Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/EcdbU6BJBDUGIIgT_SL1kQX3DpA.roa
File: EcdbU6BJBDUGIIgT_SL1kQX3DpA.roa (raw, json)
Hash identifier: fac3ckodqhIbIqN6pxHqW0NS6Y3xkFFKLnbTl4jYfIA=
Subject key identifier: 11:C7:5B:53:A0:49:04:35:06:20:88:13:FD:22:F5:91:05:F7:0E:90
Certificate issuer: /CN=01471c79e9642caef6a7437f1f74c5478ae52129
Certificate serial: 01856F5DB7AEFFA1FB93F62FC3B02A10BE01
Authority key identifier: 01:47:1C:79:E9:64:2C:AE:F6:A7:43:7F:1F:74:C5:47:8A:E5:21:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AUcceelkLK72p0N_H3TFR4rlISk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/EcdbU6BJBDUGIIgT_SL1kQX3DpA.roa
Signing time: Sun 01 Jan 2023 22:04:50 +0000
ROA not before: Sun 01 Jan 2023 22:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41938
IP address blocks: 185.66.218.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:b7:ae:ff:a1:fb:93:f6:2f:c3:b0:2a:10:be:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01471c79e9642caef6a7437f1f74c5478ae52129
Validity
Not Before: Jan 1 22:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=11c75b53a049043506208813fd22f59105f70e90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ef:fd:e2:c4:5b:1d:b6:a6:a7:d1:d8:ec:2d:
33:c5:de:3b:ed:96:bf:9a:c1:c5:81:b6:17:ea:d6:
8c:8a:66:a1:bb:07:86:7c:6c:4e:53:d1:c8:f8:ac:
b6:bf:7c:b8:a4:8d:1d:57:32:8f:3d:6d:95:10:a6:
31:ac:98:44:69:ea:30:30:c7:ad:cc:80:93:0e:70:
f3:20:47:25:88:68:17:9a:0a:65:d8:e1:f0:20:9e:
a8:7e:e9:4a:21:b5:41:ed:3a:60:53:f0:6e:19:5a:
e2:4d:85:10:76:6e:64:0f:f4:f1:48:e5:1a:76:63:
cd:ed:a8:f6:fa:4b:62:f0:9d:d8:cf:c3:f2:94:1a:
f2:4c:22:ee:e6:a9:5f:db:1c:d8:85:ea:44:d9:6d:
4a:1a:ab:bc:59:bc:2f:ce:f0:91:22:7d:9b:b9:b0:
54:6e:5a:67:57:c4:27:66:ed:84:ae:a6:15:fe:39:
4b:28:d9:71:4f:26:f4:bb:d7:e9:3c:d6:dc:1b:91:
c8:d2:24:62:e9:fd:f2:59:7a:c2:8c:ab:76:d2:5c:
d0:b4:98:5c:a8:3a:32:ec:21:15:3c:b2:9d:c4:ce:
9b:a1:2b:fa:70:e3:ed:2a:e8:89:22:c3:72:bf:7f:
69:23:97:4e:30:a1:7e:82:2c:3a:3e:3b:d6:6f:84:
18:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:C7:5B:53:A0:49:04:35:06:20:88:13:FD:22:F5:91:05:F7:0E:90
X509v3 Authority Key Identifier:
keyid:01:47:1C:79:E9:64:2C:AE:F6:A7:43:7F:1F:74:C5:47:8A:E5:21:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AUcceelkLK72p0N_H3TFR4rlISk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/EcdbU6BJBDUGIIgT_SL1kQX3DpA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e1a37d-868e-46bb-a7c8-9d2d9f6eee93/1/AUcceelkLK72p0N_H3TFR4rlISk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.66.218.0/23
Signature Algorithm: sha256WithRSAEncryption
6f:e4:3a:40:b0:30:97:46:1e:c5:9c:ea:f1:b4:9a:28:b7:de:
ee:de:0f:49:a9:4d:16:54:70:48:99:af:01:a5:ef:1d:e1:b9:
48:f5:d5:ef:20:fb:6d:8a:1d:d8:0f:87:d1:3d:49:cf:50:36:
12:f0:1c:bb:94:66:5e:8b:b3:fb:13:53:48:d4:04:1f:ae:0a:
dc:34:dc:a8:da:d8:a8:bb:68:82:5f:aa:3e:8e:ab:fb:a1:9d:
64:ca:09:b1:2b:c5:78:61:49:8e:b3:e0:1a:f4:63:98:b1:4a:
13:62:50:8a:4d:1d:ef:aa:ec:f1:b2:79:a5:44:a9:64:d3:1a:
f7:30:0d:c4:01:b3:7d:85:11:1f:82:bc:c0:74:fd:8a:6b:e1:
36:48:25:db:57:9d:35:6d:70:c5:e0:da:87:91:35:09:e4:59:
4a:ea:77:fe:1f:32:f1:c8:25:ee:ff:ce:c7:68:36:b1:e7:53:
76:d3:01:44:03:62:56:11:29:64:7f:ff:25:c9:1f:fa:1b:84:
b2:f8:cf:fe:c2:d7:cd:4e:93:02:82:69:2f:60:e1:fd:80:6d:
aa:98:3b:0e:cd:5c:27:91:25:ee:1f:e5:16:d9:da:38:cb:f4:
54:6d:4e:db:54:1e:de:f8:fd:a8:27:80:cc:74:70:30:7c:3c:
0f:e3:18:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 02:53:58 2024 by rpki-client on console-ams.rpki-client.org