Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/4vurHzW5O4RJvWPU-8044lV5JTw.roa
File: 4vurHzW5O4RJvWPU-8044lV5JTw.roa (raw, json)
Hash identifier: 2n4GitPIPGtB+s9khDDKj7palM7+amnc0KPvgBEA7Oc=
Subject key identifier: E2:FB:AB:1F:35:B9:3B:84:49:BD:63:D4:FB:CD:38:E2:55:79:25:3C
Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial: 0186115954B91DF98F53CFBEFA17640982D5
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/4vurHzW5O4RJvWPU-8044lV5JTw.roa
Signing time: Thu 02 Feb 2023 08:58:32 +0000
ROA not before: Thu 02 Feb 2023 08:58:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 185.179.218.0/23 maxlen: 24
148.222.240.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:11:59:54:b9:1d:f9:8f:53:cf:be:fa:17:64:09:82:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18101772248996b87d90840c2d27d62549458173
Validity
Not Before: Feb 2 08:58:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e2fbab1f35b93b8449bd63d4fbcd38e25579253c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:7d:45:74:7a:fb:2e:62:9a:52:4a:73:26:dc:
84:a0:41:b2:74:12:5e:c0:85:0d:8f:fe:a1:13:cb:
25:c3:57:5f:dd:08:06:e6:74:46:28:51:13:8d:2f:
e5:b2:5e:62:ea:e4:71:52:b0:02:fc:45:6e:b2:b3:
25:13:73:75:33:b0:23:f1:45:7f:aa:a5:bb:ba:ab:
0a:42:a4:17:ca:8b:bd:f9:8a:7a:75:a4:28:d3:4e:
02:7f:34:1a:57:40:94:8e:c0:74:ab:4d:72:33:b5:
a1:02:9f:3b:e0:20:40:10:9a:63:60:ad:36:d7:c5:
a2:91:08:03:7d:d6:bf:cf:56:8b:9c:1d:98:33:ac:
55:33:25:a4:2d:cc:f5:64:30:b0:43:f3:4e:85:86:
69:fc:a6:4f:da:b3:6d:03:ff:57:54:77:e6:b0:84:
9f:16:87:a2:92:c4:d7:f8:e5:a6:64:c1:2a:72:da:
cd:7d:76:e5:1e:24:98:57:50:63:ed:ad:43:27:45:
56:a6:1a:83:35:95:6d:b4:b0:3e:5e:40:f1:61:e0:
7a:1d:66:63:f4:41:25:7a:ea:58:73:ac:d5:f4:93:
e6:c8:db:50:7d:13:6a:a8:b8:56:e3:21:b2:a5:83:
6d:57:98:12:a8:bf:14:84:fc:6c:d6:9a:0e:d6:83:
f0:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:FB:AB:1F:35:B9:3B:84:49:BD:63:D4:FB:CD:38:E2:55:79:25:3C
X509v3 Authority Key Identifier:
keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/4vurHzW5O4RJvWPU-8044lV5JTw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.222.240.0/22
185.179.218.0/23
Signature Algorithm: sha256WithRSAEncryption
71:43:ab:07:b7:99:d6:78:6c:19:c8:f2:b8:49:41:77:84:76:
e5:45:07:8a:bc:f7:b3:d5:41:66:b4:fe:ff:4b:ad:be:4d:85:
74:cc:a2:8c:c5:eb:37:84:16:c5:2c:1a:60:58:30:85:fb:1d:
e3:4e:da:79:54:98:59:7e:d4:53:e0:55:87:36:94:20:fa:9c:
19:08:09:48:1c:8f:82:1f:01:56:1e:e6:cc:fc:84:91:63:27:
d2:75:45:93:43:40:b6:77:67:e5:28:9b:9a:5f:97:89:49:52:
a4:3e:9f:69:74:b2:21:47:8a:6e:08:8d:3a:87:a0:fe:77:3f:
99:5a:54:f6:fb:16:cc:94:b8:54:58:07:14:9f:17:61:76:24:
f3:52:4e:00:51:ff:ca:2f:3d:2c:c1:94:ae:7c:ec:02:ec:41:
17:3a:83:78:94:3f:32:7c:9d:8c:92:1b:5d:a4:d4:78:c2:32:
df:7d:4b:19:3a:c4:2f:d1:f6:ef:bf:e5:98:1b:8a:ed:ca:81:
76:d8:fc:9e:72:c1:6f:7e:f1:40:87:05:88:76:51:70:ff:98:
04:62:cf:2f:98:0b:fc:c1:2b:3d:1e:f3:a1:18:fb:2a:f0:18:
c5:c0:4a:87:48:33:30:c1:ba:e6:68:7d:7c:f6:94:03:16:3c:
84:da:f9:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:40 2023 by rpki-client on console-fra.rpki-client.org