Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6768f8-113e-4c75-a82b-0cf60574cf17/1/Tzj0cyMrCACJioYFWG8rpDm5xoE.roa
File: Tzj0cyMrCACJioYFWG8rpDm5xoE.roa (raw, json)
Hash identifier: zEhIcSMdNiKfQqJ9dNdUT37sTwNhDg9qqk87EB4Ty7k=
Subject key identifier: 4F:38:F4:73:23:2B:08:00:89:8A:86:05:58:6F:2B:A4:39:B9:C6:81
Certificate issuer: /CN=29cff291a03badab85e3647aa2350f13c5f26661
Certificate serial: 01856E8B4E8338531206A6058F123D034509
Authority key identifier: 29:CF:F2:91:A0:3B:AD:AB:85:E3:64:7A:A2:35:0F:13:C5:F2:66:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kc_ykaA7rauF42R6ojUPE8XyZmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/6768f8-113e-4c75-a82b-0cf60574cf17/1/Tzj0cyMrCACJioYFWG8rpDm5xoE.roa
Signing time: Sun 01 Jan 2023 18:15:01 +0000
ROA not before: Sun 01 Jan 2023 18:15:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 22773
IP address blocks: 195.64.121.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:8b:4e:83:38:53:12:06:a6:05:8f:12:3d:03:45:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29cff291a03badab85e3647aa2350f13c5f26661
Validity
Not Before: Jan 1 18:15:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4f38f473232b0800898a8605586f2ba439b9c681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:09:47:b4:9b:3a:3c:2d:14:fb:0e:81:95:a0:
ac:25:77:75:3d:35:a2:6e:c9:9c:fb:49:8b:0d:48:
e3:53:99:3a:f9:96:ec:58:e3:77:40:2a:21:a7:d0:
15:8d:1c:25:24:79:48:02:05:26:4b:19:a2:eb:6e:
cd:7e:d6:dd:7a:81:7f:bb:63:b9:8c:1f:d4:7b:a6:
89:8f:d9:ee:b1:24:88:60:7d:19:2e:9a:cf:0f:ab:
a2:47:ad:d2:26:be:c1:0e:9f:6d:82:1f:b1:e7:31:
22:24:99:0c:41:8f:77:e4:d7:f3:40:a8:88:6e:6d:
ff:ba:f9:6d:c5:a1:a5:6e:bd:15:fe:06:70:54:03:
a2:54:8b:dd:6f:98:71:6f:e9:5b:8f:c3:6e:79:56:
86:5c:48:e9:f8:91:cb:55:47:62:b2:bf:c6:9a:79:
ec:e9:82:2b:94:1e:c8:0c:6a:76:41:f9:54:5a:3f:
25:93:ac:39:12:f5:1a:dc:f1:3b:58:3e:09:a7:1a:
08:4a:0e:db:f0:35:ae:01:6d:05:f8:fd:01:8f:34:
b7:33:fc:6f:a5:a7:88:2e:a7:5a:9f:0b:6c:94:38:
3c:90:59:98:c4:7d:3d:74:73:9a:75:56:27:2d:7f:
98:5e:7e:46:dc:7b:96:44:a9:e5:64:2b:06:d9:05:
31:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:38:F4:73:23:2B:08:00:89:8A:86:05:58:6F:2B:A4:39:B9:C6:81
X509v3 Authority Key Identifier:
keyid:29:CF:F2:91:A0:3B:AD:AB:85:E3:64:7A:A2:35:0F:13:C5:F2:66:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kc_ykaA7rauF42R6ojUPE8XyZmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6768f8-113e-4c75-a82b-0cf60574cf17/1/Tzj0cyMrCACJioYFWG8rpDm5xoE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6768f8-113e-4c75-a82b-0cf60574cf17/1/Kc_ykaA7rauF42R6ojUPE8XyZmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.64.121.0/24
Signature Algorithm: sha256WithRSAEncryption
86:b3:d0:97:2d:e2:5f:34:6b:8c:c4:f7:c1:8c:f6:bd:02:c7:
a5:07:36:f4:51:22:dc:9c:0f:6a:40:4d:b4:b9:05:77:fc:f1:
44:dc:00:7f:ce:12:90:4b:3c:10:0f:d5:2d:36:d6:cf:f7:dc:
e9:6c:7e:5c:9d:a3:60:cc:74:10:14:da:20:74:df:80:09:61:
e8:2f:b5:7e:f4:ac:1a:7c:4b:6d:b5:98:8e:0c:16:e1:a6:5d:
6d:aa:5d:27:ff:26:91:a8:65:2f:64:c6:ad:36:02:07:20:15:
94:a8:15:3e:e4:3c:e2:f2:ab:f4:b8:60:85:00:e7:86:f9:d9:
f0:6d:65:cf:2b:c6:67:fe:c7:7f:2a:f0:3b:d9:f5:8c:2f:37:
45:90:3e:9c:42:a0:78:56:e5:ba:e4:b8:dc:7d:cb:67:4f:fe:
cb:28:ce:77:de:f6:ff:68:6c:5b:91:03:74:cf:46:74:1c:7f:
d7:c9:c5:99:b1:55:1c:a7:c8:9a:8c:04:33:41:6b:50:ea:00:
99:ba:7a:8a:41:74:dd:8f:fb:e4:11:02:68:03:0c:18:8c:70:
91:86:60:49:34:a8:6d:f1:88:e2:bd:8b:94:16:42:4a:63:f6:
12:27:35:2e:77:81:2e:a4:ba:14:2c:a0:c2:e6:66:37:a8:a2:
58:27:fb:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:39:45 2024 by rpki-client on console-fra.rpki-client.org