Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/04b23b-9c13-4dd2-bda8-2f22a76996d9/1/Ty_Bz2noRRuu6Exf-YrlTcass1I.roa
File: Ty_Bz2noRRuu6Exf-YrlTcass1I.roa (raw, json)
Hash identifier: +3m1XY0M4A+yhkkz7ORPwiYZ5310USiBAvvfXfEZw5Y=
Subject key identifier: 4F:2F:C1:CF:69:E8:45:1B:AE:E8:4C:5F:F9:8A:E5:4D:C6:AC:B3:52
Certificate issuer: /CN=1a0439448b628cd0ba4232ea5dc39a968da9696e
Certificate serial: 0185727122D50F9941C178000B02F7836CE7
Authority key identifier: 1A:04:39:44:8B:62:8C:D0:BA:42:32:EA:5D:C3:9A:96:8D:A9:69:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GgQ5RItijNC6QjLqXcOalo2paW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/04b23b-9c13-4dd2-bda8-2f22a76996d9/1/Ty_Bz2noRRuu6Exf-YrlTcass1I.roa
Signing time: Mon 02 Jan 2023 12:24:55 +0000
ROA not before: Mon 02 Jan 2023 12:24:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197207
IP address blocks: 185.131.56.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:71:22:d5:0f:99:41:c1:78:00:0b:02:f7:83:6c:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a0439448b628cd0ba4232ea5dc39a968da9696e
Validity
Not Before: Jan 2 12:24:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4f2fc1cf69e8451baee84c5ff98ae54dc6acb352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:27:61:c3:2d:d7:53:54:b1:6e:e9:9d:c9:ed:
9b:f7:94:22:6b:e7:48:27:ae:bb:a7:44:8a:f2:70:
bc:00:9b:e7:54:be:f5:bf:d4:da:45:3d:88:e7:42:
02:2c:5f:c4:c1:6e:db:0d:85:7d:33:88:4c:c1:03:
55:58:f6:30:e4:09:be:ce:81:57:d2:c5:eb:88:33:
67:f9:e6:f6:8e:e2:77:2c:fd:22:ab:cd:eb:1b:ea:
a3:e3:e5:0e:cb:d6:7a:56:cb:58:27:6b:2b:fb:b4:
2d:ac:a5:2f:42:67:1d:11:72:ab:e7:a7:3a:9b:25:
6a:a5:b0:11:77:a9:d5:1f:4a:0f:97:cf:bb:b1:aa:
77:42:58:13:ad:75:43:11:81:e9:7b:ef:ca:bf:cb:
e4:87:36:6f:c3:eb:7a:02:c4:be:bc:40:e9:86:9d:
e6:e0:d4:d9:0d:10:58:f4:e2:cd:82:28:d5:00:66:
f2:16:0f:ef:d3:84:2c:ec:1c:17:dc:e3:61:71:6d:
f2:a1:02:4a:a3:90:88:e5:a7:f1:4d:65:8b:49:ad:
e5:9e:94:f7:bc:f0:e0:ee:b0:c3:b0:9c:65:bd:a9:
54:1f:2d:a7:92:84:2d:41:59:6d:f3:e7:38:d0:ab:
d1:1c:06:5d:17:d5:06:55:0f:8b:95:7f:50:ae:e9:
7d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:2F:C1:CF:69:E8:45:1B:AE:E8:4C:5F:F9:8A:E5:4D:C6:AC:B3:52
X509v3 Authority Key Identifier:
keyid:1A:04:39:44:8B:62:8C:D0:BA:42:32:EA:5D:C3:9A:96:8D:A9:69:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GgQ5RItijNC6QjLqXcOalo2paW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/04b23b-9c13-4dd2-bda8-2f22a76996d9/1/Ty_Bz2noRRuu6Exf-YrlTcass1I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/04b23b-9c13-4dd2-bda8-2f22a76996d9/1/GgQ5RItijNC6QjLqXcOalo2paW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.131.56.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:05:6e:1f:e6:49:42:f3:1a:06:d5:2a:3d:99:31:a2:92:3b:
66:dc:ef:03:af:bf:94:dc:d1:31:9b:84:c4:2c:19:1a:0b:c7:
71:a6:26:59:6a:24:91:21:32:ec:d8:4f:7c:f8:ef:46:0e:a2:
f8:b6:bf:f1:8e:ab:f2:a4:c3:bd:ff:69:9a:86:a2:de:b9:74:
ca:df:55:d4:79:8f:00:26:1d:7c:22:13:75:21:2a:ad:66:e6:
3d:87:b4:5b:a5:d1:f4:fe:55:fb:0a:1f:9b:9c:16:cb:4c:be:
9d:26:ff:8c:7b:50:22:32:a4:7c:95:e3:2d:f4:0a:b6:77:90:
13:f8:2d:c8:56:35:3c:b9:0d:2b:ef:8c:a5:d6:17:ad:d9:5a:
7e:4e:7e:2d:93:2f:5f:cf:42:4a:fd:80:1a:eb:95:68:7c:54:
be:da:df:ae:98:29:f2:a5:ed:b2:05:8a:2c:b8:9e:f4:7f:ed:
d4:5b:39:68:05:ac:2d:b7:02:19:d1:94:b9:93:99:88:5c:aa:
61:8c:76:5e:b6:fb:95:14:0e:fd:4c:f0:15:fd:1d:30:49:67:
0e:4a:3f:a2:70:99:29:98:50:54:8f:5f:c5:61:37:4f:77:3d:
48:48:9b:4b:d4:b5:65:52:13:1a:9b:6e:99:52:78:17:78:17:
9a:5b:f6:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:22:48 2024 by rpki-client on console-fra.rpki-client.org