Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/TzkkrZyj3TxW8tDpwrpGHoGBuZ0.roa
File: TzkkrZyj3TxW8tDpwrpGHoGBuZ0.roa (raw, json)
Hash identifier: b44XgRmJzWAbh7QZiVRbRsHFJVfedFPC8fVcH5z1HFE=
Subject key identifier: 4F:39:24:AD:9C:A3:DD:3C:56:F2:D0:E9:C2:BA:46:1E:81:81:B9:9D
Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial: 018AB79C2187CFA8E91755C0171E31BCE9F3
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/TzkkrZyj3TxW8tDpwrpGHoGBuZ0.roa
Signing time: Thu 21 Sep 2023 11:59:37 +0000
ROA not before: Thu 21 Sep 2023 11:59:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206264
IP address blocks: 185.126.181.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b7:9c:21:87:cf:a8:e9:17:55:c0:17:1e:31:bc:e9:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
Validity
Not Before: Sep 21 11:59:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4f3924ad9ca3dd3c56f2d0e9c2ba461e8181b99d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ec:34:e8:7d:07:42:ff:df:21:9b:26:d2:cc:
b7:64:44:7e:a7:9c:b7:40:af:17:00:17:56:da:70:
91:6c:63:19:3c:39:ad:5e:c6:18:da:b6:de:5b:da:
45:ff:3c:70:f7:67:50:3a:77:8f:6e:2b:9f:57:eb:
e0:52:29:0b:79:d1:5c:8f:b1:fd:dd:31:28:be:ad:
61:d2:72:03:d7:e5:78:d7:ff:2d:fa:cb:19:f2:06:
02:32:9c:05:7c:61:21:2c:f6:e3:06:3f:43:5f:ed:
c9:79:18:ff:19:02:e4:b4:17:43:75:dd:fd:69:b6:
94:76:09:ff:61:ac:e1:33:ce:6e:1a:c6:cc:39:a1:
b4:8e:0f:e6:f8:62:a8:18:c1:84:e9:00:fe:10:be:
41:7e:8c:d3:41:62:20:01:31:fd:b1:49:e5:e7:1a:
5f:f0:54:a4:0c:cc:0d:2f:7f:77:b6:e1:e5:20:43:
5e:5e:6f:6a:1c:55:a5:19:b7:b1:75:0d:e6:64:ed:
25:6b:3f:49:7b:dc:c6:7e:32:64:3c:11:58:d5:93:
d4:20:8a:3f:86:61:8d:f5:d2:d3:89:03:84:cd:f2:
c3:01:11:ba:f8:1a:67:7b:25:23:f0:cd:af:e3:1e:
f9:5e:4f:2e:3d:e3:d3:11:42:35:0f:67:4f:75:a5:
42:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:39:24:AD:9C:A3:DD:3C:56:F2:D0:E9:C2:BA:46:1E:81:81:B9:9D
X509v3 Authority Key Identifier:
keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/TzkkrZyj3TxW8tDpwrpGHoGBuZ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.181.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:99:87:0c:db:8f:94:7f:48:10:43:25:58:6a:70:61:98:03:
5a:06:0d:62:c8:e2:18:63:4e:45:35:21:2d:01:46:af:c9:ed:
32:74:c2:c7:5c:42:8e:21:e6:4a:64:fe:e5:73:78:65:0c:1c:
86:6d:fe:53:db:a7:71:5c:36:20:47:56:01:e0:3a:3d:4f:e0:
bd:1a:c2:5c:9b:90:a0:dd:87:f6:c5:2f:3f:be:ae:6e:79:95:
bb:86:92:ee:92:b6:49:fd:eb:39:ae:3c:02:27:f1:92:5f:b6:
2e:a4:df:8a:c9:f8:c6:9c:98:64:53:78:aa:77:2a:55:ab:e0:
41:85:d3:12:f4:0c:a6:2e:d9:9f:05:7d:d0:bd:39:16:1a:d5:
05:a4:4e:86:71:4f:30:1e:73:d1:e0:f2:19:8a:68:5c:5c:0c:
46:ea:37:eb:bd:86:91:aa:b1:ea:65:4c:98:c4:41:4c:0c:a9:
81:32:b3:c8:31:6b:16:92:ce:5e:cb:e9:46:c8:83:74:52:8f:
fa:3d:7d:86:02:97:0b:60:4c:99:85:7f:c2:bb:44:63:9d:52:
a8:bb:87:06:29:de:b1:a3:18:9c:d7:56:0e:03:cc:98:79:6b:
90:2b:dc:6d:5b:9f:37:be:b2:10:12:c2:52:3f:6d:86:ab:c3:
61:a0:77:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 23 11:55:10 2023 by rpki-client on console-ams.rpki-client.org