Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/tcC7zapPINZk6xaoQ8_YLW_WULY.roa
File: tcC7zapPINZk6xaoQ8_YLW_WULY.roa (raw, json)
Hash identifier: soTNQyfE098OxWJMKNtbxcN7mWW5lNyvYZ2QnZGgC0c=
Subject key identifier: B5:C0:BB:CD:AA:4F:20:D6:64:EB:16:A8:43:CF:D8:2D:6F:D6:50:B6
Certificate issuer: /CN=6d3006dcd289c47f9f58e128eb29757239144bb6
Certificate serial: 01856E01B551E107E5CBABCFB604C94EEE0A
Authority key identifier: 6D:30:06:DC:D2:89:C4:7F:9F:58:E1:28:EB:29:75:72:39:14:4B:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/tcC7zapPINZk6xaoQ8_YLW_WULY.roa
Signing time: Sun 01 Jan 2023 15:44:43 +0000
ROA not before: Sun 01 Jan 2023 15:44:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204778
IP address blocks: 185.120.141.0/24 maxlen: 24
2a13:2180::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 13 Dec 2023 10:27:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:01:b5:51:e1:07:e5:cb:ab:cf:b6:04:c9:4e:ee:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d3006dcd289c47f9f58e128eb29757239144bb6
Validity
Not Before: Jan 1 15:44:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b5c0bbcdaa4f20d664eb16a843cfd82d6fd650b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d1:89:eb:48:55:9a:1a:69:c9:f8:c6:88:fa:
54:f1:96:94:83:97:c9:69:d0:23:e2:3a:a3:41:c5:
bd:39:c3:d0:94:24:01:fc:8d:a5:0d:b7:8f:1a:cf:
5a:57:7f:55:cf:e8:6c:a2:96:54:30:6c:e2:18:6f:
d5:8a:c9:7f:9f:bf:21:62:32:0c:db:39:4a:4a:a7:
95:f1:a3:1c:53:bd:30:35:b3:a1:27:70:a2:39:c2:
f6:dc:56:1f:61:14:f5:9f:1e:49:c6:4a:c3:99:a4:
d1:67:a9:32:e7:c3:b5:aa:b3:a4:19:20:9f:33:bf:
00:01:8b:2a:ca:c0:63:dd:58:1d:4a:4d:ec:9b:73:
92:e2:4c:5e:4b:ae:58:78:b7:a3:8d:c9:8a:55:8f:
1b:64:bd:ba:db:f8:03:2e:c6:53:96:d9:19:80:b2:
2a:e4:b7:c0:c6:0a:e9:d0:49:ed:db:cf:1a:bb:72:
a8:aa:5e:d9:07:36:47:5d:e6:e2:87:00:38:1a:dc:
b5:35:b9:f6:47:84:a9:49:79:a9:83:05:02:1c:f7:
a8:3a:f7:27:d1:93:2b:5c:a3:99:40:03:09:ae:22:
4d:cc:d2:c3:94:b3:9f:0e:28:33:ac:d0:7e:0b:95:
70:5f:84:60:13:b3:ca:d0:cc:ad:4b:b1:77:b7:ea:
fd:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:C0:BB:CD:AA:4F:20:D6:64:EB:16:A8:43:CF:D8:2D:6F:D6:50:B6
X509v3 Authority Key Identifier:
keyid:6D:30:06:DC:D2:89:C4:7F:9F:58:E1:28:EB:29:75:72:39:14:4B:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/tcC7zapPINZk6xaoQ8_YLW_WULY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.120.141.0/24
IPv6:
2a13:2180::/48
Signature Algorithm: sha256WithRSAEncryption
46:5a:e6:0e:f0:ec:f4:15:74:70:ad:59:0c:01:02:77:bc:f3:
8b:49:6e:9f:84:dc:55:9c:fc:ef:db:3f:06:c6:5b:b8:a4:8d:
5d:37:43:5c:7a:91:29:bc:f1:d0:95:bf:b1:54:01:4a:c6:60:
3c:69:fb:76:0a:2a:3f:b9:fd:00:e6:e5:cf:5f:ba:e0:84:e6:
0b:bb:98:ce:80:34:b5:25:5e:42:e7:8d:b8:48:ab:68:50:f6:
fe:c8:9d:3b:c3:6c:61:9e:46:54:65:97:64:c9:09:98:ba:a3:
fb:09:0a:be:9f:9e:bc:b2:1e:c4:fd:0b:18:e0:0e:fb:0e:fe:
52:ce:bc:ec:2b:4a:93:ef:de:54:f2:2f:40:58:e4:7a:54:47:
04:8b:26:9e:e6:19:6b:55:1d:f3:c9:bf:97:02:f1:04:45:76:
54:f2:94:96:9b:6e:6d:cc:a4:02:be:f8:bc:1b:c3:cf:50:ae:
12:c1:0c:f6:3b:2c:4f:06:c1:56:bf:a9:67:06:af:c2:5f:b7:
53:f1:11:d7:bf:e0:f3:9b:5d:00:d2:73:68:d1:0f:03:c3:e8:
1d:e8:23:a8:1e:bc:35:34:46:76:46:05:68:5b:bb:4f:62:f0:
91:c0:bc:d9:d7:7d:18:37:8a:f8:59:8d:14:ad:b7:38:54:5f:
cd:94:3a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:50 2024 by rpki-client on console-fra.rpki-client.org