Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/bead7f-480d-4841-b77d-f0eb1310e7a7/1/tpGCCDCYioN9n_OnVft4WhBWHhU.roa
File: tpGCCDCYioN9n_OnVft4WhBWHhU.roa (raw, json)
Hash identifier: 1AFXgsN+fb/T8cjqF50n3gtQSo08aCtTtA7IeHGcL4I=
Subject key identifier: B6:91:82:08:30:98:8A:83:7D:9F:F3:A7:55:FB:78:5A:10:56:1E:15
Certificate issuer: /CN=56b550550d564180b1df7deb5b58d3a6b112e7e3
Certificate serial: 01856E01B836F145C1B24D9F0AA6B2A56B9B
Authority key identifier: 56:B5:50:55:0D:56:41:80:B1:DF:7D:EB:5B:58:D3:A6:B1:12:E7:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrVQVQ1WQYCx333rW1jTprES5-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/bead7f-480d-4841-b77d-f0eb1310e7a7/1/tpGCCDCYioN9n_OnVft4WhBWHhU.roa
Signing time: Sun 01 Jan 2023 15:44:44 +0000
ROA not before: Sun 01 Jan 2023 15:44:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205366
IP address blocks: 185.201.108.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:01:b8:36:f1:45:c1:b2:4d:9f:0a:a6:b2:a5:6b:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b550550d564180b1df7deb5b58d3a6b112e7e3
Validity
Not Before: Jan 1 15:44:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b691820830988a837d9ff3a755fb785a10561e15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:0c:93:b7:58:9e:d4:30:2f:ca:c7:fc:42:d4:
11:5f:3c:a4:ef:24:d2:5b:17:5b:28:06:9c:a0:d3:
91:82:4b:1b:41:bb:fd:81:bb:20:4f:2a:ef:3e:6f:
39:2b:91:ee:06:3e:40:d0:2f:10:8c:ce:6c:da:9e:
14:66:e4:10:14:e3:92:40:b3:b9:d3:a2:f1:07:3e:
95:00:4f:b9:29:97:2d:78:96:c2:be:5f:d0:4d:f3:
1c:cb:ba:17:09:fd:3b:42:78:94:55:0d:50:71:f9:
3a:ab:d4:04:43:ee:23:86:c0:a6:59:95:d9:e3:c8:
df:85:01:e8:86:11:36:a8:4e:a2:d4:98:59:6c:f4:
9d:d5:07:c0:0e:32:ae:83:41:f2:36:61:2a:15:af:
19:a9:ee:2c:53:ce:15:26:4d:a9:53:69:e2:77:42:
d5:e8:f9:aa:8c:cc:d3:33:15:e5:d0:1b:54:4e:7e:
6b:46:89:36:df:f2:c9:7d:31:3b:46:e8:1a:fb:7f:
e8:95:73:e7:c6:7e:21:fe:68:4e:f3:ee:03:e4:94:
d8:2d:29:1b:ae:67:ff:81:82:b0:b4:3f:ae:3a:6d:
9b:ba:51:fd:7f:f7:7c:64:a3:93:05:4e:3e:c0:7d:
ed:04:6b:e8:3f:94:41:12:77:b7:70:a2:68:76:e2:
86:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:91:82:08:30:98:8A:83:7D:9F:F3:A7:55:FB:78:5A:10:56:1E:15
X509v3 Authority Key Identifier:
keyid:56:B5:50:55:0D:56:41:80:B1:DF:7D:EB:5B:58:D3:A6:B1:12:E7:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrVQVQ1WQYCx333rW1jTprES5-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bead7f-480d-4841-b77d-f0eb1310e7a7/1/tpGCCDCYioN9n_OnVft4WhBWHhU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bead7f-480d-4841-b77d-f0eb1310e7a7/1/VrVQVQ1WQYCx333rW1jTprES5-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.201.108.0/23
Signature Algorithm: sha256WithRSAEncryption
14:be:0e:b8:df:43:31:88:c7:14:f0:ba:4e:ea:11:84:32:2b:
32:2d:19:24:19:d8:b4:19:15:a1:e3:6e:1b:6b:fa:04:94:c4:
48:dd:0d:73:ba:33:fc:3b:cc:ef:0c:1c:f3:49:2c:27:63:9c:
5f:80:84:7a:a9:46:1f:49:cb:0b:da:83:5a:10:a3:23:b4:52:
3e:79:9f:51:24:91:fe:44:5a:06:7c:09:6f:35:13:4b:84:9d:
45:88:0c:0a:07:a6:cf:d9:e6:fd:8c:96:99:b8:b7:8c:9a:fc:
d1:59:97:63:14:a9:44:8e:1d:fa:a0:78:a9:84:f2:86:5a:73:
6f:ee:60:f4:4e:25:93:79:6b:5e:87:d4:ad:30:7c:52:56:53:
0d:d0:1d:7d:93:d9:bb:fb:cd:86:f1:4f:da:31:18:9d:68:3e:
05:1f:58:0a:46:ff:50:43:ee:3d:30:00:16:29:87:85:6b:aa:
68:38:dd:01:03:86:4b:d8:4e:7e:d8:0f:1a:1b:e9:e1:cb:90:
93:de:4f:3a:22:76:fa:d5:6a:4f:38:75:27:7e:5d:e3:59:0d:
c0:19:1e:93:cf:60:d6:80:63:75:08:00:e1:e9:f4:0b:2b:f8:
fa:ff:8d:00:81:cb:72:16:07:be:aa:cd:3f:90:51:33:36:9b:
b7:a5:cc:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:53 2024 by rpki-client on console-fra.rpki-client.org