Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/vO0-l6OMru7gLgdxaK56L7nE5KY.roa
File: vO0-l6OMru7gLgdxaK56L7nE5KY.roa (raw, json)
Hash identifier: LM/cOp4JzvBdWP7Pqu0dMFKx/6IzFJE4JloHs0q76+4=
Subject key identifier: BC:ED:3E:97:A3:8C:AE:EE:E0:2E:07:71:68:AE:7A:2F:B9:C4:E4:A6
Certificate issuer: /CN=22f35c611c29234bf4b40b35990ddfa293a537f9
Certificate serial: 0186DFF603A6996488E865BEB6B8A407511A
Authority key identifier: 22:F3:5C:61:1C:29:23:4B:F4:B4:0B:35:99:0D:DF:A2:93:A5:37:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvNcYRwpI0v0tAs1mQ3fopOlN_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/vO0-l6OMru7gLgdxaK56L7nE5KY.roa
Signing time: Tue 14 Mar 2023 11:51:27 +0000
ROA not before: Tue 14 Mar 2023 11:51:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48492
IP address blocks: 185.181.108.0/22 maxlen: 24
185.75.224.0/22 maxlen: 24
2a0d:4f00::/29 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:df:f6:03:a6:99:64:88:e8:65:be:b6:b8:a4:07:51:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f35c611c29234bf4b40b35990ddfa293a537f9
Validity
Not Before: Mar 14 11:51:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bced3e97a38caeeee02e077168ae7a2fb9c4e4a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:7e:99:5b:3f:1a:4a:7a:7e:00:d8:52:1d:7a:
c7:31:5b:80:9d:3b:02:5a:c2:aa:49:3d:98:6d:8b:
8f:30:58:b0:1d:c9:4e:ce:5c:33:8c:8d:38:ba:9a:
b5:2c:eb:84:f1:08:9b:89:c1:a4:59:50:1c:27:04:
f7:2d:a1:c4:68:af:94:5b:45:14:50:a9:73:59:00:
b2:98:16:55:62:88:1c:43:b8:d9:cd:b3:4a:89:3e:
9a:bb:2c:bb:06:2a:c7:d7:35:94:8d:3a:33:8e:3e:
3e:61:bb:d3:64:16:3d:7a:79:45:cc:65:1f:bb:6d:
e5:05:70:6f:9d:29:67:66:45:ea:8c:c2:22:76:e3:
d6:44:e7:3f:c2:7c:2c:52:5b:77:1b:55:b8:4d:34:
4e:94:09:ee:63:a5:bb:8f:a4:e7:87:28:25:2e:5c:
c0:35:16:cc:1b:2d:d8:7b:00:cb:e2:69:b2:3f:09:
e3:03:df:34:df:7f:f2:57:e3:30:2d:eb:22:9b:4f:
c8:92:32:96:ba:be:5b:2e:7c:7f:80:bd:e5:46:f0:
2a:14:4a:f3:4f:d4:52:b4:17:a4:62:98:1e:66:ee:
ae:96:4e:19:dc:16:a0:ba:bc:d4:3b:27:77:73:39:
40:63:dc:ee:0c:78:51:06:5e:36:99:58:4b:49:9f:
d7:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:ED:3E:97:A3:8C:AE:EE:E0:2E:07:71:68:AE:7A:2F:B9:C4:E4:A6
X509v3 Authority Key Identifier:
keyid:22:F3:5C:61:1C:29:23:4B:F4:B4:0B:35:99:0D:DF:A2:93:A5:37:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvNcYRwpI0v0tAs1mQ3fopOlN_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/vO0-l6OMru7gLgdxaK56L7nE5KY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.75.224.0/22
185.181.108.0/22
IPv6:
2a0d:4f00::/29
Signature Algorithm: sha256WithRSAEncryption
28:45:a8:7c:f7:05:0a:dd:bf:21:cc:1a:f3:aa:5b:9e:4a:84:
9c:cf:dd:a5:be:43:dc:09:9d:6f:b9:74:1b:22:91:77:1a:cd:
37:38:d8:46:89:77:f7:a8:72:9b:ab:0e:f7:a2:f6:07:9f:0c:
27:25:89:35:8c:bd:76:59:cc:95:65:bb:ec:dd:35:a8:9c:d5:
25:c6:16:67:a4:c3:24:62:3d:b4:da:b1:0b:53:ab:26:04:81:
ec:e6:b1:37:32:30:5f:80:38:57:b0:79:d7:a8:c5:1f:d6:ce:
b7:70:d1:76:ed:bc:9b:6b:26:43:f7:63:d5:8b:fa:18:9a:a8:
72:fc:a6:31:a3:97:1f:84:ee:13:44:10:b2:33:d6:a5:dc:36:
c8:fc:ee:80:03:7d:f4:4c:ec:e6:60:1e:92:fd:10:6c:d9:7a:
a8:4d:b3:50:6c:47:3e:eb:dc:e8:80:21:2a:68:85:5c:51:92:
7e:62:b4:95:21:08:f1:a2:6d:51:05:98:fa:fd:6f:da:57:e0:
ef:0a:43:26:2d:09:a9:bd:f4:6a:22:e3:d7:b5:60:65:9c:a2:
9c:62:8c:3f:37:09:4f:c3:96:9f:65:ec:d0:f6:87:5e:82:1b:
ca:64:f0:1c:ab:ec:98:d3:6a:70:3a:76:a6:80:03:e9:49:37:
71:e3:a4:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:14:53 2024 by rpki-client on console-fra.rpki-client.org