Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/00816a-eedf-4190-bc33-3a02a242f444/1/Ev-DSkjZrg8nJBOCUs0oo0WR15s.roa
File: Ev-DSkjZrg8nJBOCUs0oo0WR15s.roa (raw, json)
Hash identifier: kWuouno5jsr9q8G0b7L4brUb2DHC3CPFHPYX4LNOVSY=
Subject key identifier: 12:FF:83:4A:48:D9:AE:0F:27:24:13:82:52:CD:28:A3:45:91:D7:9B
Certificate issuer: /CN=382528ab1cd1b6dc73c0b09b67d3e7e3584f363d
Certificate serial: 0187037588EF54970E5A3C870963BADAB231
Authority key identifier: 38:25:28:AB:1C:D1:B6:DC:73:C0:B0:9B:67:D3:E7:E3:58:4F:36:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCUoqxzRttxzwLCbZ9Pn41hPNj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/00816a-eedf-4190-bc33-3a02a242f444/1/Ev-DSkjZrg8nJBOCUs0oo0WR15s.roa
Signing time: Tue 21 Mar 2023 09:17:27 +0000
ROA not before: Tue 21 Mar 2023 09:17:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208484
IP address blocks: 185.116.248.0/22 maxlen: 22
5.145.184.0/21 maxlen: 21
2a04:64c0::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:03:75:88:ef:54:97:0e:5a:3c:87:09:63:ba:da:b2:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=382528ab1cd1b6dc73c0b09b67d3e7e3584f363d
Validity
Not Before: Mar 21 09:17:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=12ff834a48d9ae0f2724138252cd28a34591d79b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a7:42:0c:e3:d4:ca:44:91:ac:46:1b:f8:ef:
87:41:60:b7:89:cb:a5:76:0d:4c:fd:08:3b:95:99:
0b:3d:51:6a:5c:44:80:42:c9:4f:97:c7:c6:90:85:
ff:24:18:b9:c8:87:34:4a:57:90:b9:7b:23:54:8c:
ce:e7:d6:2a:dc:5a:92:8a:7d:6c:dc:1d:0d:6c:b6:
ee:96:1f:96:1a:f4:f0:4b:52:ce:97:c9:2c:16:c1:
41:55:f7:d5:5d:9c:74:c2:47:e0:a4:83:f6:c7:03:
ea:7a:33:d1:04:7e:1e:ec:d7:78:f6:0e:8c:7b:6a:
3c:2d:cf:42:c3:89:8f:1b:4b:15:ed:95:b0:dc:ba:
de:37:d2:e3:1c:49:fb:fa:ab:6e:e9:d0:40:9e:b4:
6b:a5:1f:c6:67:bc:04:d8:af:28:00:21:2e:88:34:
98:9d:b3:4f:b4:cb:0f:6e:2f:1f:e6:3b:42:53:80:
91:da:06:b9:6d:00:23:b7:7a:ab:72:13:70:de:51:
55:a1:54:86:a5:ba:6f:d5:58:92:28:f6:3a:81:cf:
bc:1c:da:ee:fb:14:3c:4a:21:a0:0b:cd:a9:1e:41:
92:58:8c:48:72:2a:d2:3e:8c:4a:a1:a6:2d:2d:23:
b0:61:cd:34:35:80:19:7e:91:c0:bc:9a:da:e7:af:
d4:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:FF:83:4A:48:D9:AE:0F:27:24:13:82:52:CD:28:A3:45:91:D7:9B
X509v3 Authority Key Identifier:
keyid:38:25:28:AB:1C:D1:B6:DC:73:C0:B0:9B:67:D3:E7:E3:58:4F:36:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCUoqxzRttxzwLCbZ9Pn41hPNj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/00816a-eedf-4190-bc33-3a02a242f444/1/Ev-DSkjZrg8nJBOCUs0oo0WR15s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/00816a-eedf-4190-bc33-3a02a242f444/1/OCUoqxzRttxzwLCbZ9Pn41hPNj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.145.184.0/21
185.116.248.0/22
IPv6:
2a04:64c0::/29
Signature Algorithm: sha256WithRSAEncryption
3b:43:d3:c9:98:8c:15:df:be:d9:08:ab:4b:ac:7c:50:76:e6:
93:74:3a:de:bf:49:75:57:b1:46:4f:58:8f:fe:05:16:c7:92:
c7:aa:b4:7c:c1:79:9b:68:c4:3d:31:d8:93:97:6b:29:fa:0c:
9d:86:52:92:91:8a:0b:76:20:0d:d8:f2:11:be:ec:f5:ad:36:
e7:a4:9b:18:32:63:42:0c:b2:15:3e:b1:b0:0d:96:35:4c:86:
09:47:da:5a:83:c3:c1:78:db:d3:6b:f8:7e:f1:82:2a:e4:fe:
65:3c:c0:a6:62:65:28:80:22:63:30:ac:84:c5:6d:a7:11:6d:
bc:af:7b:4d:fa:29:90:8a:e4:3b:fe:43:dc:96:1b:96:99:ea:
53:b5:09:57:cb:a2:5b:f2:f3:ac:0d:a6:b0:40:f2:4a:b1:13:
f9:9d:63:85:dd:88:f4:19:0e:7d:69:09:af:5a:a8:d7:07:9a:
c3:b6:4b:e6:18:8e:49:e6:e5:e9:99:71:f4:28:31:a0:0c:3c:
93:7f:08:c0:62:b9:a6:fc:78:da:a5:20:54:e9:4e:fb:4f:17:
a1:a4:ea:e9:7a:3a:ea:d4:b3:02:6c:fd:1f:fa:c8:26:cc:86:
db:e5:1a:ac:6f:e5:80:06:05:e3:f7:9d:3d:e5:01:ea:98:ca:
8c:5d:ac:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:00:27 2024 by rpki-client on console-ams.rpki-client.org