Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/j45Il_U9ON75hh77ZvtBX4jVhJM.roa
File: j45Il_U9ON75hh77ZvtBX4jVhJM.roa (raw, json)
Hash identifier: KEPpv3d3tozyJVqLUgKu2iScpH+PZHtgTdyV3ponvWQ=
Subject key identifier: 8F:8E:48:97:F5:3D:38:DE:F9:86:1E:FB:66:FB:41:5F:88:D5:84:93
Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial: 01856F66F3077CFCE0075D6409602EBA2786
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/j45Il_U9ON75hh77ZvtBX4jVhJM.roa
Signing time: Sun 01 Jan 2023 22:14:55 +0000
ROA not before: Sun 01 Jan 2023 22:14:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207279
IP address blocks: 185.179.216.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:66:f3:07:7c:fc:e0:07:5d:64:09:60:2e:ba:27:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18101772248996b87d90840c2d27d62549458173
Validity
Not Before: Jan 1 22:14:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8f8e4897f53d38def9861efb66fb415f88d58493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f0:66:d7:46:15:91:af:43:6e:66:04:a1:48:
e3:97:7e:0c:97:67:6a:05:f7:46:a0:ee:94:9b:82:
e1:62:16:a2:a9:4e:92:42:32:51:c6:da:9b:9f:6c:
52:47:dd:33:0f:b5:49:f9:94:a7:13:7e:0b:5c:f8:
9f:fd:b0:89:e2:4b:b7:de:86:8c:ea:f5:4f:61:96:
e3:de:b2:43:3d:09:3c:ae:0d:01:aa:58:ed:ab:0c:
2a:b2:94:b5:d9:43:af:a9:6e:72:86:57:73:b7:f2:
d4:51:a6:fe:42:7c:3f:3f:89:d4:14:60:6c:7c:2e:
83:06:69:bc:b8:49:ad:0c:20:45:ae:69:a5:8b:db:
4e:cd:f8:01:ca:7c:da:26:04:b5:ed:07:e7:8c:37:
9e:bb:25:19:87:55:31:da:3f:10:88:81:e0:0b:39:
07:31:e2:39:2c:d7:4c:ee:cb:7d:b7:84:15:50:2f:
1a:80:f7:fd:81:ea:58:dd:e7:6e:d6:77:08:f7:5a:
e8:c7:0f:ab:20:84:cf:a0:08:ac:69:d7:c7:2e:31:
0a:68:80:5c:19:c6:6e:d3:ab:44:b0:ac:4d:20:26:
fa:60:c3:00:45:04:5d:38:e3:f9:25:c0:5d:81:06:
f6:9c:2a:12:22:77:13:f2:f5:15:2b:31:f8:38:11:
b1:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:8E:48:97:F5:3D:38:DE:F9:86:1E:FB:66:FB:41:5F:88:D5:84:93
X509v3 Authority Key Identifier:
keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/j45Il_U9ON75hh77ZvtBX4jVhJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.179.216.0/24
Signature Algorithm: sha256WithRSAEncryption
95:ac:eb:c4:97:c0:28:ea:fc:73:cd:2d:d4:e7:08:76:9d:21:
4a:8a:a1:84:3e:b5:b3:a6:50:43:b3:00:0f:f2:93:a1:64:f7:
05:66:a6:bf:31:8b:1b:fb:b4:7a:23:1a:b3:35:87:56:5e:af:
68:67:c2:e3:55:46:97:d2:5c:6e:f2:f6:cf:0f:63:72:7c:01:
5b:7c:aa:7c:b7:47:c8:05:7f:1c:cb:ef:09:a7:b4:eb:13:0d:
52:4f:03:77:85:05:c9:b5:a4:26:76:ab:a9:95:b2:fb:d0:65:
bf:97:4d:08:5e:1c:82:3e:f8:00:f1:e2:21:67:5e:0d:a3:74:
5e:58:f4:60:b8:f9:83:c5:f0:32:fa:61:c4:ff:3c:00:6a:8e:
a6:df:eb:bf:64:76:23:51:ab:f1:ac:91:f9:12:d9:24:07:19:
51:9f:35:fb:5c:a8:82:0f:20:76:0c:76:6c:c2:8d:da:1e:1d:
9a:8f:90:4b:9f:33:79:a9:f5:f0:d2:1f:a3:3f:98:8a:82:1c:
32:7f:8b:46:41:c2:fa:1c:f8:b5:9f:03:58:c2:44:bb:06:4b:
d9:01:ce:c4:dd:b4:ab:b6:77:c5:99:be:0c:a0:f2:bc:e9:24:
eb:b4:00:44:49:2a:46:95:f9:e6:04:e3:26:1e:25:b3:27:a6:
0d:15:01:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:40 2023 by rpki-client on console-fra.rpki-client.org