Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/EdaNNo9bAGdvWG2UH9TzCawcAG4.roa
File: EdaNNo9bAGdvWG2UH9TzCawcAG4.roa (raw, json)
Hash identifier: djywvn2btaXc4jo9qJFNfBsc39hvnr1TmH2lgepaTSw=
Subject key identifier: 11:D6:8D:36:8F:5B:00:67:6F:58:6D:94:1F:D4:F3:09:AC:1C:00:6E
Certificate issuer: /CN=fc282a794b3f7ab4cd6feb6c5fd6b3d256afc461
Certificate serial: 01856F14DCEE723CBCC995AA741FF84D00A6
Authority key identifier: FC:28:2A:79:4B:3F:7A:B4:CD:6F:EB:6C:5F:D6:B3:D2:56:AF:C4:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_CgqeUs_erTNb-tsX9az0lavxGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/EdaNNo9bAGdvWG2UH9TzCawcAG4.roa
Signing time: Sun 01 Jan 2023 20:45:16 +0000
ROA not before: Sun 01 Jan 2023 20:45:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24961
IP address blocks: 185.144.236.0/22 maxlen: 22
2a07:4400::/29 maxlen: 29
Validation: Failed, certificate revoked on Sun 19 Mar 2023 11:21:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:14:dc:ee:72:3c:bc:c9:95:aa:74:1f:f8:4d:00:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc282a794b3f7ab4cd6feb6c5fd6b3d256afc461
Validity
Not Before: Jan 1 20:45:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=11d68d368f5b00676f586d941fd4f309ac1c006e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:17:e7:be:3f:1c:54:32:54:1a:c6:5e:5d:21:
4e:15:e7:2d:9f:70:0f:49:f1:88:5b:48:9f:ab:4d:
e3:21:96:d6:eb:73:73:2d:9a:95:7e:7f:d6:92:ad:
93:aa:a6:8d:21:75:98:67:40:e6:45:1a:66:06:e1:
e0:f0:a7:53:51:7f:be:17:49:f6:2c:ff:b8:6a:cd:
ca:d5:e7:66:1e:e8:7a:d8:8b:c9:11:92:18:58:22:
65:07:c7:a3:59:86:1b:18:3e:eb:a8:7e:f1:ca:7d:
a6:a5:3c:53:0b:4b:bd:54:73:0a:6a:7d:2b:01:ec:
00:a5:e5:20:4f:f2:e4:6f:6e:53:df:3f:f8:20:24:
ba:62:8e:be:e9:e7:8d:41:76:99:de:94:52:1c:c8:
2b:ce:ee:3b:b6:a0:ec:44:ba:e7:01:93:9d:7a:cd:
06:01:6c:38:33:1f:2f:88:21:de:e0:0a:86:04:25:
24:56:85:25:8c:f9:53:93:5a:88:47:08:88:f5:14:
ef:1e:64:18:c5:40:d2:32:f1:08:a6:1c:ce:99:12:
10:f9:82:d3:46:1b:67:86:23:90:50:40:e9:9d:eb:
9e:6e:8a:83:67:00:01:20:26:3d:85:15:8a:4d:00:
85:b1:08:fb:72:62:9f:0c:98:c5:17:94:40:aa:87:
e9:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:D6:8D:36:8F:5B:00:67:6F:58:6D:94:1F:D4:F3:09:AC:1C:00:6E
X509v3 Authority Key Identifier:
keyid:FC:28:2A:79:4B:3F:7A:B4:CD:6F:EB:6C:5F:D6:B3:D2:56:AF:C4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_CgqeUs_erTNb-tsX9az0lavxGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/EdaNNo9bAGdvWG2UH9TzCawcAG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e485e1-a65f-43d4-b572-d3326c59bcd2/1/_CgqeUs_erTNb-tsX9az0lavxGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.144.236.0/22
IPv6:
2a07:4400::/29
Signature Algorithm: sha256WithRSAEncryption
c7:2f:5c:cc:89:d7:22:1f:08:b6:cd:ee:29:11:f3:65:85:a1:
46:fa:4f:e3:5a:2d:2e:57:11:ea:b9:83:82:66:8e:22:c6:04:
f8:b9:c9:52:c0:6b:a6:1e:40:da:6e:81:d1:07:1d:0b:3e:39:
e0:7e:9a:45:b5:24:82:7f:9f:2b:98:4c:ef:e2:55:69:4d:f2:
59:df:86:c2:b5:2c:43:60:ce:95:d8:36:49:b2:18:16:55:eb:
80:c2:c8:75:72:97:bc:00:3e:9b:c8:78:02:ce:0d:64:a5:4b:
fb:95:0a:c2:6c:f5:22:2e:de:fa:80:a8:e5:33:aa:0a:43:d1:
52:d5:dc:5d:94:7c:14:06:f3:f1:37:59:45:91:e2:0e:96:2d:
49:19:3d:6a:11:7c:f2:31:38:57:7a:9a:7e:08:4d:46:d0:ae:
0c:22:4f:44:ed:70:a4:01:8f:ee:7b:ee:67:3a:8b:c9:0d:67:
7f:79:c3:7c:42:94:57:4e:e3:22:ae:59:a0:80:c1:41:98:6a:
28:0c:b3:4a:aa:86:37:53:d3:19:38:30:5e:af:dc:14:71:b2:
08:14:53:b8:cd:c7:9e:01:96:67:14:f4:e6:a9:f2:01:0a:96:
24:c2:61:c8:fe:21:61:17:77:d5:f6:ac:d4:c0:c8:9a:cb:81:
24:5e:57:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:37 2024 by rpki-client on console-fra.rpki-client.org