Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/s2naAqplt0ecJHcr-D1z-VExP2s.roa
File: s2naAqplt0ecJHcr-D1z-VExP2s.roa (raw, json)
Hash identifier: WMSBamR0F3aewiCwIjgIG1KLNp1rf3DUFcgLaaQRkX0=
Subject key identifier: B3:69:DA:02:AA:65:B7:47:9C:24:77:2B:F8:3D:73:F9:51:31:3F:6B
Certificate issuer: /CN=15ddd4c9dc23fac35574fce2b4294398add8521c
Certificate serial: 01869894FA276D21AF2BA1652C71B0706740
Authority key identifier: 15:DD:D4:C9:DC:23:FA:C3:55:74:FC:E2:B4:29:43:98:AD:D8:52:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fd3Uydwj-sNVdPzitClDmK3YUhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/s2naAqplt0ecJHcr-D1z-VExP2s.roa
Signing time: Tue 28 Feb 2023 15:12:25 +0000
ROA not before: Tue 28 Feb 2023 15:12:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 185.164.122.0/24 maxlen: 24
185.164.121.0/24 maxlen: 24
185.164.120.0/24 maxlen: 24
185.221.96.0/24 maxlen: 24
185.221.98.0/24 maxlen: 24
185.221.97.0/24 maxlen: 24
185.221.99.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:98:94:fa:27:6d:21:af:2b:a1:65:2c:71:b0:70:67:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15ddd4c9dc23fac35574fce2b4294398add8521c
Validity
Not Before: Feb 28 15:12:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b369da02aa65b7479c24772bf83d73f951313f6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:73:21:72:38:e7:fb:4c:c9:57:df:f3:1e:9e:
5f:0b:4e:05:ef:35:51:06:a3:49:2b:0b:4b:44:8a:
36:75:51:8a:53:dd:10:08:dd:80:50:93:6a:a8:47:
91:d5:7f:4f:c8:6e:9e:52:f5:c5:2d:7f:ca:2f:ea:
16:83:e1:37:e1:9a:5a:30:2e:7b:57:4e:2c:94:ec:
4b:5b:59:0a:88:8a:89:4f:5c:5a:f5:72:22:65:b4:
14:41:58:f9:bf:bd:d4:fa:0d:33:ab:a8:62:88:17:
67:ca:d3:61:d9:3e:93:bf:6c:1d:57:28:c5:60:ec:
b8:50:cd:f2:b1:66:c9:7f:b5:d0:36:9d:53:37:ee:
bb:ec:93:ae:24:9f:72:ed:73:1d:75:8f:4e:3b:42:
a5:9b:fd:98:e6:b7:0c:2c:21:13:35:65:07:c5:03:
57:4c:fd:43:18:e0:4e:f4:91:00:45:46:59:c9:68:
b4:d5:6c:dd:4d:4a:3d:f9:9e:e8:17:cb:5b:b6:8f:
d5:f5:d7:5f:40:05:e9:cd:7e:9f:3f:a8:7e:47:b4:
5a:f7:00:01:bf:87:06:a1:58:ce:e5:b6:f0:e0:5e:
24:07:6e:ca:8f:97:3a:b2:44:47:6c:21:88:f4:6f:
2f:1c:9f:0a:a9:c3:9d:64:fd:f3:a7:1d:f8:3c:56:
cb:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:69:DA:02:AA:65:B7:47:9C:24:77:2B:F8:3D:73:F9:51:31:3F:6B
X509v3 Authority Key Identifier:
keyid:15:DD:D4:C9:DC:23:FA:C3:55:74:FC:E2:B4:29:43:98:AD:D8:52:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fd3Uydwj-sNVdPzitClDmK3YUhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/s2naAqplt0ecJHcr-D1z-VExP2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.164.120.0-185.164.122.255
185.221.96.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:81:cd:e4:0b:3a:47:f3:2d:71:bb:1a:06:1f:ec:1a:51:57:
23:8d:19:a9:91:0c:83:2e:30:bb:a3:dd:c7:31:a2:9e:31:1b:
da:2b:9d:44:ea:08:30:57:1b:a6:00:e3:00:da:61:2b:e7:20:
70:27:7b:c9:48:91:14:f0:13:c9:16:68:59:2b:42:fe:30:c7:
56:43:e9:26:22:bc:d8:d8:81:8e:71:67:53:9e:71:d9:ec:c8:
f6:24:06:04:75:f3:e2:2b:da:94:5b:67:21:7d:1d:56:13:7f:
07:34:2a:5a:d5:b2:6e:56:51:fb:51:ee:b0:af:9f:46:b3:00:
09:6e:06:6c:3b:b4:18:15:ea:30:aa:7b:e0:83:69:3b:af:80:
73:62:cc:8c:e9:ac:a2:98:4e:48:cc:d1:15:84:fc:11:71:5d:
3d:af:38:f8:19:65:56:3a:fa:1d:50:6a:fb:1f:48:b3:90:03:
52:b8:de:eb:32:88:73:85:79:61:a4:28:f6:06:62:9d:8b:90:
97:21:a3:b8:8e:01:86:85:3d:ba:20:b5:b2:02:3c:1a:3b:04:
e9:df:0f:8c:3f:e8:00:a9:5f:8a:c7:dc:87:a6:53:b2:df:a9:
26:79:ef:5b:e2:ab:de:f7:5f:8e:e3:a6:b0:69:bc:d8:c8:24:
6a:b1:06:dc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Jan 1 21:27:27 2024 by rpki-client on console-fra.rpki-client.org