Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/fdf732-d660-4de7-a6e8-66e309d062ff/1/tvvTARwWk0_SUgqgBLTMc9GzJMM.roa
File: tvvTARwWk0_SUgqgBLTMc9GzJMM.roa (raw, json)
Hash identifier: 56IZJoWmMjg4WLCznd0BZLW+DWlJir0OI4PJm94G3q0=
Subject key identifier: B6:FB:D3:01:1C:16:93:4F:D2:52:0A:A0:04:B4:CC:73:D1:B3:24:C3
Certificate issuer: /CN=7c4d3af99d66f3905632f49e3517524dc56851d2
Certificate serial: 0185714C02A26AEE3DBF4306D8C26DAA33B0
Authority key identifier: 7C:4D:3A:F9:9D:66:F3:90:56:32:F4:9E:35:17:52:4D:C5:68:51:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fE06-Z1m85BWMvSeNRdSTcVoUdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/fdf732-d660-4de7-a6e8-66e309d062ff/1/tvvTARwWk0_SUgqgBLTMc9GzJMM.roa
Signing time: Mon 02 Jan 2023 07:04:44 +0000
ROA not before: Mon 02 Jan 2023 07:04:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 185.149.150.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:4c:02:a2:6a:ee:3d:bf:43:06:d8:c2:6d:aa:33:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c4d3af99d66f3905632f49e3517524dc56851d2
Validity
Not Before: Jan 2 07:04:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b6fbd3011c16934fd2520aa004b4cc73d1b324c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2b:8c:03:38:ae:d7:da:f3:88:99:a1:3b:d6:
53:9f:81:e6:03:24:ed:0a:25:ab:94:1f:f5:a2:63:
0c:67:91:3b:a0:d6:42:46:9c:ca:93:ff:5f:13:a5:
1e:47:dc:16:97:cf:77:8a:91:bf:7a:f2:ab:d5:97:
06:9e:10:7c:e0:b2:bd:a8:06:59:5f:23:4a:0b:75:
ec:2c:73:3d:e4:f4:f6:1d:f4:12:53:ee:dc:26:61:
17:9b:b8:ae:f0:42:3b:ac:d9:79:c8:f3:50:7e:d0:
dd:94:89:6b:52:0e:8d:6c:a2:b9:12:b8:90:05:60:
c8:ed:c4:c9:55:d2:3f:53:4b:5a:cf:95:b1:3e:89:
05:91:2e:6e:3a:75:59:46:7c:57:2b:a6:2e:4a:12:
db:b0:ae:39:29:72:98:92:9e:b5:cf:ef:af:08:25:
1b:92:84:0c:99:87:22:bc:57:08:68:3f:96:14:05:
05:f3:02:33:75:66:83:71:2f:21:47:94:d7:62:68:
08:b8:9f:4a:b4:20:00:f2:7c:2b:5d:d0:23:35:c2:
c9:b6:a4:79:f9:01:d2:67:5f:06:f5:1c:52:21:02:
c6:f7:14:0a:3a:4f:2e:9b:0c:08:3a:52:f6:e4:06:
8b:b1:fa:8d:88:69:a8:35:b5:fc:92:b5:82:77:fe:
25:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:FB:D3:01:1C:16:93:4F:D2:52:0A:A0:04:B4:CC:73:D1:B3:24:C3
X509v3 Authority Key Identifier:
keyid:7C:4D:3A:F9:9D:66:F3:90:56:32:F4:9E:35:17:52:4D:C5:68:51:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fE06-Z1m85BWMvSeNRdSTcVoUdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/fdf732-d660-4de7-a6e8-66e309d062ff/1/tvvTARwWk0_SUgqgBLTMc9GzJMM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/fdf732-d660-4de7-a6e8-66e309d062ff/1/fE06-Z1m85BWMvSeNRdSTcVoUdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.149.150.0/24
Signature Algorithm: sha256WithRSAEncryption
25:45:dc:eb:58:6d:37:7f:7d:34:c9:a8:00:40:10:54:29:f5:
32:a5:e8:16:9b:57:5a:2e:6b:38:59:70:37:c1:47:56:89:98:
3e:48:0b:4a:66:30:f0:9a:61:70:2a:ca:84:5f:91:e4:4b:c3:
18:eb:11:91:dc:68:35:c6:39:5f:bf:43:72:10:71:ce:e6:4e:
20:c9:37:80:6e:b6:b6:cf:48:09:83:9f:89:2e:81:87:3a:ec:
ab:6c:85:9a:00:cc:58:08:8c:98:19:90:44:8d:e2:73:b6:ba:
ee:5b:d6:25:20:5c:80:da:d2:d8:d7:0c:22:76:95:7c:ad:6a:
29:a7:12:34:2f:77:ac:e2:bf:ae:a6:61:95:6f:c5:f7:91:55:
74:26:1d:5d:7c:b5:39:3f:ad:2e:03:bb:62:35:c9:e0:98:1b:
4c:fd:ca:3c:5a:10:6e:2e:1a:e4:85:03:bb:a8:f5:a8:ba:89:
a8:01:bc:77:0e:33:f5:3b:2a:d1:09:ae:a0:1f:0b:56:1d:7c:
87:39:20:a6:77:95:69:46:2d:93:fb:57:fd:96:6b:d1:2b:ea:
a1:25:d0:14:81:e4:88:6a:19:a2:db:36:fd:5b:fb:8e:e5:c7:
c2:cf:28:73:a6:59:f6:a3:bf:ff:11:ae:4e:a6:fc:58:4e:dd:
b3:c3:96:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:24 2023 by rpki-client on console-fra.rpki-client.org