Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/c9ee8c-574d-4cf6-a008-11b52c24a112/1/tfjs0NDtr1Y-IdgAqoK59rM2Yms.roa
File: tfjs0NDtr1Y-IdgAqoK59rM2Yms.roa (raw, json)
Hash identifier: i8/kdAM62Ai7xn0zn5kHGRJs7H4SUyFmeBO6Yfi55+4=
Subject key identifier: B5:F8:EC:D0:D0:ED:AF:56:3E:21:D8:00:AA:82:B9:F6:B3:36:62:6B
Certificate issuer: /CN=2b2830617c43c8cbc89af3cb2a74ea5dd00fe6ea
Certificate serial: 01857227CB8B2A6AA72676EBE0C29FC426BB
Authority key identifier: 2B:28:30:61:7C:43:C8:CB:C8:9A:F3:CB:2A:74:EA:5D:D0:0F:E6:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KygwYXxDyMvImvPLKnTqXdAP5uo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/c9ee8c-574d-4cf6-a008-11b52c24a112/1/tfjs0NDtr1Y-IdgAqoK59rM2Yms.roa
Signing time: Mon 02 Jan 2023 11:04:48 +0000
ROA not before: Mon 02 Jan 2023 11:04:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204758
IP address blocks: 185.240.228.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:27:cb:8b:2a:6a:a7:26:76:eb:e0:c2:9f:c4:26:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b2830617c43c8cbc89af3cb2a74ea5dd00fe6ea
Validity
Not Before: Jan 2 11:04:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b5f8ecd0d0edaf563e21d800aa82b9f6b336626b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e0:4c:6d:af:8f:89:47:24:b4:d2:e3:e7:12:
96:f9:84:02:0f:9c:fa:7f:1f:80:a7:29:fa:43:18:
99:fc:52:75:9b:eb:e7:31:20:d0:ed:24:ed:4e:34:
8f:f3:f8:b6:68:91:d6:c6:a8:b8:56:b5:41:ce:02:
d0:7f:88:c2:18:4f:02:5f:c4:3a:c5:6d:29:85:4d:
a0:c3:fa:0f:51:1a:0e:18:24:ef:11:ef:f7:fa:8e:
3f:a4:93:ae:80:dd:ba:20:8f:75:e9:69:0c:2e:af:
aa:ea:00:8a:01:df:03:76:c5:74:be:7c:1f:3c:36:
e5:81:fc:0f:ee:99:b4:52:e3:c9:bf:57:11:7c:58:
ff:f7:88:f3:31:98:3c:1c:16:07:a9:93:bd:19:3f:
05:83:04:2c:e5:f5:81:30:4f:c8:c8:e0:4c:79:b5:
52:c1:95:47:5e:31:78:bf:e1:5d:3c:62:21:73:ef:
6e:24:f2:93:ee:f6:2a:ab:aa:1c:91:cc:e5:0d:25:
ec:6c:95:8c:08:09:06:0e:d6:b2:ce:b0:08:79:29:
cc:26:7a:60:cd:52:a9:d8:71:ea:77:aa:10:7c:bd:
d6:2f:34:fe:67:5a:e5:c8:75:b7:f5:7a:05:de:e0:
fa:36:2e:59:d5:d9:d7:d2:bb:fd:6e:d7:00:c5:45:
54:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:F8:EC:D0:D0:ED:AF:56:3E:21:D8:00:AA:82:B9:F6:B3:36:62:6B
X509v3 Authority Key Identifier:
keyid:2B:28:30:61:7C:43:C8:CB:C8:9A:F3:CB:2A:74:EA:5D:D0:0F:E6:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KygwYXxDyMvImvPLKnTqXdAP5uo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c9ee8c-574d-4cf6-a008-11b52c24a112/1/tfjs0NDtr1Y-IdgAqoK59rM2Yms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c9ee8c-574d-4cf6-a008-11b52c24a112/1/KygwYXxDyMvImvPLKnTqXdAP5uo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.240.228.0/22
Signature Algorithm: sha256WithRSAEncryption
9e:64:52:1c:9f:1a:aa:aa:e7:93:7d:17:d7:a3:5d:f1:7b:b6:
df:16:94:c1:f3:e8:ab:f3:61:7d:0c:6e:47:91:ba:c7:96:5d:
8f:81:cd:f9:9a:2a:c7:ef:6e:7b:e4:01:ee:ae:9f:81:b5:ae:
2f:d7:4e:54:e7:89:16:0f:69:6b:c8:18:b6:27:48:b6:e7:57:
25:53:de:e3:12:36:2f:75:4c:70:2a:70:09:66:59:a2:86:1b:
ba:72:ea:5a:b2:d8:23:34:ef:a7:6f:69:fb:53:32:1e:3f:8f:
be:3f:c0:e5:62:8a:8d:d7:a9:ab:54:06:6d:5f:dc:ce:57:c6:
82:6e:36:32:b6:1a:1e:c5:5f:68:38:c9:fd:d2:ab:9c:1c:b3:
2e:09:ec:61:84:d5:a6:20:f7:6e:80:c4:3c:af:21:6b:90:0d:
90:a1:c7:db:7d:b3:26:6e:72:11:52:56:1c:52:60:02:b2:c6:
32:ed:22:ac:26:39:ae:86:e8:c0:21:6e:3c:fa:01:d6:72:a0:
ff:a1:75:f2:eb:12:54:62:b0:47:d7:31:89:a1:51:85:21:ad:
73:ea:8c:c5:e6:9e:f6:f8:83:af:3c:1e:f3:58:85:04:fb:a3:
de:1c:29:be:3a:e4:e2:9f:df:3c:53:a2:81:fa:df:c2:33:d1:
71:d0:95:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:15:37 2024 by rpki-client on console-ams.rpki-client.org