Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/tl_RPL4_WkDfd49QD2CESMouKTg.roa
File: tl_RPL4_WkDfd49QD2CESMouKTg.roa (raw, json)
Hash identifier: Uv7sXMlMpQkmAtYmuUowS99o06XWeM0QqBGlqAir3E0=
Subject key identifier: B6:5F:D1:3C:BE:3F:5A:40:DF:77:8F:50:0F:60:84:48:CA:2E:29:38
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 01856FF965049F27BAD1CB9E626AC41F0280
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/tl_RPL4_WkDfd49QD2CESMouKTg.roa
Signing time: Mon 02 Jan 2023 00:54:53 +0000
ROA not before: Mon 02 Jan 2023 00:54:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12962
IP address blocks: 87.227.206.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:65:04:9f:27:ba:d1:cb:9e:62:6a:c4:1f:02:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 2 00:54:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b65fd13cbe3f5a40df778f500f608448ca2e2938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:c7:8d:ee:a7:99:f6:dd:ea:71:14:7b:73:d9:
f5:49:b7:de:00:1d:56:10:cd:2c:5e:1f:74:2b:e9:
33:88:53:9e:1f:dc:aa:1a:48:41:25:4d:57:f7:83:
b0:7d:a7:1f:e1:70:9f:a4:24:eb:12:1b:85:16:e9:
89:2d:fd:f9:bb:1d:c2:3b:7f:94:8f:8f:c7:76:98:
7c:87:fd:f8:f4:dd:49:59:51:41:ec:a8:83:fc:51:
21:75:89:76:88:6e:81:a4:dc:c0:0b:75:9a:0f:18:
5a:10:55:30:ce:4c:a0:14:f0:ff:2b:8f:ed:3d:a2:
05:2d:6d:e9:0d:8b:f5:04:45:00:5a:96:a2:88:4e:
31:ca:48:9c:65:4f:33:a3:96:cd:fb:96:02:bf:db:
48:40:46:a4:b4:63:e3:56:ad:30:6e:e8:9a:35:a1:
de:5d:10:a2:8c:18:bb:c5:15:05:ed:68:b9:fb:e1:
72:a1:01:95:77:8b:6b:c5:53:89:30:51:79:08:bf:
0c:8c:62:ae:03:2f:3e:d1:82:e2:7b:97:c4:b0:06:
06:b3:07:30:4a:ed:0a:ed:7b:f7:73:01:99:11:f8:
46:74:d4:3d:2c:81:fb:56:3e:db:dd:61:9b:70:dd:
db:f9:7a:40:62:1b:5d:1f:d0:94:20:1c:4f:24:7c:
51:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:5F:D1:3C:BE:3F:5A:40:DF:77:8F:50:0F:60:84:48:CA:2E:29:38
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/tl_RPL4_WkDfd49QD2CESMouKTg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.227.206.0/24
Signature Algorithm: sha256WithRSAEncryption
74:65:65:17:2b:f9:ff:0c:c1:44:a2:dd:4c:03:c2:9c:9e:6f:
32:ee:0d:4f:3b:f0:69:ab:cc:e2:93:0e:a2:8b:81:d2:91:2c:
46:06:58:6c:7f:55:47:41:88:cd:c7:f6:fa:6a:79:72:f1:4f:
fa:9e:d7:80:e5:a4:79:c4:4c:87:ba:61:00:9d:8d:7f:d5:45:
a1:ed:22:07:93:bf:26:64:eb:cd:e4:39:7e:b8:06:40:11:f9:
72:75:26:d7:57:05:4c:4b:47:21:ec:2d:64:40:87:5f:9e:95:
46:3f:c0:c6:1b:95:54:54:47:b8:02:0a:72:75:5e:2b:84:79:
d1:d6:91:1e:8a:9f:61:b7:c5:19:c5:81:d5:88:fa:fc:7f:7e:
d9:e6:85:b8:d9:04:e9:95:b5:2a:2a:6e:04:d2:36:13:6b:c3:
79:df:d7:6d:10:10:19:9b:a6:c5:1f:2f:d5:f7:9e:ed:f8:7a:
cb:aa:69:93:66:6c:50:4f:32:d3:d0:33:72:42:be:72:5b:c1:
45:78:8c:a8:35:11:1d:80:d2:d7:60:1b:28:c7:d2:60:7a:ef:
67:be:f6:bd:3b:ae:08:76:ee:8f:c0:01:c3:e8:e0:22:89:d9:
b7:9a:d8:91:8e:89:6a:23:93:ef:76:8d:be:f9:19:49:19:ad:
e5:16:09:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:27:01 2024 by rpki-client on console-fra.rpki-client.org