Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/b40f26-4af4-439d-a3d0-5c30734acb38/1/taUKfB1Mmq3PFNDNPkf0dF1HHsU.roa
File: taUKfB1Mmq3PFNDNPkf0dF1HHsU.roa (raw, json)
Hash identifier: tHLHSOvDUccNjJOyuAGFLItazRtUj/BXTT6xtf5T/Fw=
Subject key identifier: B5:A5:0A:7C:1D:4C:9A:AD:CF:14:D0:CD:3E:47:F4:74:5D:47:1E:C5
Certificate issuer: /CN=67a14f24304875ff154fe2b2b2cb6eba0af94523
Certificate serial: 01856EA6AFA3F7A967B6D4971415C0A94382
Authority key identifier: 67:A1:4F:24:30:48:75:FF:15:4F:E2:B2:B2:CB:6E:BA:0A:F9:45:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z6FPJDBIdf8VT-Kysstuugr5RSM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/b40f26-4af4-439d-a3d0-5c30734acb38/1/taUKfB1Mmq3PFNDNPkf0dF1HHsU.roa
Signing time: Sun 01 Jan 2023 18:44:55 +0000
ROA not before: Sun 01 Jan 2023 18:44:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202105
IP address blocks: 185.11.121.0/24 maxlen: 24
185.11.122.0/24 maxlen: 24
185.11.123.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:a6:af:a3:f7:a9:67:b6:d4:97:14:15:c0:a9:43:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67a14f24304875ff154fe2b2b2cb6eba0af94523
Validity
Not Before: Jan 1 18:44:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b5a50a7c1d4c9aadcf14d0cd3e47f4745d471ec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c1:b4:fd:c5:9e:e9:2f:18:e8:cb:be:ef:21:
0e:f6:7c:07:7f:5f:23:17:93:4b:e0:ca:42:97:db:
cb:5e:a8:44:df:05:42:a4:96:8c:7a:54:83:c9:12:
d5:db:bb:28:dc:ce:50:ef:78:c2:33:74:5d:7c:19:
8d:a0:98:f9:b1:f6:92:60:e8:8f:f2:7d:f3:6f:d7:
91:20:03:81:28:2e:5b:2f:05:77:9a:26:59:14:7f:
b8:6f:c0:6d:1e:c4:26:e7:6d:a5:20:4d:42:2c:7d:
62:7f:fa:2c:74:b4:36:1e:85:18:0c:ab:47:f5:aa:
5f:fb:5d:87:e6:0f:c0:22:97:90:ad:bc:a2:70:f5:
28:54:75:57:dc:d2:ad:d0:5d:8e:fb:33:4b:63:b2:
62:44:72:7e:2c:bb:b0:d3:b7:c6:e1:f3:f7:6b:49:
d5:e6:39:17:3a:ee:fd:e8:8a:dd:1b:71:81:f9:8a:
c0:fc:1e:11:63:19:08:df:92:d7:20:3c:a2:ac:13:
c8:7d:88:b7:c3:3f:9d:a0:b2:a3:b4:39:85:1f:ec:
c1:e1:75:98:92:b5:56:29:b7:eb:d5:fd:ff:21:81:
4b:f7:97:bd:b9:53:ce:79:b9:60:c5:e1:02:f6:5b:
71:d8:40:75:1c:53:9f:95:b5:f7:a3:d0:da:2e:40:
27:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:A5:0A:7C:1D:4C:9A:AD:CF:14:D0:CD:3E:47:F4:74:5D:47:1E:C5
X509v3 Authority Key Identifier:
keyid:67:A1:4F:24:30:48:75:FF:15:4F:E2:B2:B2:CB:6E:BA:0A:F9:45:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z6FPJDBIdf8VT-Kysstuugr5RSM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/b40f26-4af4-439d-a3d0-5c30734acb38/1/taUKfB1Mmq3PFNDNPkf0dF1HHsU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/b40f26-4af4-439d-a3d0-5c30734acb38/1/Z6FPJDBIdf8VT-Kysstuugr5RSM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.11.121.0-185.11.123.255
Signature Algorithm: sha256WithRSAEncryption
75:b1:c2:48:0e:83:3a:4c:20:46:83:ab:04:8c:1c:f5:ab:4c:
02:cc:97:1d:cf:f0:16:72:50:93:b1:06:25:0d:9c:4b:81:eb:
1d:e3:95:fd:ed:dd:a0:77:9e:21:81:ac:ed:1d:39:d1:7d:0d:
cb:41:9c:ca:65:18:db:cb:c2:ba:b5:f5:33:03:7d:30:e0:47:
2e:4a:82:dd:08:46:da:82:87:e2:a7:7c:42:51:1b:84:1d:21:
ee:0f:0c:78:72:54:23:44:85:51:35:54:42:40:a5:1f:3b:6e:
34:91:8f:2e:7b:1e:2b:61:af:ee:a5:f8:15:0e:b1:eb:62:6e:
43:58:e4:80:f3:11:07:48:88:d6:3e:82:c5:0b:7d:52:fd:46:
05:7c:52:66:9a:54:a8:75:f1:3a:8e:f8:2a:e3:4a:bd:c0:9d:
f2:83:00:f4:71:05:c1:bb:ac:4c:98:99:dd:53:8f:3d:e7:6e:
c0:bd:b0:cd:5c:47:4c:61:bb:79:2f:7c:e9:cc:aa:bf:f2:fc:
e6:01:c5:93:89:2d:a7:ea:fc:64:c9:8f:87:85:04:9d:b5:84:
fc:69:5a:b6:57:c7:83:74:4a:ed:d2:1a:1f:65:5e:a4:7c:f7:
44:dc:20:52:a2:14:61:76:2e:a7:c2:c6:53:4a:5d:84:9f:18:
7e:96:a4:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:51:25 2024 by rpki-client on console-fra.rpki-client.org