Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/Tp_vKJ4TfB_HTKKU_m_1vjeIDho.roa
File: Tp_vKJ4TfB_HTKKU_m_1vjeIDho.roa (raw, json)
Hash identifier: rpXOXGopl/LKO2bOtdMA7TrYwZHzu/FUSHL2kXfoZlo=
Subject key identifier: 4E:9F:EF:28:9E:13:7C:1F:C7:4C:A2:94:FE:6F:F5:BE:37:88:0E:1A
Certificate issuer: /CN=706d3abbb478b74ef2adef9bb7c4336e34111d51
Certificate serial: 0189D4B5E712B174FB2E39DB98FEFD92B190
Authority key identifier: 70:6D:3A:BB:B4:78:B7:4E:F2:AD:EF:9B:B7:C4:33:6E:34:11:1D:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/Tp_vKJ4TfB_HTKKU_m_1vjeIDho.roa
Signing time: Tue 08 Aug 2023 10:33:58 +0000
ROA not before: Tue 08 Aug 2023 10:33:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7393
IP address blocks: 185.230.246.0/24 maxlen: 24
194.150.79.0/24 maxlen: 24
213.173.38.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d4:b5:e7:12:b1:74:fb:2e:39:db:98:fe:fd:92:b1:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=706d3abbb478b74ef2adef9bb7c4336e34111d51
Validity
Not Before: Aug 8 10:33:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4e9fef289e137c1fc74ca294fe6ff5be37880e1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:03:be:66:ed:2c:e4:ee:69:d4:2a:7d:8a:ed:
2b:f8:89:c3:2b:1f:97:85:9b:dd:e4:33:ec:03:aa:
aa:4a:a0:5b:5c:87:9a:76:cc:84:27:49:2f:3a:5a:
d5:98:8a:c3:9e:4e:69:33:93:08:46:f3:dd:31:d9:
ea:78:2f:21:d3:63:85:48:ba:6f:5e:1b:ab:14:30:
8f:75:42:0f:66:39:7d:e2:97:83:3e:ce:18:d3:11:
5c:e4:e6:5d:b4:6c:6a:68:ff:9f:00:b8:38:b5:9c:
a4:bf:37:50:bb:2f:4e:28:cf:1f:d2:be:a4:83:fb:
dd:2e:38:78:4f:79:fb:8c:d3:99:ed:dd:a9:26:c6:
47:77:06:ea:b1:08:17:1f:8e:7f:74:ff:2f:24:23:
25:57:8d:a5:58:a2:4e:88:3c:9e:ec:5b:3c:55:63:
72:21:b2:cd:0e:13:e8:2e:24:b5:b3:eb:43:c6:4d:
b6:06:59:8a:eb:83:2e:eb:4d:6a:8b:0a:20:aa:34:
fd:73:dd:af:0d:6f:69:a4:5d:e8:3b:7e:1a:a6:c2:
0e:93:b7:c1:f2:34:39:43:2b:e1:b3:57:97:af:90:
68:54:ee:ab:4b:eb:9d:0e:f6:20:8c:c5:80:9f:26:
25:0c:72:93:bd:3e:e0:82:70:0a:dc:c5:90:b1:b9:
95:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:9F:EF:28:9E:13:7C:1F:C7:4C:A2:94:FE:6F:F5:BE:37:88:0E:1A
X509v3 Authority Key Identifier:
keyid:70:6D:3A:BB:B4:78:B7:4E:F2:AD:EF:9B:B7:C4:33:6E:34:11:1D:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/Tp_vKJ4TfB_HTKKU_m_1vjeIDho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.230.246.0/24
194.150.79.0/24
213.173.38.0/24
Signature Algorithm: sha256WithRSAEncryption
56:a2:0d:18:04:bd:cd:a5:f0:1d:f4:1d:d5:0e:00:d8:b7:c0:
8c:f8:d5:dd:cb:20:64:e6:59:6d:24:68:36:54:eb:24:ea:03:
45:80:3a:43:5e:ad:63:3f:b8:b0:42:43:ad:c2:a9:53:06:16:
40:9e:29:2a:7b:a0:97:74:b9:fe:bf:ed:9b:8e:f3:73:e6:1a:
6a:17:e7:90:54:1a:c6:ae:a7:df:fa:94:07:9a:99:dd:10:96:
c7:cc:27:11:15:bf:ed:d9:87:93:ca:83:7b:b5:20:cc:a1:b4:
d8:c7:72:d9:9a:04:35:08:5f:2f:32:06:21:5a:ae:5d:cf:d5:
f2:db:bc:a8:45:f4:1f:d7:da:3a:4c:25:ea:d9:59:cb:7e:23:
60:cb:f5:45:b4:f8:cb:7e:0a:18:68:e4:27:dc:59:a8:53:7a:
6a:28:fb:35:21:bc:02:fd:88:35:82:d6:55:6d:bb:d1:57:b9:
c8:7f:f1:c2:c6:e0:ef:5b:76:bf:92:fa:27:51:45:af:a4:1e:
2d:f0:f5:78:32:2c:bd:1c:4a:ad:80:79:2e:44:77:ee:cf:47:
46:3e:07:55:c6:32:3d:98:d2:2d:50:ff:2c:38:02:62:de:c6:
6c:c4:2e:b1:55:5c:ff:4e:65:38:c8:05:11:f6:e9:0a:83:45:
48:69:86:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 5 16:33:23 2023 by rpki-client on console-fra.rpki-client.org