Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/3cce22-c301-4bbc-b027-64eecaed11dc/1/Jwb2_btV28OUj20NndBB5O5_nu0.roa
File: Jwb2_btV28OUj20NndBB5O5_nu0.roa (raw, json)
Hash identifier: QbbXmWJP5IE8yNCHGjO8QqfAExg5ktavLfXef0jkWUs=
Subject key identifier: 27:06:F6:FD:BB:55:DB:C3:94:8F:6D:0D:9D:D0:41:E4:EE:7F:9E:ED
Certificate issuer: /CN=fad949f66253543ee89b9196390736b5a6ed7cb8
Certificate serial: 0185736825CB56335ED1CCC4C3ED5DDBCF0C
Authority key identifier: FA:D9:49:F6:62:53:54:3E:E8:9B:91:96:39:07:36:B5:A6:ED:7C:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tlJ9mJTVD7om5GWOQc2tabtfLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/3cce22-c301-4bbc-b027-64eecaed11dc/1/Jwb2_btV28OUj20NndBB5O5_nu0.roa
Signing time: Mon 02 Jan 2023 16:54:43 +0000
ROA not before: Mon 02 Jan 2023 16:54:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14445
IP address blocks: 185.218.2.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 15 Dec 2023 11:16:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:68:25:cb:56:33:5e:d1:cc:c4:c3:ed:5d:db:cf:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fad949f66253543ee89b9196390736b5a6ed7cb8
Validity
Not Before: Jan 2 16:54:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2706f6fdbb55dbc3948f6d0d9dd041e4ee7f9eed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d4:f8:b9:26:b6:a1:b6:ed:d7:17:6d:e8:86:
6c:c9:be:3c:80:f1:ac:10:d2:b1:2e:fd:6f:b2:99:
4c:51:bb:fe:9c:64:36:60:28:8e:c1:f1:15:26:03:
40:2a:66:3e:2f:67:03:dc:d9:06:ef:38:e3:2e:8e:
f4:d7:24:c8:6a:1c:b4:c6:ef:99:f4:b6:f7:69:1c:
2c:f1:6d:0c:ce:5e:20:0d:45:50:b9:5e:aa:5a:53:
c3:e4:dd:07:13:7c:ae:c3:63:c1:d2:5b:5b:11:d2:
52:8f:f6:8b:bd:ef:b2:a7:13:24:d3:df:f4:f5:b0:
ce:b8:52:e9:da:84:28:6d:94:41:75:b8:e0:a1:52:
61:4d:35:1a:2f:64:14:e3:59:0f:04:a8:29:31:20:
81:e2:e9:54:77:39:54:e6:8b:53:b2:c3:02:12:83:
7f:b9:fa:ab:8b:ae:a8:8b:cf:9e:b4:17:25:28:45:
97:dc:f2:06:09:8d:d7:67:85:8a:01:a1:0c:fd:b2:
e8:78:39:72:fd:57:95:63:1f:a7:89:75:a7:03:6e:
ed:60:76:e8:eb:34:a7:27:40:dd:44:b3:72:4f:5b:
8b:b5:d0:b9:ec:78:dc:0f:12:1c:42:82:c7:e5:7f:
34:c5:6c:38:86:53:00:85:6b:3b:eb:5d:db:49:3c:
5f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:06:F6:FD:BB:55:DB:C3:94:8F:6D:0D:9D:D0:41:E4:EE:7F:9E:ED
X509v3 Authority Key Identifier:
keyid:FA:D9:49:F6:62:53:54:3E:E8:9B:91:96:39:07:36:B5:A6:ED:7C:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tlJ9mJTVD7om5GWOQc2tabtfLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3cce22-c301-4bbc-b027-64eecaed11dc/1/Jwb2_btV28OUj20NndBB5O5_nu0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3cce22-c301-4bbc-b027-64eecaed11dc/1/1-tlJ9mJTVD7om5GWOQc2tabtfLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.2.0/24
Signature Algorithm: sha256WithRSAEncryption
67:83:c5:e2:61:b6:1f:ac:08:55:fe:9a:72:22:17:90:0a:f1:
0b:8b:b7:81:da:04:4c:1e:49:e5:a9:ed:50:35:9a:58:d0:11:
16:a5:cb:8f:73:87:2c:84:2c:7a:d5:a7:ab:4c:38:39:fd:26:
9d:db:71:9c:77:b0:bf:eb:de:3d:6f:5e:40:33:64:0b:3d:97:
47:6f:b2:55:64:65:5b:28:c7:7f:be:7e:ce:14:cd:2c:f1:1c:
9c:71:a8:9e:0c:4e:6a:ec:fc:de:b5:7f:1d:a8:ac:1c:e7:9f:
75:dc:15:3a:5e:dc:74:8b:18:92:bf:78:1b:b9:ad:f8:1e:0e:
d0:a5:47:9d:fe:ca:2e:58:c2:0a:25:b7:9a:8d:51:c9:ee:83:
2a:b9:d5:59:7e:96:78:16:ef:99:03:69:fd:25:47:70:56:ae:
a9:a2:51:cd:35:02:7a:b2:c8:82:69:fc:81:dd:b6:ad:65:fb:
1b:23:29:e7:98:f2:0e:38:1c:0c:42:31:2b:94:19:e3:64:da:
85:8b:1c:70:4e:7d:ad:fa:ac:b6:fd:3c:14:82:5f:74:12:a2:
ad:56:ef:03:a0:a5:41:1f:92:2b:bd:c8:ba:c0:14:2e:a5:d8:
78:db:73:54:58:e7:4f:47:ac:df:a1:76:77:52:58:21:c3:0b:
26:22:f8:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:49 2024 by rpki-client on console-ams.rpki-client.org