Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/4bc2af-4f6d-45bd-aa10-e8702ea59016/1/ejEqz2mgZt9gRT6ND0261DBYrls.roa
File: ejEqz2mgZt9gRT6ND0261DBYrls.roa (raw, json)
Hash identifier: ue0vVn8gobhenw2tK33q40HcdbCHsPEqdCBvmkzWtiE=
Subject key identifier: 7A:31:2A:CF:69:A0:66:DF:60:45:3E:8D:0F:4D:BA:D4:30:58:AE:5B
Certificate issuer: /CN=f3752c10f1b0d07b5f48e579dfd14e372713fb47
Certificate serial: 0186D4C608240F15C01303BC23FDB536796E
Authority key identifier: F3:75:2C:10:F1:B0:D0:7B:5F:48:E5:79:DF:D1:4E:37:27:13:FB:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/83UsEPGw0HtfSOV539FONycT-0c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/4bc2af-4f6d-45bd-aa10-e8702ea59016/1/ejEqz2mgZt9gRT6ND0261DBYrls.roa
Signing time: Sun 12 Mar 2023 07:43:13 +0000
ROA not before: Sun 12 Mar 2023 07:43:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206692
IP address blocks: 185.178.220.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:d4:c6:08:24:0f:15:c0:13:03:bc:23:fd:b5:36:79:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3752c10f1b0d07b5f48e579dfd14e372713fb47
Validity
Not Before: Mar 12 07:43:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7a312acf69a066df60453e8d0f4dbad43058ae5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:ad:2d:1e:c6:44:3e:49:b9:b4:c4:ea:13:aa:
0d:24:75:65:e1:ea:a0:99:b9:1a:59:b1:d4:1d:ef:
12:d1:1f:ad:48:e4:5c:27:f2:39:56:32:af:ed:42:
22:ff:3f:e3:82:52:5d:2f:1c:ef:b7:e5:f5:13:e6:
9d:29:f5:58:39:c9:91:a4:08:6e:4b:ea:5f:0a:1c:
eb:94:3c:78:a1:c0:ad:3d:2b:73:43:a6:93:33:e3:
16:d3:8c:8d:e7:44:d5:4f:6d:36:23:3a:b5:af:6b:
30:6d:1e:0d:17:bc:fa:50:68:03:2e:dd:dd:c3:6f:
94:d7:df:71:5f:e6:f9:4d:7d:a0:83:57:0d:3a:3f:
6e:a9:a5:0b:e9:ef:92:28:87:81:e7:26:24:e3:ed:
56:1b:b0:c7:e8:83:a5:95:db:ba:e8:de:69:26:b2:
fa:3c:e4:e5:4f:bd:d7:7a:bb:3a:0d:68:67:19:63:
fa:6e:e9:ef:4a:cf:32:b9:30:ca:87:8c:d3:b3:df:
8b:13:38:3d:d0:95:f2:c3:e1:63:ff:cb:e6:c7:09:
0b:31:20:b7:a5:c8:e5:31:8e:92:df:8e:55:93:db:
3a:e2:ff:07:56:81:c7:30:c5:35:2e:1d:67:59:44:
4f:67:b0:81:00:3c:9d:76:81:45:46:d1:e6:d7:5e:
92:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:31:2A:CF:69:A0:66:DF:60:45:3E:8D:0F:4D:BA:D4:30:58:AE:5B
X509v3 Authority Key Identifier:
keyid:F3:75:2C:10:F1:B0:D0:7B:5F:48:E5:79:DF:D1:4E:37:27:13:FB:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/83UsEPGw0HtfSOV539FONycT-0c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4bc2af-4f6d-45bd-aa10-e8702ea59016/1/ejEqz2mgZt9gRT6ND0261DBYrls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4bc2af-4f6d-45bd-aa10-e8702ea59016/1/83UsEPGw0HtfSOV539FONycT-0c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.178.220.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:d2:8a:29:35:39:1f:27:9b:68:12:93:ce:89:ec:da:35:25:
58:44:c2:c5:78:fe:66:e9:fa:e5:62:6f:88:34:ea:71:a7:fe:
cb:39:55:30:f9:72:32:bd:46:d5:bd:f8:71:1b:ed:3a:f7:e5:
17:bc:21:b9:70:df:6f:91:ed:47:eb:ab:f3:8a:f9:a6:b6:66:
01:49:ff:9f:35:ef:41:9f:7a:8d:08:2e:fe:22:54:18:dd:3a:
30:44:25:db:3d:2a:85:81:73:6e:40:17:5b:50:bf:ce:cb:87:
70:6d:aa:7b:dc:8c:22:a2:f7:35:85:85:e8:e4:86:83:97:ac:
8f:a4:87:fa:7d:93:d5:94:ed:23:3c:fa:c5:b3:06:d0:c6:1d:
73:67:42:65:37:cc:b5:3b:99:62:12:87:95:4a:f4:53:87:60:
c9:4d:55:a1:e0:e9:49:3a:f3:80:c8:5e:c5:ea:2a:15:e9:23:
05:b9:ec:39:7c:38:e8:4b:ca:cb:5a:41:fa:0e:b0:b9:05:b2:
e7:df:f5:c4:f6:f4:2e:1c:e9:49:7c:c3:46:26:4f:56:b7:97:
3f:73:03:12:82:9b:9b:44:24:d8:9a:11:70:86:7a:ef:61:55:
7d:6e:6b:4b:24:52:dd:08:54:b5:f3:f1:e4:ef:e7:8e:13:1e:
5d:59:2c:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:26:05 2024 by rpki-client on console-fra.rpki-client.org