Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/ebc2e4-402f-47c1-9b28-14f21ae21ed3/1/Ti6vDn8GLn5KDySO-KzOazUj7eQ.roa
File: Ti6vDn8GLn5KDySO-KzOazUj7eQ.roa (raw, json)
Hash identifier: JYs/BS4cI5osZA+sc7ATwXooldm1YkyiWOnhGeRMEaw=
Subject key identifier: 4E:2E:AF:0E:7F:06:2E:7E:4A:0F:24:8E:F8:AC:CE:6B:35:23:ED:E4
Certificate issuer: /CN=dbb9bc2de36cf23b689f3c72e80abcfe482026c1
Certificate serial: 01856F1DA1FFBCBF911B0F23AFCD153116CB
Authority key identifier: DB:B9:BC:2D:E3:6C:F2:3B:68:9F:3C:72:E8:0A:BC:FE:48:20:26:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/27m8LeNs8jtonzxy6Aq8_kggJsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/ebc2e4-402f-47c1-9b28-14f21ae21ed3/1/Ti6vDn8GLn5KDySO-KzOazUj7eQ.roa
Signing time: Sun 01 Jan 2023 20:54:51 +0000
ROA not before: Sun 01 Jan 2023 20:54:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60558
IP address blocks: 185.56.136.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:1d:a1:ff:bc:bf:91:1b:0f:23:af:cd:15:31:16:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbb9bc2de36cf23b689f3c72e80abcfe482026c1
Validity
Not Before: Jan 1 20:54:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4e2eaf0e7f062e7e4a0f248ef8acce6b3523ede4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:71:75:4a:b5:c8:04:8f:44:af:23:47:dd:2c:
dc:a6:a5:e0:33:4e:8c:31:f6:89:25:51:e1:de:11:
70:96:67:5a:1a:78:62:68:e2:99:e9:5b:27:04:ef:
3d:be:97:5e:da:ac:1e:a9:1c:53:33:aa:a8:43:a2:
e0:a0:31:3b:9c:57:c1:e7:77:d4:fa:ef:bd:9b:7c:
a6:0b:8a:8d:89:a6:49:5c:e7:6e:2b:01:cd:02:3a:
50:7f:e7:3c:bd:f3:9b:2b:9d:99:c2:ae:86:cf:88:
be:cb:4c:47:eb:bd:5c:a1:7c:6f:95:66:40:b2:fb:
08:3b:ca:0c:a2:1d:74:8f:bc:94:b9:b4:a5:13:d7:
d0:8d:20:66:fd:89:36:7b:fb:6b:51:56:46:76:2f:
e2:86:5a:78:cd:b0:ca:7c:90:86:9b:41:99:0a:93:
fe:9e:f3:d8:ed:2a:ec:73:c7:5f:6a:9b:5d:04:ef:
d0:1b:60:15:81:f3:85:6d:44:96:e6:a6:3f:bc:cb:
2e:2e:a9:e5:23:e5:02:fb:e0:9c:61:51:b2:4f:7d:
4e:f8:ec:73:93:51:04:42:d1:c7:65:4d:8c:1a:86:
3b:3d:b7:eb:ff:c1:41:f5:f4:5f:8c:54:7b:1b:e9:
30:91:3b:f9:18:0d:fa:e0:5a:dd:0c:95:ef:64:5f:
ff:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:2E:AF:0E:7F:06:2E:7E:4A:0F:24:8E:F8:AC:CE:6B:35:23:ED:E4
X509v3 Authority Key Identifier:
keyid:DB:B9:BC:2D:E3:6C:F2:3B:68:9F:3C:72:E8:0A:BC:FE:48:20:26:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27m8LeNs8jtonzxy6Aq8_kggJsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ebc2e4-402f-47c1-9b28-14f21ae21ed3/1/Ti6vDn8GLn5KDySO-KzOazUj7eQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ebc2e4-402f-47c1-9b28-14f21ae21ed3/1/27m8LeNs8jtonzxy6Aq8_kggJsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.56.136.0/22
Signature Algorithm: sha256WithRSAEncryption
60:72:20:ef:33:cc:20:cf:a9:10:0a:28:ef:af:e1:ad:22:fa:
de:09:fa:47:50:01:89:db:d2:65:63:c6:b0:50:a8:df:d1:03:
54:2f:56:df:ac:39:96:b4:e0:4a:95:40:09:f9:48:da:2b:f2:
93:e1:d3:ad:c3:a6:65:c0:0b:e0:a8:ee:76:39:21:8e:dc:04:
f5:27:ac:9f:f4:5c:67:98:7d:ba:4b:fa:03:f5:ed:62:3b:d7:
2d:55:95:69:5e:e1:2b:c3:a4:0e:3b:f1:fd:c3:f6:f9:0e:86:
4c:56:6e:13:81:f8:05:3d:bb:f0:d5:88:61:aa:45:74:24:c4:
be:bf:e9:c8:a2:40:c7:4b:5c:7b:e8:be:22:e9:28:6d:be:2e:
10:bf:e7:ae:87:1a:84:1b:7f:65:77:e7:2b:29:d8:19:9d:3e:
c2:60:0f:f5:d8:c0:e6:52:cc:3d:2c:47:73:a2:d0:1b:b2:5e:
15:a1:97:73:3e:3f:67:f6:1b:93:19:fc:c9:b2:94:9e:23:97:
53:9b:71:00:33:64:28:2b:ad:f0:6c:d9:ae:c8:56:f8:81:99:
da:c7:5e:52:27:a1:6f:49:55:2d:0a:e0:27:11:57:93:31:38:
bd:bb:04:41:d5:71:e6:90:e5:c4:8f:88:5a:81:87:1c:10:59:
2f:7a:48:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:00:51 2024 by rpki-client on console-ams.rpki-client.org