Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/RJTCBjyryAarl6dBuiZzyunBeGI.roa
File: RJTCBjyryAarl6dBuiZzyunBeGI.roa (raw, json)
Hash identifier: hINPEX4y46CcapmEWkAe2LUTdoTEK0o34my4nH+95I4=
Subject key identifier: 44:94:C2:06:3C:AB:C8:06:AB:97:A7:41:BA:26:73:CA:E9:C1:78:62
Certificate issuer: /CN=70de707d6c01006b2aca687eaab29cb4736b7668
Certificate serial: 01857246AFF07B07D0A8F61E77FF69E0ED6C
Authority key identifier: 70:DE:70:7D:6C:01:00:6B:2A:CA:68:7E:AA:B2:9C:B4:73:6B:76:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cN5wfWwBAGsqymh-qrKctHNrdmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/RJTCBjyryAarl6dBuiZzyunBeGI.roa
Signing time: Mon 02 Jan 2023 11:38:33 +0000
ROA not before: Mon 02 Jan 2023 11:38:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199906
IP address blocks: 185.54.136.0/23 maxlen: 23
2a01:6160:1996::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:30:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:af:f0:7b:07:d0:a8:f6:1e:77:ff:69:e0:ed:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70de707d6c01006b2aca687eaab29cb4736b7668
Validity
Not Before: Jan 2 11:38:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4494c2063cabc806ab97a741ba2673cae9c17862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:55:17:50:62:46:19:95:a9:46:da:81:53:2d:
c7:52:65:0c:92:d1:6e:70:48:36:ef:0d:a7:a7:38:
af:91:87:17:25:f6:c9:2b:31:64:94:46:ce:71:a1:
cb:df:fa:57:06:fe:3c:47:ca:65:32:a7:bd:bf:cc:
05:ff:6e:fa:05:77:5b:a6:1b:c3:10:e1:30:24:f9:
87:c6:ac:dd:a3:e4:49:ef:f0:88:34:c5:d0:c7:14:
08:77:99:5e:4d:6d:ff:94:69:5e:cd:2c:14:9b:c6:
0e:59:df:14:96:b0:1a:e5:9a:16:b0:2c:41:54:f5:
dd:39:e6:19:f2:33:31:9a:19:f1:5f:a4:6f:12:10:
c7:0b:39:d1:1a:c3:95:85:c2:2f:c0:94:07:6f:bf:
a1:e8:4d:c1:fb:7d:83:0b:60:2e:65:29:c1:0a:8c:
65:71:34:81:06:dc:65:f2:70:87:c2:ac:e2:af:7c:
93:54:24:f8:01:80:12:7f:76:31:0a:21:4f:23:bc:
68:49:2f:12:74:57:06:3c:46:ab:f6:72:39:24:7e:
e7:44:b7:de:a2:24:92:10:7f:98:99:6a:c0:46:83:
cd:3d:14:f1:61:df:37:24:56:a6:d8:59:5a:de:21:
c3:46:04:d7:d4:72:d4:5e:d6:f2:5a:e0:c1:f5:b2:
13:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:94:C2:06:3C:AB:C8:06:AB:97:A7:41:BA:26:73:CA:E9:C1:78:62
X509v3 Authority Key Identifier:
keyid:70:DE:70:7D:6C:01:00:6B:2A:CA:68:7E:AA:B2:9C:B4:73:6B:76:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cN5wfWwBAGsqymh-qrKctHNrdmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/RJTCBjyryAarl6dBuiZzyunBeGI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.54.136.0/23
IPv6:
2a01:6160:1996::/48
Signature Algorithm: sha256WithRSAEncryption
3b:df:3d:14:60:f5:aa:8a:8d:ef:ac:cc:98:62:8d:0d:5d:92:
8a:9f:31:46:42:c5:db:da:9b:46:32:42:7c:4a:17:d3:8d:fa:
32:dd:cf:5e:ca:d3:c3:12:10:54:44:86:28:cf:9b:dc:89:f7:
f4:29:80:40:54:3c:16:f6:0b:3d:a2:52:1c:34:5d:bd:9e:b9:
53:43:49:5f:a6:6b:7b:92:d8:26:75:69:79:b5:67:a5:1b:5a:
6c:72:f4:c4:1a:d9:be:a5:4d:b3:e3:c2:97:64:2c:c8:57:50:
4c:2b:20:ab:14:46:2f:89:bb:69:18:82:4e:6a:b7:92:06:d9:
a6:46:2c:63:b9:76:e2:36:e1:27:26:c4:e5:2d:77:9c:97:6b:
0c:9a:d6:7d:cd:fe:d7:33:af:70:d6:92:d6:48:10:b3:63:19:
5c:9a:a8:4c:50:3e:95:0d:97:0f:7f:63:a8:26:bf:57:4b:e4:
ff:b6:9f:65:bb:2b:2f:76:a8:74:f7:56:e4:72:11:60:b4:4b:
35:4d:14:11:4e:88:73:4f:cf:b5:94:df:56:22:8c:2d:f0:ff:
64:ad:85:6e:1d:8c:aa:a9:b6:81:1f:c9:60:60:aa:ec:06:ff:
cb:f2:c7:0c:ad:89:65:8c:3e:1f:4b:71:91:79:40:36:35:7d:
c9:49:38:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:17 2024 by rpki-client on console-ams.rpki-client.org