Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/ETVRrnxhYeqdSTANlX3LIc4fiQ4.roa
File: ETVRrnxhYeqdSTANlX3LIc4fiQ4.roa (raw, json)
Hash identifier: LcB5LtZTJCm7eBKq4ImMOBcXlFxbssI+4xaRYQzsKO4=
Subject key identifier: 11:35:51:AE:7C:61:61:EA:9D:49:30:0D:95:7D:CB:21:CE:1F:89:0E
Certificate issuer: /CN=94166b704843d3d9754095c83a91b493828200a2
Certificate serial: 018572B42410E69444F21A23B974C16BDA15
Authority key identifier: 94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/ETVRrnxhYeqdSTANlX3LIc4fiQ4.roa
Signing time: Mon 02 Jan 2023 13:38:06 +0000
ROA not before: Mon 02 Jan 2023 13:38:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 138687
IP address blocks: 185.149.13.0/24 maxlen: 24
185.149.15.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:b4:24:10:e6:94:44:f2:1a:23:b9:74:c1:6b:da:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94166b704843d3d9754095c83a91b493828200a2
Validity
Not Before: Jan 2 13:38:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=113551ae7c6161ea9d49300d957dcb21ce1f890e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c1:76:f9:b2:b1:36:61:78:4d:7a:97:3e:32:
eb:31:3e:7c:0f:4c:8d:d3:a0:9c:3f:b2:08:ce:27:
9b:a3:f8:7b:5b:4a:0e:1e:f2:45:23:e8:9b:b4:82:
5a:f0:5d:51:73:6f:c2:5a:e4:e2:26:85:43:17:b1:
75:76:08:45:98:6d:4d:64:fb:36:e1:bf:09:1c:70:
09:ac:b9:fc:43:c3:17:b4:86:3c:ed:04:90:9e:38:
93:82:f9:af:d1:fd:f9:94:98:da:8b:e1:56:32:30:
ae:01:90:f1:3f:d1:99:c3:0a:39:23:6b:48:ac:58:
93:98:b2:04:8f:53:81:5f:30:86:b0:f9:4e:c0:14:
e4:f4:58:47:3e:dd:50:b4:ae:d3:9d:8e:d1:d5:c7:
a0:f3:3f:68:2b:9f:8c:7b:cc:18:ad:29:93:74:44:
ac:0f:71:c1:34:60:ab:1a:36:08:57:97:b0:e7:9d:
df:21:2a:40:98:5e:7d:ac:58:b5:c9:f4:96:7b:b2:
94:b1:5c:44:e8:d4:bb:6a:c2:2f:b0:f4:dd:03:7f:
42:ee:76:84:59:9f:6e:8a:19:8a:d0:82:57:b6:d4:
96:e3:20:64:b0:59:66:47:ec:c4:9e:68:2d:52:9f:
8a:6c:5b:b6:4a:e8:77:27:45:18:4c:0d:33:8b:e0:
6e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:35:51:AE:7C:61:61:EA:9D:49:30:0D:95:7D:CB:21:CE:1F:89:0E
X509v3 Authority Key Identifier:
keyid:94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/ETVRrnxhYeqdSTANlX3LIc4fiQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.149.13.0/24
185.149.15.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:4e:cb:30:05:ef:dd:a3:0e:03:96:dd:65:b8:00:e1:95:b6:
93:c6:dd:34:37:3e:97:b2:f1:77:9b:1f:15:2e:99:7a:8b:a3:
0d:6e:b2:da:49:78:c3:20:2d:80:69:8a:f7:a5:e1:02:2c:d8:
ef:fe:3e:43:17:6a:76:e1:50:52:a1:45:fa:9a:a9:6b:a7:c3:
ea:3a:41:3f:c5:6f:ca:88:28:0f:12:31:4a:52:f4:23:ce:12:
14:8b:39:c4:c6:ed:aa:35:de:93:40:4c:cf:1b:00:4b:0c:84:
ed:5d:22:24:e9:e8:4e:f2:ed:8d:2c:81:88:b6:cc:d2:7d:24:
c8:b2:9f:c3:8d:cd:a6:8d:09:9a:f1:90:b2:de:dd:05:54:c6:
f6:12:72:2e:46:14:81:ab:61:07:3d:15:ff:bb:b1:e7:82:d3:
c8:66:c4:b6:67:b5:43:0a:b6:2d:ab:dc:fc:4c:8e:b0:67:ba:
bb:ab:59:bd:6c:36:3a:6e:74:f5:98:e8:09:ae:61:55:78:67:
e8:30:4e:d7:b1:13:e7:75:96:4e:77:cd:d9:f9:f0:31:c3:8a:
51:bb:05:76:24:61:c4:fa:02:2d:94:4e:cd:51:40:03:39:14:
11:33:94:b0:c2:65:6f:d9:77:92:8e:20:c5:05:f4:54:2b:0a:
cc:b1:7f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:01 2023 by rpki-client on console-fra.rpki-client.org