Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/463686-ce48-487c-bc3d-a2f59eae86d0/1/TSi3LYbdgZa60FzvFpl-6uFF9Xk.roa
File: TSi3LYbdgZa60FzvFpl-6uFF9Xk.roa (raw, json)
Hash identifier: d8r3igpj2Hvde2ntRKd7IooHBfV4ue2vsIoscjscreA=
Subject key identifier: 4D:28:B7:2D:86:DD:81:96:BA:D0:5C:EF:16:99:7E:EA:E1:45:F5:79
Certificate issuer: /CN=83885e38ac77cac044829b53cb3b25abe61e9f64
Certificate serial: 018CC64AFCE2F93DFDF63F6FB72ACA6AC988
Authority key identifier: 83:88:5E:38:AC:77:CA:C0:44:82:9B:53:CB:3B:25:AB:E6:1E:9F:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g4heOKx3ysBEgptTyzslq-Yen2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/463686-ce48-487c-bc3d-a2f59eae86d0/1/TSi3LYbdgZa60FzvFpl-6uFF9Xk.roa
Signing time: Mon 01 Jan 2024 18:30:52 +0000
ROA not before: Mon 01 Jan 2024 18:30:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197730
IP address blocks: 185.142.129.0/24 maxlen: 32
Validation: Failed, certificate revoked on Wed 01 Jan 2025 07:48:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:fc:e2:f9:3d:fd:f6:3f:6f:b7:2a:ca:6a:c9:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83885e38ac77cac044829b53cb3b25abe61e9f64
Validity
Not Before: Jan 1 18:30:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4d28b72d86dd8196bad05cef16997eeae145f579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:1e:ee:66:94:8b:e0:04:a6:cb:56:34:16:58:
2c:fe:9c:b7:27:9b:7f:8e:b9:b9:c6:f7:29:db:d3:
7e:81:47:45:0b:85:04:e2:ea:68:56:0c:08:8e:fb:
9c:7e:b8:8d:95:eb:ae:25:3d:e9:87:6d:97:bb:84:
a2:bd:f6:b9:19:bd:ad:5e:3f:91:56:7c:7e:39:21:
af:b5:90:4e:30:3c:ef:47:47:35:af:45:f2:b7:29:
5b:d5:3d:15:d2:88:9b:0e:65:2b:89:2f:e4:7b:16:
87:e3:dc:52:46:a5:c0:aa:2f:1a:8e:d4:44:c8:1a:
47:7c:85:eb:75:7a:07:10:b0:13:9e:09:ab:4e:5d:
45:f3:bf:0b:c7:3c:5b:a0:a6:e6:3c:73:72:96:38:
21:66:e3:2f:08:bd:5b:65:e5:8f:fb:3f:5b:df:d0:
91:c1:be:a4:5c:32:e8:f4:80:f2:0f:c5:40:91:f8:
0a:0b:74:34:9c:7e:a0:7a:99:ff:b0:53:a5:e5:2f:
61:f2:80:20:df:37:9f:d0:6a:f6:49:e4:0e:46:88:
74:1d:8d:4b:db:2d:1e:94:54:ca:0a:d6:c2:6b:3e:
a5:2e:ad:76:74:bf:54:09:b3:2c:76:c6:0d:3e:10:
b0:92:27:50:41:ac:f0:33:12:a4:0f:fa:12:4f:4e:
3c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:28:B7:2D:86:DD:81:96:BA:D0:5C:EF:16:99:7E:EA:E1:45:F5:79
X509v3 Authority Key Identifier:
keyid:83:88:5E:38:AC:77:CA:C0:44:82:9B:53:CB:3B:25:AB:E6:1E:9F:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g4heOKx3ysBEgptTyzslq-Yen2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/463686-ce48-487c-bc3d-a2f59eae86d0/1/TSi3LYbdgZa60FzvFpl-6uFF9Xk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/463686-ce48-487c-bc3d-a2f59eae86d0/1/g4heOKx3ysBEgptTyzslq-Yen2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.142.129.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:ac:99:11:27:0e:23:7f:eb:8e:46:c9:c5:b7:0c:8d:a9:eb:
93:ae:6b:3c:68:24:3a:12:f4:1b:60:58:3b:30:5d:97:7f:fa:
81:21:cc:6b:87:7c:e6:7e:8d:e1:06:8d:df:10:93:80:cc:c7:
10:d6:c3:c4:1c:16:de:04:d7:33:a5:d1:40:81:03:d6:2b:dc:
33:6f:50:2b:cf:b0:6f:6b:eb:bb:79:14:f7:b1:d2:af:d1:74:
f2:98:2a:c1:30:1e:02:c8:93:05:b4:a3:b8:6b:36:91:67:f7:
f2:db:55:88:e6:a0:31:bd:4f:52:50:46:5b:bc:f4:d9:d7:d9:
00:5e:0d:c5:d2:f9:59:ba:1f:32:85:37:34:3b:34:70:20:de:
27:6f:f8:98:ee:ee:83:ab:dc:e7:0f:69:96:70:cf:65:24:07:
8a:29:c0:ff:06:49:5f:68:f4:c9:a0:f5:f9:74:b8:b0:53:77:
57:23:25:a9:cf:7f:40:11:df:3b:1d:0c:41:54:1e:d8:57:eb:
17:6c:51:90:0e:33:80:d4:14:4d:b8:6f:2e:c3:b6:d8:e9:2a:
d5:43:a7:76:3b:2e:f7:04:67:09:01:6e:69:60:87:f0:bd:d4:
bb:74:d6:38:df:9b:0f:f3:40:ce:04:94:36:45:86:1e:1c:90:
1e:bb:51:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:31 2025 by rpki-client