Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/tzPMcWPBkkmfQARjitbNMFm7RzI.roa
File: tzPMcWPBkkmfQARjitbNMFm7RzI.roa (raw, json)
Hash identifier: eajJhtMhL5LPe4tD0+gs7yNDpZlMKOFkxMu0gESAJZc=
Subject key identifier: B7:33:CC:71:63:C1:92:49:9F:40:04:63:8A:D6:CD:30:59:BB:47:32
Certificate issuer: /CN=bd19d4535c7e62b921e859e6557b821f278e716a
Certificate serial: 018570C2CC39E23F24FE691A06FFB0B20254
Authority key identifier: BD:19:D4:53:5C:7E:62:B9:21:E8:59:E6:55:7B:82:1F:27:8E:71:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/tzPMcWPBkkmfQARjitbNMFm7RzI.roa
Signing time: Mon 02 Jan 2023 04:34:52 +0000
ROA not before: Mon 02 Jan 2023 04:34:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60800
IP address blocks: 185.23.6.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 21 Aug 2023 09:32:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:c2:cc:39:e2:3f:24:fe:69:1a:06:ff:b0:b2:02:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd19d4535c7e62b921e859e6557b821f278e716a
Validity
Not Before: Jan 2 04:34:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b733cc7163c192499f4004638ad6cd3059bb4732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4a:7d:7e:38:90:12:f6:a4:31:12:25:32:04:
64:5b:c8:81:7d:d9:50:86:f1:ff:30:8d:32:d2:43:
e8:c4:28:1e:f2:c4:10:c7:69:fe:b0:22:40:9e:e9:
49:6a:49:a3:b6:95:f2:c7:25:df:a9:69:61:38:87:
7b:31:b4:bb:f6:70:a8:e4:e2:bb:cf:09:7c:d0:e8:
56:11:74:c5:d7:64:66:89:4a:f4:11:cf:0d:18:99:
43:06:26:b6:89:f4:21:9e:7d:91:ad:98:e8:61:93:
a1:a2:31:ad:ff:e3:76:cc:e6:bd:b4:06:8b:0a:ed:
5f:1b:24:48:31:9b:c0:8c:da:3c:af:d3:d9:aa:e7:
1b:00:b8:63:3f:48:10:35:81:31:b2:41:d2:6c:ba:
79:39:35:89:ae:3a:ba:dc:28:fb:58:d1:2a:e5:5b:
fb:29:f5:b7:c6:c8:67:8b:59:ad:02:80:83:54:b2:
36:82:b9:37:5a:3c:a1:42:4f:de:dd:f0:46:b3:1d:
cc:f3:db:b0:7c:25:cf:51:6b:2f:1f:44:50:53:5c:
9f:f9:16:f4:30:02:0b:93:0f:8a:c5:8a:63:9f:0b:
5e:0b:e8:41:d5:d9:56:12:e2:bd:b9:66:09:d4:af:
4d:c8:5f:ff:60:41:fc:02:1f:d0:0a:0b:5d:b6:ec:
ee:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:33:CC:71:63:C1:92:49:9F:40:04:63:8A:D6:CD:30:59:BB:47:32
X509v3 Authority Key Identifier:
keyid:BD:19:D4:53:5C:7E:62:B9:21:E8:59:E6:55:7B:82:1F:27:8E:71:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/tzPMcWPBkkmfQARjitbNMFm7RzI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.23.6.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:f5:6a:88:ca:85:f1:70:3f:c2:2c:c0:f4:2b:f1:64:7a:59:
61:6e:d5:b0:f2:8e:56:f7:ba:05:08:c9:d5:23:ff:ec:c4:8a:
66:e7:4e:ac:6f:fe:24:2c:73:e6:67:14:70:c2:46:5c:47:f5:
a1:b4:a5:22:38:78:31:08:7a:b4:bd:dc:d1:af:66:be:77:b2:
4e:1d:ca:cf:40:54:20:93:33:6e:95:66:04:8a:c9:a9:b6:5e:
bf:37:19:34:b2:12:26:31:0f:76:19:e6:d6:2c:ca:e6:90:97:
7f:e6:8a:f1:ea:4a:43:1d:ac:0a:2a:f5:fb:30:55:69:3a:2d:
5f:02:24:3e:78:ca:d4:2b:7d:84:a2:28:7f:f8:5d:cb:e6:3d:
9b:17:fb:34:5b:79:87:43:74:78:ef:a2:27:c6:5e:f3:e3:fd:
ac:9e:bc:f5:83:10:11:93:06:44:df:18:a9:72:50:0f:32:42:
63:4e:2e:18:00:fb:a4:1f:1b:07:a4:03:7b:40:54:8a:88:3c:
0b:36:2f:6a:5b:2b:a6:09:38:9d:26:63:fd:2b:63:21:ea:49:
8f:ed:c6:48:6b:15:9b:5c:c9:01:35:c7:b4:31:86:2d:a2:1f:
ec:4a:5b:12:ff:d0:2c:31:13:cb:4f:00:52:5e:99:d2:bc:d1:
f1:79:35:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:52 2024 by rpki-client on console-fra.rpki-client.org