Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/f8ab48-05d0-4f9c-8b0f-98c875ae35c9/1/51YmdTcnHq_YWT30kYEhb1OYMDQ.roa
File: 51YmdTcnHq_YWT30kYEhb1OYMDQ.roa (raw, json)
Hash identifier: KmxJnGZ42xaUXhC0lPffM9pBsPVgYCQVK9Y+6wvFSrU=
Subject key identifier: E7:56:26:75:37:27:1E:AF:D8:59:3D:F4:91:81:21:6F:53:98:30:34
Certificate issuer: /CN=22423839f210721627641ae6b6cceacee8d9067b
Certificate serial: 01867391253DA8DD37A91BE7ABB77077A549
Authority key identifier: 22:42:38:39:F2:10:72:16:27:64:1A:E6:B6:CC:EA:CE:E8:D9:06:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IkI4OfIQchYnZBrmtszqzujZBns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/f8ab48-05d0-4f9c-8b0f-98c875ae35c9/1/51YmdTcnHq_YWT30kYEhb1OYMDQ.roa
Signing time: Tue 21 Feb 2023 10:42:17 +0000
ROA not before: Tue 21 Feb 2023 10:42:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202179
IP address blocks: 185.50.180.0/22 maxlen: 22
185.50.181.0/24 maxlen: 24
185.50.182.0/24 maxlen: 24
185.50.183.0/24 maxlen: 24
2a01:a960::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:73:91:25:3d:a8:dd:37:a9:1b:e7:ab:b7:70:77:a5:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22423839f210721627641ae6b6cceacee8d9067b
Validity
Not Before: Feb 21 10:42:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e756267537271eafd8593df49181216f53983034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:19:73:78:dd:b6:3c:8b:f1:88:4b:b6:07:93:
30:66:26:2f:57:35:f0:0c:56:b2:8d:7f:02:59:27:
5f:ea:5a:0c:91:a3:94:a2:bc:81:b7:29:da:d7:01:
04:2f:20:3b:80:49:10:bd:7d:ae:9c:6e:ac:03:70:
6a:e7:85:7b:45:95:a6:ce:23:99:7c:0d:95:4b:c6:
37:c2:5e:49:ac:3b:fb:51:da:69:1f:15:81:89:6e:
60:fe:ed:1a:65:d8:e3:8c:72:b6:d8:61:51:17:2a:
c6:11:88:a1:45:3f:f1:1d:4c:f7:35:9c:d6:a2:18:
52:12:8f:90:d0:35:cb:a7:0c:bd:4d:ae:b1:78:e5:
be:a7:ce:b3:50:55:4b:33:6c:62:1f:27:0b:cb:2f:
be:71:a6:c0:59:3f:77:25:93:59:69:98:f4:79:4b:
a0:fa:16:6f:81:46:f1:8c:86:48:db:8f:30:51:2f:
26:aa:a1:5e:5b:2e:28:8e:d6:76:20:8e:3b:6c:e6:
2c:2a:76:6d:4c:ac:b5:b9:00:bc:83:b3:af:4b:e8:
0d:e8:ea:3b:15:67:94:4a:e5:28:1e:6c:02:1b:79:
f7:b4:5f:ff:ae:f7:85:50:1a:e2:fe:ce:c2:62:ea:
46:72:8b:18:37:c8:c7:9b:ce:00:db:44:3e:d7:ce:
f9:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:56:26:75:37:27:1E:AF:D8:59:3D:F4:91:81:21:6F:53:98:30:34
X509v3 Authority Key Identifier:
keyid:22:42:38:39:F2:10:72:16:27:64:1A:E6:B6:CC:EA:CE:E8:D9:06:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IkI4OfIQchYnZBrmtszqzujZBns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/f8ab48-05d0-4f9c-8b0f-98c875ae35c9/1/51YmdTcnHq_YWT30kYEhb1OYMDQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/f8ab48-05d0-4f9c-8b0f-98c875ae35c9/1/IkI4OfIQchYnZBrmtszqzujZBns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.50.180.0/22
IPv6:
2a01:a960::/32
Signature Algorithm: sha256WithRSAEncryption
09:c4:8c:ca:38:b1:ac:44:bb:47:b3:9a:8e:a3:e9:8d:2f:c3:
af:92:0e:c2:e9:6b:74:7d:6a:e4:f8:17:8b:2a:12:2f:d1:32:
00:6c:0f:b5:01:5a:73:5b:1c:6d:a4:c6:37:9d:c0:4d:49:20:
65:c5:43:74:58:ca:7d:00:aa:96:41:a4:2d:cd:05:7f:56:97:
5c:c7:c5:5e:84:06:3f:30:37:4d:0f:bf:a7:91:2c:51:55:50:
d6:b9:94:7b:b3:d0:0c:71:1f:12:65:60:4f:d9:cb:e4:6e:16:
91:e9:14:d8:03:fe:36:10:3a:c0:c7:25:a5:56:fb:b5:84:3b:
a4:27:46:a2:01:ea:99:bf:13:c4:a7:e6:89:1e:34:91:84:1a:
82:34:8c:34:28:3a:e4:8d:fb:b1:91:19:50:83:3a:fc:c4:14:
e9:d3:2f:d7:f6:d8:76:3a:0a:8a:4d:98:37:ad:b1:9a:fd:93:
7f:1b:ab:7b:39:61:59:9f:ae:b9:8b:76:ce:a4:08:d0:4e:fc:
8c:7b:1f:6a:4a:aa:6a:02:c3:92:a0:11:19:b1:6c:79:2c:d2:
d3:fc:11:92:d3:6b:d2:71:7e:0f:0d:22:b3:db:17:bd:1f:67:
e3:9c:22:13:06:dc:df:d3:92:a7:83:ca:b7:f0:61:9c:fb:2c:
44:4f:db:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:13 2023 by rpki-client on console-fra.rpki-client.org