Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/1be2f3-133c-44d5-8ac8-eb01e8a8d4b3/1/1tQITask-ke4w5TgiOW0NkovDeU.roa
File: 1tQITask-ke4w5TgiOW0NkovDeU.roa (raw, json)
Hash identifier: 7axP7KGK1Qpb4wFJGR65outBirtshnQEaEvxsBb/c5s=
Subject key identifier: D6:D4:08:4D:AB:24:FA:47:B8:C3:94:E0:88:E5:B4:36:4A:2F:0D:E5
Certificate issuer: /CN=13230da70232f66784730fd6c1255135b7f8d09f
Certificate serial: 01856E0AEEA9508DB83779A4D8D204C72E0F
Authority key identifier: 13:23:0D:A7:02:32:F6:67:84:73:0F:D6:C1:25:51:35:B7:F8:D0:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EyMNpwIy9meEcw_WwSVRNbf40J8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/1be2f3-133c-44d5-8ac8-eb01e8a8d4b3/1/1tQITask-ke4w5TgiOW0NkovDeU.roa
Signing time: Sun 01 Jan 2023 15:54:48 +0000
ROA not before: Sun 01 Jan 2023 15:54:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51090
IP address blocks: 185.77.192.0/22 maxlen: 24
195.43.74.0/23 maxlen: 23
2001:67c:21c::/48 maxlen: 48
2a03:5620::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:0a:ee:a9:50:8d:b8:37:79:a4:d8:d2:04:c7:2e:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13230da70232f66784730fd6c1255135b7f8d09f
Validity
Not Before: Jan 1 15:54:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d6d4084dab24fa47b8c394e088e5b4364a2f0de5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:13:77:aa:ce:42:d2:db:9e:85:b8:52:ae:02:
4b:be:ee:88:9a:2a:6c:52:5e:7e:f7:dd:4a:5c:d8:
ba:96:d7:9a:b5:73:34:3c:a7:86:9b:55:05:c5:80:
f8:5f:ad:c9:30:fc:7c:29:23:0d:13:93:1a:3c:bf:
07:97:8a:41:d6:e6:c6:80:91:5b:53:91:14:b8:2d:
6d:49:fc:06:76:ad:83:e5:9b:36:c0:64:5d:de:80:
a1:72:7a:f8:01:2d:c8:6a:45:f7:8b:5f:aa:d0:69:
ae:11:ea:de:12:9b:7a:2c:5e:3b:3a:94:be:14:c2:
db:e9:a0:36:86:d0:c9:46:dd:51:88:d4:16:66:76:
c3:7a:28:1a:e8:50:e0:db:70:ed:b5:a9:e6:65:f1:
e4:c7:8a:a6:91:6f:5e:45:4d:a6:98:7c:ab:a0:80:
da:ea:06:84:07:a8:bb:88:37:cd:21:74:26:e2:c4:
44:66:23:64:e0:67:0c:e3:f1:27:f1:06:24:db:cc:
08:07:3e:c0:a4:c2:cc:7a:28:83:0b:91:8a:87:3d:
18:29:86:05:07:da:b9:14:46:d0:25:1d:60:16:0b:
bb:bd:df:bc:f7:ee:8e:d3:6d:ba:03:32:d7:40:28:
ce:49:56:4d:3b:96:d9:dc:d4:33:ce:40:cc:06:55:
18:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:D4:08:4D:AB:24:FA:47:B8:C3:94:E0:88:E5:B4:36:4A:2F:0D:E5
X509v3 Authority Key Identifier:
keyid:13:23:0D:A7:02:32:F6:67:84:73:0F:D6:C1:25:51:35:B7:F8:D0:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EyMNpwIy9meEcw_WwSVRNbf40J8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1be2f3-133c-44d5-8ac8-eb01e8a8d4b3/1/1tQITask-ke4w5TgiOW0NkovDeU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1be2f3-133c-44d5-8ac8-eb01e8a8d4b3/1/EyMNpwIy9meEcw_WwSVRNbf40J8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.77.192.0/22
195.43.74.0/23
IPv6:
2001:67c:21c::/48
2a03:5620::/32
Signature Algorithm: sha256WithRSAEncryption
3c:37:b6:68:d2:9d:3c:9e:ef:2f:19:d2:ab:4b:cf:6f:ca:c3:
26:69:4f:00:63:d4:61:59:ab:1e:02:ac:ac:bb:83:f5:ce:78:
c8:1c:11:81:1f:85:b0:d8:b3:9e:d7:8a:26:aa:63:d6:02:7c:
d3:81:68:54:08:9d:12:ba:5d:9e:2f:2d:f7:f6:f7:87:b3:49:
e2:7c:56:9d:ef:f1:93:21:3b:14:4c:ac:03:f6:4c:f5:ca:bd:
a1:26:80:a7:e4:af:6b:27:51:2a:bd:4f:b6:fe:18:30:c8:81:
b8:e8:21:1d:0a:14:8d:dc:d6:e6:7e:6d:c9:23:10:ec:17:41:
39:08:d4:6c:2f:bd:aa:cf:8c:9b:b9:4f:ea:bf:2e:30:b7:da:
7f:46:51:cf:8e:07:e4:61:7d:76:12:64:35:05:62:09:1d:ad:
1c:2c:b0:d0:8e:a6:5d:d9:65:55:e5:57:1a:4d:10:20:f9:82:
cc:c4:cd:ad:f2:29:5f:8b:ee:95:aa:12:89:73:9a:45:1f:bf:
0d:38:25:84:47:06:d1:8e:ed:4c:2c:30:18:fc:c5:2f:79:e3:
b6:c0:7b:c4:e1:8b:ca:a9:f9:14:e5:fb:17:53:da:23:2e:3a:
be:52:2c:94:ad:59:65:1c:95:2b:1d:e8:be:88:0d:35:2a:4d:
86:6c:21:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:17 2024 by rpki-client on console-fra.rpki-client.org