Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/74KV3zgGsBcRfOZli4CSNgitMeg.roa
File: 74KV3zgGsBcRfOZli4CSNgitMeg.roa (raw, json)
Hash identifier: lX9X83RVsnpqA7/pvj23jZhKWKxzRwQ7N9DN22CmZzU=
Subject key identifier: EF:82:95:DF:38:06:B0:17:11:7C:E6:65:8B:80:92:36:08:AD:31:E8
Certificate issuer: /CN=0203616ca2f9aefa70c3914cce90dce09706cfbb
Certificate serial: 01856E0B173E343396D42630120C1EA6A7BB
Authority key identifier: 02:03:61:6C:A2:F9:AE:FA:70:C3:91:4C:CE:90:DC:E0:97:06:CF:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AgNhbKL5rvpww5FMzpDc4JcGz7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/74KV3zgGsBcRfOZli4CSNgitMeg.roa
Signing time: Sun 01 Jan 2023 15:54:58 +0000
ROA not before: Sun 01 Jan 2023 15:54:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25885
IP address blocks: 185.249.164.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:0b:17:3e:34:33:96:d4:26:30:12:0c:1e:a6:a7:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0203616ca2f9aefa70c3914cce90dce09706cfbb
Validity
Not Before: Jan 1 15:54:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ef8295df3806b017117ce6658b80923608ad31e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a4:99:59:71:ce:0e:e7:5c:b2:8d:46:65:83:
12:8b:4b:03:b8:e5:34:9c:41:78:66:fe:1d:9a:0f:
ef:cd:33:90:b3:17:20:93:f9:4c:23:9d:60:52:d5:
20:b8:fb:9f:89:b2:cf:8f:a4:bd:4c:ea:7f:73:a2:
6f:c9:be:75:4d:38:86:21:2b:f3:f7:eb:46:9b:09:
2c:3b:c7:0c:69:db:d2:e5:1e:17:92:35:93:f6:1c:
1f:09:ff:dd:2f:bf:75:13:ed:10:85:f1:b8:f2:af:
ed:57:48:10:af:ef:9d:45:de:2c:2f:11:b1:2b:32:
d9:31:9b:b7:a9:02:a6:7a:05:76:73:48:43:74:ee:
a5:cb:11:d4:4e:0c:46:07:3e:e9:46:be:29:a3:65:
40:84:e0:4f:cc:dd:6e:13:cb:4e:40:47:8d:f0:6c:
dd:e5:14:ba:75:b8:57:de:ea:46:df:7b:98:59:90:
aa:85:64:5e:25:ff:2a:cb:4f:64:16:80:fd:2f:dd:
4f:a4:09:08:c4:5d:b7:c7:92:80:e3:6f:38:e7:d1:
a3:e4:23:e6:0c:48:3a:a7:e0:7e:06:f8:d9:b1:aa:
82:b0:88:d8:01:fa:8f:52:e1:02:73:26:29:50:f7:
11:1d:59:98:21:39:ce:23:03:d1:0a:11:0c:48:5a:
dd:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:82:95:DF:38:06:B0:17:11:7C:E6:65:8B:80:92:36:08:AD:31:E8
X509v3 Authority Key Identifier:
keyid:02:03:61:6C:A2:F9:AE:FA:70:C3:91:4C:CE:90:DC:E0:97:06:CF:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AgNhbKL5rvpww5FMzpDc4JcGz7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/74KV3zgGsBcRfOZli4CSNgitMeg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/AgNhbKL5rvpww5FMzpDc4JcGz7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.249.164.0/22
Signature Algorithm: sha256WithRSAEncryption
61:24:17:bc:81:27:05:76:b5:0d:72:f2:21:20:14:89:74:5d:
1d:ab:bc:cc:19:8f:76:af:79:53:fd:b8:b0:20:5f:4e:0c:f9:
5e:c9:b8:ac:3e:c8:27:f6:27:95:0b:60:30:cb:6c:19:94:28:
87:8b:71:b9:9e:87:b1:db:58:b4:8b:31:a2:19:d2:21:f8:62:
53:de:20:83:47:3f:a7:dc:fc:a3:ba:59:7c:ab:a9:0a:b1:93:
b5:ea:c5:67:06:ca:7b:54:0a:92:a9:36:1f:a8:c7:dc:51:4e:
6b:b7:e9:ea:e3:d0:69:13:b2:97:a0:83:5d:4d:6e:be:0c:62:
90:fd:03:bd:cf:d9:3e:93:3b:19:b6:a8:75:03:4d:b7:03:a4:
df:11:fd:4a:3d:e0:d7:9a:35:62:29:2a:5b:50:34:0d:53:40:
1c:f3:45:d5:af:b5:9b:9c:f3:29:21:f0:de:55:78:11:3d:89:
37:8e:2a:d7:3b:7a:0f:dc:73:63:fa:62:ed:af:b3:a1:48:b4:
d2:53:79:86:2c:90:54:7e:9b:3f:ce:7a:c9:0d:2a:a4:58:62:
d4:27:c9:65:0b:44:39:48:c1:29:e0:14:a4:eb:0c:73:0a:12:
49:45:72:81:39:50:66:c6:ed:07:37:8d:6d:29:c9:33:e7:5f:
e4:9e:a5:7c
-----BEGIN CERTIFICATE-----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Generated at Mon Aug 7 17:52:42 2023 by rpki-client on console-fra.rpki-client.org