Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/TyGqwuOe1gwFFGu41FA2w9mINb8.roa
File: TyGqwuOe1gwFFGu41FA2w9mINb8.roa (raw, json)
Hash identifier: 7aNVfYsNjF+vEX5iSYhodP7UaRuT3OgKC1gNSiYZG4U=
Subject key identifier: 4F:21:AA:C2:E3:9E:D6:0C:05:14:6B:B8:D4:50:36:C3:D9:88:35:BF
Certificate issuer: /CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Certificate serial: 0185C9E804FC5F0553837884AB072AA2BA51
Authority key identifier: 94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/TyGqwuOe1gwFFGu41FA2w9mINb8.roa
Signing time: Thu 19 Jan 2023 12:01:44 +0000
ROA not before: Thu 19 Jan 2023 12:01:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 185.81.126.0/24 maxlen: 24
194.107.163.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:c9:e8:04:fc:5f:05:53:83:78:84:ab:07:2a:a2:ba:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Validity
Not Before: Jan 19 12:01:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4f21aac2e39ed60c05146bb8d45036c3d98835bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:85:59:6d:59:68:70:71:f8:8b:a0:c8:b5:6f:
0f:df:46:dc:0f:fa:4d:45:c1:75:a6:75:e0:8d:9c:
4f:b3:d6:f3:bd:aa:04:33:49:d3:dd:e7:72:43:8f:
61:a9:e0:37:25:93:7a:ac:6b:86:39:3b:5e:ec:3d:
6d:64:0b:e1:3b:ae:40:eb:38:f7:ca:70:b0:aa:21:
ca:d7:a2:31:8c:83:fd:91:27:ea:89:23:67:91:f0:
20:57:c1:9e:36:21:51:b0:5a:b4:bc:ae:d2:e2:d7:
ea:fa:04:12:cd:65:9e:df:c6:e2:08:b6:16:a7:d1:
84:0a:98:3f:9d:ea:50:fa:a0:6a:ab:19:fe:b1:0d:
0a:d9:48:e4:b8:6f:b4:57:bf:d7:5d:8f:c5:65:0e:
7b:f1:a8:73:4e:1d:25:d3:e8:28:d4:f4:7d:ca:83:
da:40:ff:eb:5a:e3:a2:52:33:19:d1:22:61:09:61:
0e:0a:cc:80:43:8a:37:2c:1d:c6:65:75:88:90:ec:
a9:42:e5:e0:7d:28:b1:cb:6c:68:e8:78:b0:5d:35:
c9:90:ea:b1:45:19:e5:21:09:e5:e6:e5:26:ba:c5:
0b:72:23:8f:f2:bf:bf:1a:01:de:78:e4:18:7f:bf:
cf:bc:3c:b3:22:17:0c:e6:e6:d9:2f:af:f9:a1:0c:
ec:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:21:AA:C2:E3:9E:D6:0C:05:14:6B:B8:D4:50:36:C3:D9:88:35:BF
X509v3 Authority Key Identifier:
keyid:94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/TyGqwuOe1gwFFGu41FA2w9mINb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.126.0/24
194.107.163.0/24
Signature Algorithm: sha256WithRSAEncryption
10:ef:46:33:a1:77:a1:71:bc:45:01:e8:81:e1:20:6b:60:04:
10:6d:aa:47:04:86:bc:a7:8f:49:9c:66:3e:c3:3a:c2:c0:b8:
b6:27:fb:71:c5:ea:45:00:ba:f3:8a:6b:5c:84:e2:42:06:6d:
3d:aa:59:08:70:ba:41:9c:28:67:b3:4b:a0:f7:64:41:ff:32:
de:01:7d:a3:ae:74:db:bc:c1:7b:9e:60:1b:1b:a6:ae:e1:15:
3e:5e:41:54:d1:a5:80:ad:4e:f0:c8:58:b2:f1:9b:6c:18:b1:
f6:c8:6a:32:45:9c:10:b1:67:0f:26:4b:86:f3:52:5d:ca:41:
07:46:25:40:80:d0:c1:9a:5d:e1:7d:ff:13:e4:49:7a:9a:b1:
a8:be:af:21:01:2f:18:79:26:ea:83:4c:61:f6:99:bf:14:53:
2d:18:2b:a3:bf:3b:57:c9:fc:1c:cf:51:90:04:22:bf:d2:24:
cc:ce:75:23:4f:a0:cc:3a:24:9d:d3:4a:ae:45:69:12:6d:0c:
ec:7a:92:cd:b6:56:c9:c5:8c:19:fc:ca:26:e0:05:c9:28:b6:
a4:b9:65:10:58:f4:ee:4d:cf:df:9d:d9:fe:74:79:a4:2a:1a:
61:da:4b:62:20:e1:bc:6f:75:eb:d9:2f:da:23:99:b0:f7:da:
db:a6:11:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 18 08:22:35 2023 by rpki-client on console-ams.rpki-client.org