Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/TYLxomUUiAfx-48kJUkLXAsfiOE.roa
File: TYLxomUUiAfx-48kJUkLXAsfiOE.roa (raw, json)
Hash identifier: 2JnmvOGgTFJsP5M0qbwzkdXh998IwPAxK6DqK0QTC74=
Subject key identifier: 4D:82:F1:A2:65:14:88:07:F1:FB:8F:24:25:49:0B:5C:0B:1F:88:E1
Certificate issuer: /CN=541fdc7a2f11a5766d3ad7bdf625ce5e119a8fdf
Certificate serial: 019058F969B84CF5098D217B7CAFDA8D9A3B
Authority key identifier: 54:1F:DC:7A:2F:11:A5:76:6D:3A:D7:BD:F6:25:CE:5E:11:9A:8F:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VB_cei8RpXZtOte99iXOXhGaj98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/TYLxomUUiAfx-48kJUkLXAsfiOE.roa
Signing time: Thu 27 Jun 2024 09:14:18 +0000
ROA not before: Thu 27 Jun 2024 09:14:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 185.101.170.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jul 2024 17:07:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:58:f9:69:b8:4c:f5:09:8d:21:7b:7c:af:da:8d:9a:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=541fdc7a2f11a5766d3ad7bdf625ce5e119a8fdf
Validity
Not Before: Jun 27 09:14:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4d82f1a265148807f1fb8f2425490b5c0b1f88e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:be:fe:a7:ea:6a:8d:6b:d6:4a:ec:f2:a9:21:
8b:db:f0:55:02:84:98:81:b1:65:c8:7b:f5:d9:83:
c1:ca:d0:f7:4a:50:4f:4c:b9:15:66:a8:1e:c9:cf:
a7:d6:7b:81:ef:d7:ff:f3:0a:c4:e8:e6:4a:6f:8c:
f7:ec:bc:39:39:1d:d5:3b:8d:6b:d5:00:f1:fa:d2:
23:90:24:16:dd:71:67:42:cf:d2:46:3b:cf:4c:2f:
f6:86:fc:6c:b2:1e:23:9a:6b:5c:0f:9a:d1:50:a3:
65:4a:64:c7:02:27:3c:cd:6a:21:3b:4c:ce:d7:7f:
98:e5:83:04:35:24:33:8a:25:f5:f3:4b:1e:f6:b2:
dc:0f:7b:f7:16:ab:38:71:9e:d7:76:86:97:60:df:
f2:bf:41:6a:5f:03:e0:4c:dd:fb:87:5f:e7:62:bc:
f6:4f:81:f4:02:ad:8c:68:be:88:28:dd:81:a9:83:
a3:9c:25:38:36:4c:5f:62:90:de:71:a2:0d:e5:2a:
82:d5:80:99:22:aa:8e:48:d4:d6:45:ec:59:c6:69:
7b:eb:51:27:e2:1c:b9:2d:db:1f:0a:2a:f0:4d:38:
47:20:04:44:2c:92:32:95:46:b1:f2:fe:9e:7c:f2:
a5:99:11:7b:85:59:c3:8f:ef:8f:1f:9a:a5:fc:dc:
cc:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:82:F1:A2:65:14:88:07:F1:FB:8F:24:25:49:0B:5C:0B:1F:88:E1
X509v3 Authority Key Identifier:
keyid:54:1F:DC:7A:2F:11:A5:76:6D:3A:D7:BD:F6:25:CE:5E:11:9A:8F:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VB_cei8RpXZtOte99iXOXhGaj98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/TYLxomUUiAfx-48kJUkLXAsfiOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/VB_cei8RpXZtOte99iXOXhGaj98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.101.170.0/23
Signature Algorithm: sha256WithRSAEncryption
28:72:a0:20:63:e2:72:87:42:41:92:17:64:f3:68:2e:5c:db:
b0:d8:cb:96:cd:1f:4e:19:3a:76:6c:c5:da:d0:00:bd:d6:b3:
6a:cc:d2:c7:90:ef:ab:34:09:f8:20:55:2c:83:8b:a7:12:60:
dc:17:1c:b2:56:21:2c:0d:63:9c:f9:05:fa:64:e4:1e:d8:47:
9a:46:f4:d6:d3:01:ad:60:de:bd:1d:5d:67:ab:78:90:51:35:
b6:06:c4:d2:62:9e:30:5f:dd:c7:3b:cd:83:d3:c4:fa:24:1c:
ee:5c:51:0c:12:52:ac:96:45:ac:ca:c1:ce:37:7c:55:c6:aa:
7d:1d:c8:c2:51:8f:3b:55:c2:73:65:e5:af:fc:b9:df:bb:54:
c8:0f:52:ea:ce:25:cf:8e:f5:37:76:35:6a:7e:47:fc:ec:77:
3f:5d:3c:92:48:0a:c5:00:d0:21:f4:b2:5b:33:58:1f:f3:a4:
00:77:ac:05:f0:32:6b:92:ac:f2:ba:8a:b1:9d:52:b3:e4:d4:
d4:f9:15:e3:a4:46:a0:18:bb:ee:45:8d:43:73:51:c0:c0:11:
56:2c:a5:c3:f3:86:65:88:b7:e4:e1:da:97:f8:80:93:0c:ae:
1f:09:d5:d7:fa:22:89:ae:71:df:c3:35:be:a9:b5:47:97:63:
1c:94:4e:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:30:24 2025 by rpki-client