Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/T1txpTJuxC6dYlDjNJvhA6uVth0.roa
File: T1txpTJuxC6dYlDjNJvhA6uVth0.roa (raw, json)
Hash identifier: nY0D12n+AXrkSpx9nppsSeWatvZfDjvg4HuWVXn/FF4=
Subject key identifier: 4F:5B:71:A5:32:6E:C4:2E:9D:62:50:E3:34:9B:E1:03:AB:95:B6:1D
Certificate issuer: /CN=ae4a29c6138e2d93d54a36328b94cb1f8a382a6b
Certificate serial: 01876A74F3C1DA6392CD9F62A2EC65E89DBC
Authority key identifier: AE:4A:29:C6:13:8E:2D:93:D5:4A:36:32:8B:94:CB:1F:8A:38:2A:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rkopxhOOLZPVSjYyi5TLH4o4Kms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/T1txpTJuxC6dYlDjNJvhA6uVth0.roa
Signing time: Mon 10 Apr 2023 09:17:42 +0000
ROA not before: Mon 10 Apr 2023 09:17:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202611
IP address blocks: 185.32.184.0/23 maxlen: 24
2a0b:1440::/32 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:34:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:6a:74:f3:c1:da:63:92:cd:9f:62:a2:ec:65:e8:9d:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae4a29c6138e2d93d54a36328b94cb1f8a382a6b
Validity
Not Before: Apr 10 09:17:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4f5b71a5326ec42e9d6250e3349be103ab95b61d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9f:a6:11:60:1b:6f:46:89:10:a2:ae:5f:d5:
e9:a5:fc:0c:3a:d3:9a:6d:61:bc:9b:68:51:d9:d4:
81:f3:92:62:a0:da:1d:45:7f:ff:51:68:3b:29:d3:
b3:08:85:8e:4f:9e:86:5d:33:56:8c:60:c8:19:6b:
7c:e7:93:85:2c:cd:a9:6f:e0:f3:d6:04:f3:25:87:
46:4a:f3:6e:ad:39:65:76:04:ad:69:07:b6:d8:ca:
4a:4e:85:07:d8:e4:19:f8:53:26:81:5b:29:a5:06:
b6:21:a4:41:3e:56:df:ab:2a:58:01:0b:58:75:35:
06:bc:5a:4d:cf:ac:a9:65:9d:35:d3:d0:d9:5d:b7:
cc:c6:0f:92:59:f7:d5:a8:df:73:9a:15:4c:45:ad:
19:6e:d4:8c:e0:91:46:76:c3:7c:ee:50:2f:a3:4b:
64:1b:ba:98:16:94:ba:93:c0:fa:18:76:bc:3b:a1:
5e:57:5b:a2:82:e1:11:52:8c:32:9f:45:21:57:11:
3d:48:59:6f:98:fb:37:35:f3:ab:10:6f:a8:4d:ec:
bd:17:10:bd:d5:22:a5:93:e0:99:3d:f3:6a:76:19:
77:1b:ef:97:ea:a4:0f:19:2c:f5:94:e7:a7:63:c4:
10:d1:c9:ba:1d:58:9c:ea:eb:86:48:6e:bf:15:c7:
3c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:5B:71:A5:32:6E:C4:2E:9D:62:50:E3:34:9B:E1:03:AB:95:B6:1D
X509v3 Authority Key Identifier:
keyid:AE:4A:29:C6:13:8E:2D:93:D5:4A:36:32:8B:94:CB:1F:8A:38:2A:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rkopxhOOLZPVSjYyi5TLH4o4Kms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/T1txpTJuxC6dYlDjNJvhA6uVth0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/rkopxhOOLZPVSjYyi5TLH4o4Kms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.32.184.0/23
IPv6:
2a0b:1440::/32
Signature Algorithm: sha256WithRSAEncryption
71:06:c2:95:2e:2f:74:61:06:76:19:27:af:48:f9:f4:31:31:
22:fc:34:8f:9c:18:66:97:df:87:66:db:44:7e:45:44:f3:01:
14:5e:64:77:91:07:b2:23:cd:fb:2f:bd:6e:76:fa:d0:10:f7:
ad:53:e5:1a:e0:ec:83:05:cb:db:77:96:28:70:1d:5c:35:18:
87:c1:c5:3d:94:36:c7:29:bb:37:90:d1:30:17:e3:24:f2:19:
de:75:2a:9c:20:59:75:b8:5c:ba:7d:cf:02:9d:4d:b3:9a:cb:
de:17:01:c3:f2:3e:bf:9c:cd:0b:23:87:b6:3b:0a:36:38:77:
78:23:1b:8f:b5:7a:e1:69:3e:22:12:c8:79:36:ee:82:4d:2e:
81:73:6a:38:f2:e6:0c:c1:1b:f1:66:a9:da:d5:48:45:97:f6:
1b:55:af:c9:74:ce:d9:11:a3:ed:7d:f0:47:20:6d:20:5a:74:
ca:ce:86:b4:c7:48:a2:cc:f1:30:66:af:43:4b:75:c0:a7:53:
6d:66:64:fe:0f:4e:c4:15:f4:b8:74:2b:9c:20:52:48:b5:ec:
62:f8:7b:ea:fa:72:09:83:5a:34:16:32:29:c1:8e:2c:6c:91:
85:d7:d9:34:67:08:1b:1e:a2:80:5e:ad:2a:bb:b8:22:09:bf:
ec:b0:52:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:19 2024 by rpki-client on console-fra.rpki-client.org