Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/55fb8c-4759-46a3-ad76-6253b5f762c2/1/ECIq73g1dl7JbG7vQar9iEfAepg.roa
File: ECIq73g1dl7JbG7vQar9iEfAepg.roa (raw, json)
Hash identifier: 993uuoX0lDMdoMZwVG3lz225Kkkk9b8258n0k5B6lFg=
Subject key identifier: 10:22:2A:EF:78:35:76:5E:C9:6C:6E:EF:41:AA:FD:88:47:C0:7A:98
Certificate issuer: /CN=1be6354f38c094634034bbe2bcf91674ea63e355
Certificate serial: 0185718C1B6A0762897F6D1BBF80B7A1F8C7
Authority key identifier: 1B:E6:35:4F:38:C0:94:63:40:34:BB:E2:BC:F9:16:74:EA:63:E3:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-Y1TzjAlGNANLvivPkWdOpj41U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/55fb8c-4759-46a3-ad76-6253b5f762c2/1/ECIq73g1dl7JbG7vQar9iEfAepg.roa
Signing time: Mon 02 Jan 2023 08:14:45 +0000
ROA not before: Mon 02 Jan 2023 08:14:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 185.145.232.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:8c:1b:6a:07:62:89:7f:6d:1b:bf:80:b7:a1:f8:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1be6354f38c094634034bbe2bcf91674ea63e355
Validity
Not Before: Jan 2 08:14:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=10222aef7835765ec96c6eef41aafd8847c07a98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1b:06:73:6d:35:97:86:1d:7d:4a:38:29:6e:
c1:8b:e0:6d:af:71:e9:0e:be:f8:43:43:0c:e5:c3:
62:a2:b0:e1:58:9a:ad:22:6c:2e:c8:67:2c:dd:32:
42:24:4a:d2:3d:6d:30:e4:06:a6:53:7d:02:7b:e5:
1f:87:8a:a0:25:43:63:b7:e1:77:dd:89:ec:ce:bd:
bc:bb:cd:ec:3a:ed:1b:65:fe:a3:8d:6b:04:82:62:
9b:a6:12:a1:00:0a:aa:c6:42:48:89:21:05:d9:d5:
31:bb:bb:a7:d4:88:1e:e7:4a:6f:14:c1:1d:41:40:
8b:e6:50:e1:6f:68:d3:a7:40:a6:87:9e:46:3a:5f:
84:ea:f5:fc:61:a4:4a:64:2a:60:05:63:cf:dd:e9:
c5:7b:93:c6:4b:d9:1e:eb:dc:b6:7c:6a:9e:99:b4:
41:ea:6a:64:eb:57:9d:fc:80:ed:2c:f6:ef:dc:de:
c3:93:24:73:76:4a:fb:21:12:2d:55:4e:ec:18:e8:
b6:b3:f5:9b:44:7d:46:c4:dc:51:56:b8:d0:e4:c4:
53:c6:58:49:2a:ae:39:fd:d0:6b:f2:cc:d6:e5:45:
b5:e5:83:35:08:cd:f3:d0:0f:d5:d9:1d:f4:d4:da:
e6:70:e1:ce:69:e6:fd:9f:50:16:e9:37:73:37:8e:
37:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:22:2A:EF:78:35:76:5E:C9:6C:6E:EF:41:AA:FD:88:47:C0:7A:98
X509v3 Authority Key Identifier:
keyid:1B:E6:35:4F:38:C0:94:63:40:34:BB:E2:BC:F9:16:74:EA:63:E3:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-Y1TzjAlGNANLvivPkWdOpj41U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/55fb8c-4759-46a3-ad76-6253b5f762c2/1/ECIq73g1dl7JbG7vQar9iEfAepg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/55fb8c-4759-46a3-ad76-6253b5f762c2/1/G-Y1TzjAlGNANLvivPkWdOpj41U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.145.232.0/24
Signature Algorithm: sha256WithRSAEncryption
47:a5:61:dd:2a:33:77:5c:fc:b6:5a:01:b7:ad:5d:3a:5a:91:
16:b0:da:3f:8d:f3:6d:b9:1a:2a:66:19:4c:14:29:dd:15:15:
11:1e:f6:0d:b9:64:ca:ef:23:0b:3b:15:d7:44:9c:67:f6:0f:
70:a8:44:72:3a:bb:b5:35:db:e9:50:d7:4d:d6:72:f7:bf:f8:
7f:ca:87:db:17:b9:7f:92:b2:0f:d0:38:b1:57:bf:e6:3d:11:
fb:7d:eb:6e:49:fd:91:50:a2:71:21:e1:c6:11:a5:48:a0:f9:
a1:27:92:a9:c2:8c:be:72:f8:96:e4:67:0e:11:4b:5e:ff:11:
6f:d6:05:c1:cf:e7:a3:a3:13:28:87:5b:79:db:ec:07:9a:0a:
6f:a7:c6:05:d6:02:cd:d1:78:38:4d:5a:3d:7f:cc:8e:b0:e5:
86:3b:9b:36:1b:13:8e:0a:32:52:94:0d:99:ac:2a:b7:9c:9f:
b2:74:8b:14:99:ed:e1:82:f7:be:82:3e:18:ca:90:e8:52:f9:
76:b8:cf:12:4b:5b:a9:66:fa:1b:c6:82:3f:9b:e2:2c:26:12:
49:62:1e:3d:59:b7:1b:54:ae:2e:24:e3:55:f7:50:a5:3e:db:
ed:bc:3f:8a:a2:44:a0:f3:1c:aa:3b:e0:7a:53:22:9b:40:97:
d5:62:bb:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:10 2023 by rpki-client on console-fra.rpki-client.org