Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/4Vyt3udzG896GWEddKoSC2KKnEk.roa
File: 4Vyt3udzG896GWEddKoSC2KKnEk.roa (raw, json)
Hash identifier: 6tLeA0/rMU1cfgILnWyVuF+XbxIL1plzFmlPdEfQYBk=
Subject key identifier: E1:5C:AD:DE:E7:73:1B:CF:7A:19:61:1D:74:AA:12:0B:62:8A:9C:49
Certificate issuer: /CN=0ecabe061f2d890a8c8b4181adbca6ca943bd222
Certificate serial: 0185701538A169344E78A886652ADA195A3E
Authority key identifier: 0E:CA:BE:06:1F:2D:89:0A:8C:8B:41:81:AD:BC:A6:CA:94:3B:D2:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dsq-Bh8tiQqMi0GBrbymypQ70iI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/4Vyt3udzG896GWEddKoSC2KKnEk.roa
Signing time: Mon 02 Jan 2023 01:25:17 +0000
ROA not before: Mon 02 Jan 2023 01:25:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204949
IP address blocks: 185.219.168.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:15:38:a1:69:34:4e:78:a8:86:65:2a:da:19:5a:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ecabe061f2d890a8c8b4181adbca6ca943bd222
Validity
Not Before: Jan 2 01:25:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e15caddee7731bcf7a19611d74aa120b628a9c49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:eb:a5:a6:88:ee:76:e2:b3:7d:0e:98:6b:78:
7d:0f:c6:df:c6:96:90:4f:8a:f2:e5:45:ea:8b:81:
d0:bf:13:8f:60:b0:23:e3:7f:76:79:b8:29:70:a3:
07:84:fb:24:42:b8:5f:1f:6c:01:70:f3:64:88:ef:
ad:8e:d8:0d:6c:bc:b8:b5:df:17:0f:30:a7:8e:7c:
63:05:02:42:10:b1:53:27:11:21:95:3d:ec:a6:15:
6c:ee:da:f7:db:fa:0c:36:8d:7e:f0:bc:3b:f5:19:
c0:44:8c:fe:77:4b:eb:28:1e:77:c7:74:88:b3:df:
0b:ac:8d:91:c2:2a:3a:37:da:87:28:96:00:8f:be:
b8:5b:14:50:c7:a1:8d:00:03:46:4f:60:d1:00:f3:
0a:18:fb:ca:e2:bb:b8:13:4d:63:51:2b:cb:7f:05:
03:58:48:ea:a3:3b:33:17:99:90:1a:e1:d3:25:a5:
06:d1:3f:5c:e5:ea:05:b1:89:04:84:c3:51:20:94:
87:43:f1:e3:d7:1d:a4:d0:3a:43:41:b5:31:5f:c8:
b6:b7:4f:c0:07:fd:87:d0:c3:5b:fb:24:c7:d5:cf:
6f:7b:c2:12:b0:85:f0:cf:4d:af:e5:01:48:b4:94:
52:6c:99:c1:56:4d:fd:77:53:2c:c1:55:39:b1:23:
7e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:5C:AD:DE:E7:73:1B:CF:7A:19:61:1D:74:AA:12:0B:62:8A:9C:49
X509v3 Authority Key Identifier:
keyid:0E:CA:BE:06:1F:2D:89:0A:8C:8B:41:81:AD:BC:A6:CA:94:3B:D2:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dsq-Bh8tiQqMi0GBrbymypQ70iI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/4Vyt3udzG896GWEddKoSC2KKnEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.219.168.0/22
Signature Algorithm: sha256WithRSAEncryption
76:4c:d3:d4:01:fb:39:fa:83:cb:10:24:01:9b:7e:42:ba:f5:
68:18:9e:36:4d:c1:65:1f:8b:33:15:25:b0:d5:18:4a:53:30:
ec:a3:8f:70:63:2f:70:7d:25:c3:67:26:82:d3:5d:e9:3a:00:
d6:ba:01:f7:b0:91:30:30:6a:69:7c:d1:3b:32:c2:0e:94:a5:
e0:ed:af:76:37:06:ed:df:be:3e:1a:ae:53:6b:0a:83:e9:90:
0b:10:4e:dc:5c:e6:f7:07:9e:e6:65:7c:76:e9:0f:df:76:18:
cc:7d:6f:36:fa:50:1e:53:1d:07:5b:f0:f8:a6:50:76:37:50:
9c:ee:a1:e6:e9:94:b3:10:78:79:18:6c:81:49:df:7b:8a:8a:
8c:bf:9a:61:e5:18:81:c0:f2:39:3a:f2:19:02:f9:f4:d5:cf:
96:3f:95:c5:17:8a:44:3b:70:16:8e:51:85:20:83:40:90:a8:
b1:6e:c0:d8:62:56:e9:af:42:ed:21:91:8c:6e:7a:e5:4a:aa:
5d:62:53:e3:26:cd:5e:15:8a:d0:93:3f:aa:4c:47:f0:4e:26:
98:ee:45:78:c6:c3:9b:bb:24:10:ac:51:33:b6:e6:ff:8a:f3:
5a:fb:71:f9:81:0a:6e:30:64:70:02:7f:8e:0f:02:38:43:fb:
d5:0f:10:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:27:27 2024 by rpki-client on console-fra.rpki-client.org