:90:90:06:08:a7:61:14:a6:ca:b9:c5:5c:
4c:c1:9a:eb:d6:1c:38:6c:88:53:3c:cf:f5:14:cb:
e2:8d:db:46:e9:d6:3d:d7:e1:9d:46:07:11:15:40:
df:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:26:43:AF:96:CB:51:CD:0E:58:EF:AE:E4:21:FF:FD:E9:9E:3F:9B
X509v3 Authority Key Identifier:
keyid:1B:36:8E:70:26:9D:E6:60:CB:C1:4D:F9:C7:63:B0:18:78:8A:1F:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzaOcCad5mDLwU35x2OwGHiKH_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/MiZDr5bLUc0OWO-u5CH__emeP5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.48.0/22
IPv6:
2a0b:d340::/29
Signature Algorithm: sha256WithRSAEncryption
61:66:89:eb:e2:80:49:59:0c:3b:0d:77:bd:04:9c:fb:07:db:
10:19:b3:59:bb:30:d9:2b:fa:c5:44:ce:c1:e3:31:f4:54:0c:
c1:30:db:8f:ad:6a:10:e1:31:b6:3a:1a:6b:83:5a:32:9f:e1:
56:8f:93:4c:12:9a:40:cb:12:40:c0:3c:0f:b2:26:cd:42:cb:
52:bd:c1:2f:6e:8b:12:52:25:aa:c6:9a:5c:d5:6b:bf:eb:d6:
4e:17:86:57:82:30:c3:a1:f9:cf:7c:d3:bf:46:d7:b4:0c:e7:
f2:f5:21:5d:91:d7:fa:9a:e6:51:34:ac:7a:64:38:c9:51:57:
ae:47:bb:5d:1c:ec:08:0f:c9:f4:b4:d2:bf:8b:46:4d:ec:d2:
0f:f2:f0:ae:0d:ed:35:65:29:5e:2c:95:e9:ca:ef:e0:ad:85:
08:e2:42:43:db:49:d8:76:13:4c:bf:d5:dc:a9:c4:66:0e:69:
ce:69:cc:f1:73:8c:72:48:2f:83:db:1f:63:26:c8:61:37:2c:
dd:c0:b2:94:b6:cc:05:d1:b4:9e:03:07:d6:de:7f:68:d6:5e:
b5:fc:aa:ce:60:29:08:95:7d:1c:82:39:64:93:3b:d9:bd:8e:
62:13:59:25:d6:bd:69:40:95:67:66:80:75:a9:47:b3:c3:59:
b2:a8:3d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:05:46 2025 by rpki-client