Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/2d2eb6-05d5-47a0-8fed-ebf32a0469c7/1/mEVIpTXpB3w6gPoS2j95enyNLKA.roa
File: mEVIpTXpB3w6gPoS2j95enyNLKA.roa (raw, json)
Hash identifier: 81zlnIzb2F9A4Kl9U+8lbj0tAkDbtB2QSeL0ynmpI+Q=
Subject key identifier: 98:45:48:A5:35:E9:07:7C:3A:80:FA:12:DA:3F:79:7A:7C:8D:2C:A0
Certificate issuer: /CN=4adcf19672965f51b16d87afab1b149082e6c3ee
Certificate serial: 018571C2FDC5FBC4FB46093384D0EFB2C5E7
Authority key identifier: 4A:DC:F1:96:72:96:5F:51:B1:6D:87:AF:AB:1B:14:90:82:E6:C3:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/StzxlnKWX1GxbYevqxsUkILmw-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/2d2eb6-05d5-47a0-8fed-ebf32a0469c7/1/mEVIpTXpB3w6gPoS2j95enyNLKA.roa
Signing time: Mon 02 Jan 2023 09:14:42 +0000
ROA not before: Mon 02 Jan 2023 09:14:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205174
IP address blocks: 185.217.222.0/24 maxlen: 24
185.217.220.0/22 maxlen: 22
2a0c:e200::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:c2:fd:c5:fb:c4:fb:46:09:33:84:d0:ef:b2:c5:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4adcf19672965f51b16d87afab1b149082e6c3ee
Validity
Not Before: Jan 2 09:14:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=984548a535e9077c3a80fa12da3f797a7c8d2ca0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9a:30:31:fe:49:8f:40:98:26:6d:e4:5a:94:
30:8e:c7:4e:48:1a:98:20:9d:fd:15:23:f6:b5:4a:
50:df:1e:39:d1:c3:df:0c:6c:d3:04:c8:62:c1:76:
ac:80:d7:40:76:a4:b1:e6:0e:cf:ca:d3:49:f2:ce:
95:52:8d:84:b1:e1:fa:b2:19:84:61:7b:e6:24:1b:
9e:61:2d:97:94:33:c3:b3:0e:91:14:f5:7c:91:3f:
73:3c:e4:e3:df:98:bf:f0:b6:b1:f7:a1:3e:da:f3:
51:fc:2d:23:40:53:a1:7b:5d:76:b4:f7:ea:15:8f:
7d:c2:20:1a:c0:55:a4:3f:cc:34:79:84:89:16:a4:
cb:77:8c:b6:6e:6a:7e:db:f5:ee:ee:87:d3:97:9e:
90:c8:c5:4d:26:72:04:b8:2c:b1:7c:88:ec:48:5b:
64:18:2e:84:d8:d4:d4:de:96:27:9a:96:7e:b4:de:
95:81:64:5d:3f:c2:e6:83:ec:3c:4e:f0:d1:37:b9:
d9:34:97:80:d4:bd:7a:9b:fe:17:55:55:b3:58:df:
81:e6:97:e4:d2:0f:00:b2:43:ae:3a:fc:45:ed:83:
07:f1:1f:91:f8:f7:53:6f:da:38:2e:02:fa:5a:68:
e2:57:05:64:c4:c6:9b:61:a6:95:46:ee:e0:e6:99:
9a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:45:48:A5:35:E9:07:7C:3A:80:FA:12:DA:3F:79:7A:7C:8D:2C:A0
X509v3 Authority Key Identifier:
keyid:4A:DC:F1:96:72:96:5F:51:B1:6D:87:AF:AB:1B:14:90:82:E6:C3:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/StzxlnKWX1GxbYevqxsUkILmw-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/2d2eb6-05d5-47a0-8fed-ebf32a0469c7/1/mEVIpTXpB3w6gPoS2j95enyNLKA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/2d2eb6-05d5-47a0-8fed-ebf32a0469c7/1/StzxlnKWX1GxbYevqxsUkILmw-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.217.220.0/22
IPv6:
2a0c:e200::/29
Signature Algorithm: sha256WithRSAEncryption
38:72:49:be:ce:1a:55:5d:b6:04:83:c8:c3:2c:4c:65:9c:f0:
8a:4a:7b:fd:6c:1c:13:e3:9c:26:f1:14:8b:86:87:e4:49:61:
84:6f:dd:eb:a6:1f:83:27:5f:a6:45:03:d6:da:fb:d5:74:b8:
85:28:fc:8e:e2:5e:70:30:0e:25:c2:98:97:62:12:8e:72:f7:
59:6c:73:73:35:3a:bd:47:71:34:fb:90:ca:61:e9:d0:9d:ae:
21:ec:8d:3f:79:f8:8f:ca:81:0d:68:84:d8:7f:16:a0:56:f1:
35:6f:8d:07:eb:ed:92:53:8b:c5:64:5e:ff:1b:86:43:97:29:
0c:c0:3e:a6:3a:a4:10:96:ca:9a:d3:24:a3:1c:7a:01:70:f2:
5e:83:b1:63:bb:72:c0:3d:bc:11:cc:de:0d:6f:63:a0:10:13:
bc:69:0e:eb:df:73:2c:26:a9:e4:f8:93:b2:15:03:6f:2d:74:
9e:6d:19:60:e9:98:99:42:af:c2:4e:2b:7a:1b:d1:ab:61:52:
d1:41:d4:f8:c0:b4:b8:de:cf:c4:8d:c3:c5:4e:36:63:c5:8b:
fb:19:71:86:cd:f9:98:3f:a9:7f:c5:16:47:02:40:80:e2:59:
71:4d:61:42:8f:74:04:80:0b:4e:5f:f0:6d:07:db:92:90:4c:
48:dd:a4:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:14:51 2024 by rpki-client on console-fra.rpki-client.org