Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ef9860-2658-44df-b172-8066fa21241a/1/twD_PLvG8njRH0j1At9ifHlxvqs.roa
File: twD_PLvG8njRH0j1At9ifHlxvqs.roa (raw, json)
Hash identifier: OyciktHp4KxBzk1vEK7jEB+zxm9Ho5yAgTZFwdH06ss=
Subject key identifier: B7:00:FF:3C:BB:C6:F2:78:D1:1F:48:F5:02:DF:62:7C:79:71:BE:AB
Certificate issuer: /CN=ec97b72d5d4f750f1b138c2a901dd6510921be41
Certificate serial: 01856B37DBAB3720137BFB9BF0B59DDC8F79
Authority key identifier: EC:97:B7:2D:5D:4F:75:0F:1B:13:8C:2A:90:1D:D6:51:09:21:BE:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Je3LV1PdQ8bE4wqkB3WUQkhvkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ef9860-2658-44df-b172-8066fa21241a/1/twD_PLvG8njRH0j1At9ifHlxvqs.roa
Signing time: Sun 01 Jan 2023 02:45:00 +0000
ROA not before: Sun 01 Jan 2023 02:45:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21080
IP address blocks: 185.76.160.0/22 maxlen: 22
195.85.237.0/24 maxlen: 24
2001:67c:253c::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:37:db:ab:37:20:13:7b:fb:9b:f0:b5:9d:dc:8f:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec97b72d5d4f750f1b138c2a901dd6510921be41
Validity
Not Before: Jan 1 02:45:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b700ff3cbbc6f278d11f48f502df627c7971beab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:29:c7:c0:dc:c8:25:f0:5d:ae:20:6a:d2:ee:
16:90:51:4e:80:60:2f:5b:0c:4e:1d:22:4e:9e:c4:
ca:34:d1:8f:bc:bb:f1:e3:c2:a4:26:8e:e3:45:06:
5c:45:cd:f4:16:a5:04:01:e0:e9:55:f9:f1:06:78:
1f:02:8d:ed:fd:01:a2:12:b0:e2:cd:d5:31:22:9a:
38:76:12:df:a0:18:6c:ca:fe:22:8d:ee:6b:e0:6a:
02:79:e2:17:06:30:fb:a6:b7:d1:7c:be:51:e1:57:
70:f3:c9:ae:a5:19:12:c2:73:47:c2:f0:ef:f0:60:
1d:ab:f7:56:32:ce:0d:27:01:f7:65:22:50:d8:9f:
62:fe:77:8a:dd:01:37:69:3a:d1:bc:dd:fe:1a:a4:
dc:e1:77:fa:e0:84:6f:96:84:f9:cf:4d:59:ee:d1:
dd:ed:49:d0:32:0e:b5:5b:d4:9a:17:ea:e2:e2:11:
e0:b1:25:79:b2:98:4f:4e:ba:fe:af:24:0f:15:90:
9b:d6:10:ce:77:b8:46:f1:31:b8:8b:87:f6:68:11:
a4:57:b3:cf:4d:93:83:ca:6a:b3:0e:6e:5f:31:a0:
10:09:9d:58:cc:fe:5e:67:d7:4f:94:e2:83:af:81:
03:9f:44:60:2c:f8:3b:73:37:bd:28:6a:aa:23:2a:
f7:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:00:FF:3C:BB:C6:F2:78:D1:1F:48:F5:02:DF:62:7C:79:71:BE:AB
X509v3 Authority Key Identifier:
keyid:EC:97:B7:2D:5D:4F:75:0F:1B:13:8C:2A:90:1D:D6:51:09:21:BE:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Je3LV1PdQ8bE4wqkB3WUQkhvkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ef9860-2658-44df-b172-8066fa21241a/1/twD_PLvG8njRH0j1At9ifHlxvqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ef9860-2658-44df-b172-8066fa21241a/1/7Je3LV1PdQ8bE4wqkB3WUQkhvkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.76.160.0/22
195.85.237.0/24
IPv6:
2001:67c:253c::/48
Signature Algorithm: sha256WithRSAEncryption
52:b6:19:d7:48:51:2b:4a:41:bd:14:b9:71:89:80:22:04:76:
2a:ae:ca:cd:e2:07:00:34:5e:3f:fd:63:ec:8c:20:8f:aa:8f:
3c:27:8b:7a:be:77:a9:d9:f6:eb:b8:94:6e:b5:3a:c5:31:12:
ce:f5:18:32:a6:97:75:56:10:3d:12:d2:5d:68:26:3f:3a:17:
66:d1:88:52:a4:24:f4:7c:d6:3d:28:dd:7f:51:4d:cd:ed:9a:
a4:6a:30:73:ae:97:cf:92:fa:0d:72:6d:55:91:96:be:d1:b7:
4a:a1:91:86:27:bf:e8:8b:2c:f8:57:c6:93:a2:4a:a7:40:66:
b6:3e:76:1c:25:0c:9d:ab:db:85:75:bc:ee:6c:11:aa:6e:f0:
66:63:d0:a8:9a:0f:50:32:a0:8b:4e:49:f6:8a:88:d2:54:b7:
4c:4f:f3:59:99:22:dd:90:9e:fc:7a:85:7a:eb:02:34:8e:5d:
62:3e:91:21:5c:28:ad:ae:73:32:b2:2e:b3:5c:c5:70:8d:38:
9b:39:1c:de:54:e7:2a:8c:6b:ec:a7:98:03:db:7a:5c:7e:0d:
72:3b:9e:cf:72:bb:ea:ca:71:5e:2d:20:01:c0:74:fa:75:64:
5c:18:55:17:75:ac:b8:26:d3:8c:5d:0d:8f:f3:af:62:42:35:
27:a8:ef:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:19:20 2024 by rpki-client on console-fra.rpki-client.org