Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/tEt_oHNC-bQbLEYkd7OQN9WRlhs.roa
File: tEt_oHNC-bQbLEYkd7OQN9WRlhs.roa (raw, json)
Hash identifier: uhPQAE9PHzuTabxTDKgne4ml+M6LX9WpKiMnJaFBVlQ=
Subject key identifier: B4:4B:7F:A0:73:42:F9:B4:1B:2C:46:24:77:B3:90:37:D5:91:96:1B
Certificate issuer: /CN=15ddd4c9dc23fac35574fce2b4294398add8521c
Certificate serial: 0185F47E2C79C9082FCA0E8F60100A12D640
Authority key identifier: 15:DD:D4:C9:DC:23:FA:C3:55:74:FC:E2:B4:29:43:98:AD:D8:52:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fd3Uydwj-sNVdPzitClDmK3YUhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/tEt_oHNC-bQbLEYkd7OQN9WRlhs.roa
Signing time: Fri 27 Jan 2023 18:29:47 +0000
ROA not before: Fri 27 Jan 2023 18:29:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 185.183.212.0/23 maxlen: 23
185.183.212.0/22 maxlen: 22
185.183.214.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:f4:7e:2c:79:c9:08:2f:ca:0e:8f:60:10:0a:12:d6:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15ddd4c9dc23fac35574fce2b4294398add8521c
Validity
Not Before: Jan 27 18:29:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b44b7fa07342f9b41b2c462477b39037d591961b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:75:86:0f:b9:ae:ed:4e:5c:9e:df:07:b4:24:
60:6a:ab:35:68:4a:04:f7:cc:24:3b:23:b2:6e:d1:
14:1e:fc:6c:e6:45:d0:c0:82:31:2e:37:f2:02:c9:
46:7a:6c:85:a9:39:d6:08:bc:99:78:d0:9b:1b:08:
c0:11:01:90:05:37:56:96:a2:d4:a7:41:ae:cb:10:
64:5b:fc:3c:2a:c8:2a:23:89:57:44:ac:02:99:fb:
ac:c3:be:9c:06:7e:87:b3:8d:2d:7c:16:f7:56:94:
4d:b1:78:52:93:e1:f5:e8:4c:01:3e:6b:e3:1e:37:
46:5b:8b:b4:b0:a7:f8:0b:17:eb:7e:a6:d0:be:52:
83:af:10:65:df:c5:3e:d4:b9:77:6a:a8:7c:44:96:
80:ba:51:57:a2:27:72:b4:9d:f0:21:dd:69:ea:fc:
27:f6:a4:24:c2:87:cf:19:84:37:75:f2:90:46:f0:
fd:8b:c8:a7:2e:1d:47:7e:50:25:72:ff:f4:de:5f:
05:6e:43:96:c5:9b:9d:ef:26:b5:00:26:46:3b:6f:
40:3b:a9:95:9f:18:f4:51:3c:35:a2:27:0a:14:6e:
28:4a:55:5e:1b:be:10:f3:bf:7f:50:af:6e:e2:22:
54:62:94:95:e9:48:66:26:cc:41:88:a9:2c:ae:1e:
db:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:4B:7F:A0:73:42:F9:B4:1B:2C:46:24:77:B3:90:37:D5:91:96:1B
X509v3 Authority Key Identifier:
keyid:15:DD:D4:C9:DC:23:FA:C3:55:74:FC:E2:B4:29:43:98:AD:D8:52:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fd3Uydwj-sNVdPzitClDmK3YUhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/tEt_oHNC-bQbLEYkd7OQN9WRlhs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.183.212.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:1d:7e:4a:80:5b:86:21:04:77:d9:74:d4:ff:42:f8:b7:18:
ad:c2:11:96:7f:c7:e8:d1:3f:5b:67:e6:78:1c:09:4c:ef:5f:
96:c7:ad:7e:f1:16:ca:85:dd:66:82:ae:91:6b:35:c2:0c:2b:
dc:76:d4:49:df:9f:cb:ce:76:86:c8:26:56:38:d0:29:e4:d5:
3f:03:86:33:ce:cd:08:a5:b8:0d:18:3d:69:af:a9:6b:1c:6a:
05:3d:c6:d4:03:01:2a:48:92:88:87:89:5c:41:99:a4:9b:87:
67:f5:78:b9:03:94:c5:3c:64:28:89:24:d7:96:2d:58:77:a2:
08:32:8b:de:1b:16:17:e3:bd:cd:1c:8e:01:54:61:46:6e:a8:
87:06:87:18:c6:9c:b6:e4:2a:8c:98:8c:68:7d:96:3d:b7:68:
f3:88:c2:14:b1:9a:49:f4:78:3c:09:a7:26:45:bb:f9:0c:a5:
54:96:14:46:83:b6:50:56:0d:b2:97:b9:07:97:6d:80:05:16:
5a:d7:bd:a3:c1:b4:77:22:e3:1c:bf:f6:46:f4:0c:f1:a7:af:
25:e1:fd:15:ae:05:9e:6a:24:4a:0c:f9:a5:04:8e:de:39:e7:
9e:8a:e4:ba:2a:79:49:a5:bb:05:b5:80:cf:da:68:3b:bf:d6:
6b:19:17:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:27:27 2024 by rpki-client on console-fra.rpki-client.org