Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/TaLTAxznhDN7fOjTnw2okmUa52Q.roa
File: TaLTAxznhDN7fOjTnw2okmUa52Q.roa (raw, json)
Hash identifier: YEYTvsWWhegDFycCsk5V8Bxfe75gdjU8Q+uaRJYDitE=
Subject key identifier: 4D:A2:D3:03:1C:E7:84:33:7B:7C:E8:D3:9F:0D:A8:92:65:1A:E7:64
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01856D81FE63B4FBF4D8D5F99BDBC1689774
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/TaLTAxznhDN7fOjTnw2okmUa52Q.roa
Signing time: Sun 01 Jan 2023 13:25:13 +0000
ROA not before: Sun 01 Jan 2023 13:25:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199871
IP address blocks: 93.123.110.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:81:fe:63:b4:fb:f4:d8:d5:f9:9b:db:c1:68:97:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 1 13:25:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4da2d3031ce784337b7ce8d39f0da892651ae764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:07:ab:ed:75:b1:d5:d1:37:ac:cc:21:36:c0:
f6:fe:54:16:83:b1:1d:25:8b:7d:91:ca:c2:fa:42:
44:b8:6e:e4:fd:5e:da:69:d6:4d:cc:de:4e:cd:dc:
5c:4d:9d:bc:90:2b:b4:08:07:e8:2b:e5:8b:5f:28:
48:e0:75:1e:7e:f8:6e:1f:24:3f:aa:f7:ef:7c:21:
71:73:b1:19:90:84:33:d0:68:7d:51:67:75:72:75:
38:50:5a:7f:8c:21:9e:49:f0:79:d0:91:31:b1:e4:
15:40:18:d3:7e:d7:12:2b:bd:9c:db:35:f9:b4:f4:
0a:22:38:b8:31:e9:2b:fe:04:78:f4:c6:20:89:6f:
98:36:d3:5b:99:6a:e0:5b:60:4c:06:12:1d:48:c9:
0a:ea:47:13:20:67:42:0b:b6:e1:f2:28:d6:b0:33:
be:1d:86:3a:e4:8a:b3:fa:c5:bc:36:7b:56:4c:d3:
35:61:a1:85:99:1f:3b:3f:98:e3:05:a4:00:70:dd:
07:01:8d:3a:6b:df:1f:69:3d:be:af:c4:c3:3b:c7:
f4:3c:38:31:6c:d6:0f:50:6f:4b:e9:29:6e:5a:44:
b2:38:cf:85:a2:cd:43:dc:7e:39:ef:a7:55:68:53:
2e:e5:01:71:a7:59:f8:4d:ea:e1:c0:a6:a2:a9:65:
74:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:A2:D3:03:1C:E7:84:33:7B:7C:E8:D3:9F:0D:A8:92:65:1A:E7:64
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/TaLTAxznhDN7fOjTnw2okmUa52Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.123.110.0/24
Signature Algorithm: sha256WithRSAEncryption
84:70:d4:11:3d:2e:7c:54:70:51:81:4f:fa:49:c0:f1:67:ee:
73:60:f7:65:b9:34:70:0e:28:e9:c7:c2:c4:05:04:8b:f9:3e:
78:08:77:0a:1f:61:79:4d:e9:ff:f3:e1:4b:22:08:47:2a:3d:
65:5c:48:63:74:3c:ff:20:b3:65:38:3b:84:ae:e1:1c:24:6c:
02:14:2a:1a:3a:78:a5:9a:7c:19:04:b7:a4:d8:2a:43:ec:f9:
14:64:86:9a:c4:ee:8c:58:a5:2e:95:09:8b:23:45:15:fe:63:
f0:84:ec:57:63:29:e9:28:60:92:33:38:79:1a:79:a6:89:45:
ea:95:1c:cc:d1:66:26:92:5e:3d:df:b9:91:64:d1:13:20:2e:
73:76:75:3b:fb:3a:99:5e:15:be:a7:79:e1:e0:93:d0:30:3f:
00:67:51:d3:71:c9:44:9d:1e:1f:df:da:f2:56:29:ef:5c:0f:
18:a8:52:f8:ea:66:8c:94:7f:3a:6a:22:aa:76:de:17:7a:d8:
97:1b:a1:3a:22:40:07:15:17:20:cc:04:74:0d:02:98:da:b5:
c7:bd:5d:f2:ca:6a:b7:63:af:64:40:6c:06:9e:37:c0:50:a3:
12:98:e8:8d:6d:f2:ca:35:e4:11:09:24:b7:ad:70:53:42:0a:
95:03:0c:f1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtgf5jtPv02NX5m9vBaJd0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjMwMTAxMTMyNTEzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZGEyZDMwMzFjZTc4NDMzN2I3Y2U4ZDM5ZjBkYTg5MjY1MWFlNzY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwer7XWx1dE3rMwhNsD2/lQWg7Ed
JYt9kcrC+kJEuG7k/V7aadZNzN5OzdxcTZ28kCu0CAfoK+WLXyhI4HUefvhuHyQ/
qvfvfCFxc7EZkIQz0Gh9UWd1cnU4UFp/jCGeSfB50JExseQVQBjTftcSK72c2zX5
tPQKIji4Mekr/gR49MYgiW+YNtNbmWrgW2BMBhIdSMkK6kcTIGdCC7bh8ijWsDO+
HYY65Iqz+sW8NntWTNM1YaGFmR87P5jjBaQAcN0HAY06a98faT2+r8TDO8f0PDgx
bNYPUG9L6SluWkSyOM+Fos1D3H4576dVaFMu5QFxp1n4TerhwKaiqWV0nwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFE2i0wMc54Qze3zo058NqJJlGudkMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvVGFMVEF4em5oRE43Zk9qVG53Mm9rbVVhNTJRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXXtuMA0G
CSqGSIb3DQEBCwUAA4IBAQCEcNQRPS58VHBRgU/6ScDxZ+5zYPdluTRwDijpx8LE
BQSL+T54CHcKH2F5Ten/8+FLIghHKj1lXEhjdDz/ILNlODuEruEcJGwCFCoaOnil
mnwZBLek2CpD7PkUZIaaxO6MWKUulQmLI0UV/mPwhOxXYynpKGCSMzh5GnmmiUXq
lRzM0WYmkl4937mRZNETIC5zdnU7+zqZXhW+p3nh4JPQMD8AZ1HTcclEnR4f39ry
VinvXA8YqFL46maMlH86aiKqdt4XetiXG6E6IkAHFRcgzAR0DQKY2rXHvV3yymq3
Y69kQGwGnjfAUKMSmOiNbfLKNeQRCSS3rXBTQgqVAwzx
-----END CERTIFICATE-----
Generated at Tue Jan 2 08:59:11 2024 by rpki-client on console-ams.rpki-client.org