Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/acccd4-ea2b-49ee-9baf-22fb3991d2aa/1/TnnjUfJQpijhV-Gn_1NhDZOVJ90.roa
File: TnnjUfJQpijhV-Gn_1NhDZOVJ90.roa (raw, json)
Hash identifier: JjpPgPXq/dqwIXigDJBWjcNYxE7WgmpEQzOYDHUbvcQ=
Subject key identifier: 4E:79:E3:51:F2:50:A6:28:E1:57:E1:A7:FF:53:61:0D:93:95:27:DD
Certificate issuer: /CN=e187d5794d0ae8ab856ea0c26107720acd446d3a
Certificate serial: 018731E65A4CD50C417AE666026BE45FEF76
Authority key identifier: E1:87:D5:79:4D:0A:E8:AB:85:6E:A0:C2:61:07:72:0A:CD:44:6D:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4YfVeU0K6KuFbqDCYQdyCs1EbTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/acccd4-ea2b-49ee-9baf-22fb3991d2aa/1/TnnjUfJQpijhV-Gn_1NhDZOVJ90.roa
Signing time: Thu 30 Mar 2023 09:43:12 +0000
ROA not before: Thu 30 Mar 2023 09:43:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200480
IP address blocks: 185.241.16.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:31:e6:5a:4c:d5:0c:41:7a:e6:66:02:6b:e4:5f:ef:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e187d5794d0ae8ab856ea0c26107720acd446d3a
Validity
Not Before: Mar 30 09:43:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4e79e351f250a628e157e1a7ff53610d939527dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:55:fa:45:4f:22:6e:3f:8a:69:17:03:de:75:
93:22:07:c6:93:a7:32:25:69:3e:71:aa:79:4b:74:
fc:26:d6:19:b7:d0:3b:8c:29:c4:41:ee:e2:fa:7f:
f5:ce:1d:ea:cd:64:2e:a3:38:60:a7:59:50:76:e7:
1c:8b:b4:68:44:c9:9f:1b:c7:f1:44:1f:5f:69:3d:
da:50:42:6f:84:d8:c1:80:40:f6:2d:f4:31:14:e9:
2d:b5:2f:48:13:c4:cc:eb:c5:d1:26:88:ee:db:a7:
92:1a:5a:86:9e:5b:49:d2:7f:f5:cc:30:1c:4e:0b:
52:1d:82:b9:a3:00:86:b2:b8:af:82:ab:cf:9e:b3:
4a:a7:7f:9f:83:71:61:36:b5:89:ef:b8:15:83:bf:
23:b4:46:db:e4:74:45:c8:8a:70:ef:58:f0:cd:10:
8e:40:b9:b4:ea:08:26:4c:36:bb:3b:55:26:c6:2e:
be:a1:1e:09:44:9a:19:03:ba:2e:c5:41:e7:88:d7:
c1:f9:72:c0:4d:9d:7b:ac:c5:76:41:05:e4:fd:da:
ba:02:6e:b3:12:4d:cd:78:28:3a:d9:ed:34:35:25:
4f:4c:29:8b:05:08:ce:cd:c1:45:be:38:50:e6:62:
d3:19:54:c5:39:27:a3:2e:13:50:0f:ee:72:28:ec:
1b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:79:E3:51:F2:50:A6:28:E1:57:E1:A7:FF:53:61:0D:93:95:27:DD
X509v3 Authority Key Identifier:
keyid:E1:87:D5:79:4D:0A:E8:AB:85:6E:A0:C2:61:07:72:0A:CD:44:6D:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4YfVeU0K6KuFbqDCYQdyCs1EbTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/acccd4-ea2b-49ee-9baf-22fb3991d2aa/1/TnnjUfJQpijhV-Gn_1NhDZOVJ90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/acccd4-ea2b-49ee-9baf-22fb3991d2aa/1/4YfVeU0K6KuFbqDCYQdyCs1EbTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.241.16.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:d2:9c:60:96:c5:7f:0c:1a:cc:1d:76:86:9a:66:2c:ca:3a:
34:75:5b:23:2a:17:82:49:f4:80:3e:51:2a:88:c7:d4:c8:65:
e0:c8:ed:c6:a9:f5:79:4a:33:31:c3:a6:be:0c:ca:27:47:29:
df:d6:19:c7:c0:ff:77:b1:6f:cb:48:44:32:09:21:15:18:ef:
75:7f:25:9d:99:c1:4c:e1:a0:5d:17:29:1f:70:c4:d4:c4:a5:
64:92:0b:18:52:3e:fe:5f:b2:9a:a5:86:29:f7:e6:5f:8f:a9:
86:c1:d7:05:bd:80:40:93:39:e0:41:d7:f4:16:a8:8d:9b:56:
2d:95:ad:30:5f:4e:fa:f0:8d:74:af:33:d0:4a:07:83:22:b0:
fd:38:3a:96:1f:46:ee:75:79:cc:36:4c:2f:c8:58:3f:6b:78:
9e:73:10:07:21:d9:7a:51:1a:c2:79:2c:b5:1b:84:9c:8b:c2:
3a:b6:04:07:7c:99:5f:4c:a3:5e:b0:d6:63:71:3c:01:18:e7:
50:fb:81:64:6a:6d:e4:e7:fc:2b:36:9b:e9:59:19:90:1a:db:
f2:8c:46:68:28:f5:e3:ec:7d:99:a3:bb:2c:93:e5:96:2b:2b:
27:02:a3:dc:e3:75:6c:70:c9:e9:a5:76:4e:f8:ac:25:95:92:
a5:54:55:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:10:50 2024 by rpki-client on console-ams.rpki-client.org