Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/d50912-0b8d-43cc-8bee-dedc5a6964fc/1/KkFWGRqjD9MdWhim0AcCiH61xMU.roa
File: KkFWGRqjD9MdWhim0AcCiH61xMU.roa (raw, json)
Hash identifier: WmbQ/+TY1VMB5R/S0TYmbJUdbJPEXkYoQcMVlOUFPgk=
Subject key identifier: 2A:41:56:19:1A:A3:0F:D3:1D:5A:18:A6:D0:07:02:88:7E:B5:C4:C5
Certificate issuer: /CN=e618eff923e35bf83792353c4633ca2300f75b6c
Certificate serial: 0186CF87DCF0E3D253C26C45BF071E693823
Authority key identifier: E6:18:EF:F9:23:E3:5B:F8:37:92:35:3C:46:33:CA:23:00:F7:5B:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5hjv-SPjW_g3kjU8RjPKIwD3W2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/d50912-0b8d-43cc-8bee-dedc5a6964fc/1/KkFWGRqjD9MdWhim0AcCiH61xMU.roa
Signing time: Sat 11 Mar 2023 07:17:12 +0000
ROA not before: Sat 11 Mar 2023 07:17:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 399045
IP address blocks: 185.218.142.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:cf:87:dc:f0:e3:d2:53:c2:6c:45:bf:07:1e:69:38:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e618eff923e35bf83792353c4633ca2300f75b6c
Validity
Not Before: Mar 11 07:17:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2a4156191aa30fd31d5a18a6d00702887eb5c4c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:76:0b:61:fc:3d:74:07:db:da:83:c9:7c:3f:
73:cb:bd:fb:4f:0f:33:ce:3e:b0:4a:d5:aa:57:ff:
d1:6c:ce:38:bd:d3:89:84:ce:ac:c4:9d:43:c0:9f:
0e:98:aa:fd:99:44:53:3d:a9:22:8a:96:9a:a6:29:
70:99:0b:1a:de:26:23:25:a0:f0:c2:c4:be:7c:ea:
e3:d3:b8:0d:f1:71:1a:bd:df:e4:24:79:f2:f8:96:
f2:e4:31:4d:74:41:1e:02:7c:31:90:14:6b:2b:7f:
5f:48:25:b1:d0:08:34:67:d0:39:a0:b5:6f:2a:87:
ee:ef:bf:c1:63:f7:3d:42:ce:c6:03:7f:92:85:20:
d4:8b:f1:da:a9:db:5b:0a:4b:61:69:69:e5:45:f2:
71:22:a8:be:5c:28:a0:e3:63:ab:0c:d0:91:ae:16:
62:bb:6b:ec:d1:70:4d:5a:2f:d3:62:e0:1b:25:f8:
48:fe:54:ee:c6:c2:8b:8b:0c:8d:ca:e7:56:56:47:
7f:dc:a6:ea:5b:7f:25:be:48:3a:80:7a:68:9e:2a:
b8:6a:a1:e3:62:e2:3c:e1:92:7b:e3:24:de:0f:d7:
56:41:46:f7:7c:f8:eb:e2:a0:82:1a:d8:7f:3b:f7:
81:bb:fb:a3:fe:cc:3f:00:71:79:ec:16:a8:bd:8c:
73:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:41:56:19:1A:A3:0F:D3:1D:5A:18:A6:D0:07:02:88:7E:B5:C4:C5
X509v3 Authority Key Identifier:
keyid:E6:18:EF:F9:23:E3:5B:F8:37:92:35:3C:46:33:CA:23:00:F7:5B:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hjv-SPjW_g3kjU8RjPKIwD3W2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d50912-0b8d-43cc-8bee-dedc5a6964fc/1/KkFWGRqjD9MdWhim0AcCiH61xMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d50912-0b8d-43cc-8bee-dedc5a6964fc/1/5hjv-SPjW_g3kjU8RjPKIwD3W2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.142.0/24
Signature Algorithm: sha256WithRSAEncryption
19:bd:ba:19:f4:6a:dd:1f:8d:1a:26:4b:16:86:ff:0a:80:9b:
ed:51:15:a1:8c:63:76:37:55:df:7b:9e:30:c9:94:b1:f0:bc:
c0:f6:fe:8b:76:80:f7:38:76:ac:48:f8:65:68:b3:f0:57:c9:
24:92:33:24:34:ea:cc:ba:fd:18:c3:12:39:c1:74:b2:b0:48:
59:4a:fb:8d:d2:4c:4a:97:74:f2:57:69:b1:b0:68:86:17:a1:
09:22:2f:35:19:d8:50:51:25:38:46:b4:af:a2:33:e6:eb:f7:
e1:08:a4:70:a5:4f:4a:e3:d4:bd:91:2b:4b:98:3d:b6:84:09:
a7:0a:96:f7:7e:75:e0:5c:6c:04:6b:fe:64:33:e5:b5:ed:6d:
78:4b:58:35:c8:43:7c:db:19:4a:a0:ec:a1:3d:b7:ce:0c:1b:
e0:4d:f6:a8:14:44:59:e6:54:37:1b:b5:61:54:99:7b:80:31:
9c:4c:ca:8b:1a:e6:e5:65:80:b1:ec:ab:d5:01:cc:e5:1c:cd:
f1:06:32:ba:6c:5b:e0:8e:27:f3:26:9a:c0:58:5b:cc:f3:63:
ac:08:d1:1f:34:ee:c4:09:b5:27:b9:19:49:02:23:24:86:79:
6e:cf:76:0f:88:b6:71:13:0e:02:1f:de:a7:30:3b:f7:99:63:
bb:6c:1f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:01 2023 by rpki-client on console-fra.rpki-client.org