Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/TZ2PVLV0SuLRf6DacN01_bs5i60.roa
File: TZ2PVLV0SuLRf6DacN01_bs5i60.roa (raw, json)
Hash identifier: SVIRjL/ZG9plv4INd0bW2Ap7LWPDWp7rxQPFW6pjVKw=
Subject key identifier: 4D:9D:8F:54:B5:74:4A:E2:D1:7F:A0:DA:70:DD:35:FD:BB:39:8B:AD
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 0185727A410D22DE508A64CE5AEBE6C721AC
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/TZ2PVLV0SuLRf6DacN01_bs5i60.roa
Signing time: Mon 02 Jan 2023 12:34:52 +0000
ROA not before: Mon 02 Jan 2023 12:34:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209642
IP address blocks: 185.129.111.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:7a:41:0d:22:de:50:8a:64:ce:5a:eb:e6:c7:21:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jan 2 12:34:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4d9d8f54b5744ae2d17fa0da70dd35fdbb398bad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b7:f2:1a:fb:e5:b4:aa:10:e1:22:e1:9a:d6:
31:77:3f:5b:00:28:86:fb:ce:ba:b8:8b:f2:aa:98:
61:68:a4:3c:48:80:65:97:c1:a4:9f:6a:dd:62:13:
08:85:75:1f:c2:71:5f:5d:b8:d8:5a:6f:a6:5d:c9:
ff:aa:f9:35:21:dd:e8:b3:c7:4d:0f:8c:91:0e:e2:
53:79:81:97:37:ca:fb:32:75:fa:23:ef:b1:e5:ab:
ab:11:4f:cf:21:c4:82:69:03:6d:48:44:e1:15:02:
1c:88:2b:2f:0e:5b:84:cf:e0:b0:60:bd:57:93:50:
3a:63:65:1e:d6:da:89:76:d1:19:8e:2b:b5:4c:42:
9b:12:44:54:f8:22:58:41:2f:a5:08:7e:4b:96:12:
5c:58:c1:89:2d:6a:76:aa:71:f2:a2:e4:a0:19:c6:
01:0f:27:19:ee:23:9d:52:1c:f5:c5:a8:18:da:c4:
be:af:53:35:af:26:ad:ec:d5:59:4d:97:bc:d7:c3:
45:e1:14:d5:80:b2:01:5e:74:1c:2d:79:75:4c:20:
d3:e4:39:fb:bb:52:ad:c9:f4:81:81:cc:67:ca:b9:
e6:bc:6c:2c:e0:0c:d1:06:d0:fb:68:bd:1d:54:d8:
84:04:67:c5:4e:e4:70:b6:df:66:18:c5:f5:64:47:
d6:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:9D:8F:54:B5:74:4A:E2:D1:7F:A0:DA:70:DD:35:FD:BB:39:8B:AD
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/TZ2PVLV0SuLRf6DacN01_bs5i60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.129.111.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:d4:ec:b6:08:f5:4d:a8:6f:0e:d7:bd:63:74:35:af:63:ce:
a7:5b:b3:69:81:d4:fa:17:5c:e7:62:c3:b1:d4:8a:69:2b:92:
87:cd:2d:a5:63:27:2e:4d:89:b0:fc:36:e5:2c:d7:91:e3:59:
7c:51:25:d4:f1:86:57:a8:98:2a:74:f4:b0:59:58:cb:a1:b2:
86:c7:9b:55:c8:0d:ec:f6:33:46:4e:69:7b:f8:7a:b7:29:c5:
79:3e:45:aa:3f:3e:2a:37:9f:1b:7f:70:d7:a8:ad:8a:08:05:
e8:53:b8:02:0c:8d:f5:10:6e:86:e2:fa:9f:06:10:c5:62:80:
60:bc:46:b3:17:01:df:06:09:50:e7:d3:c7:11:d6:d8:a7:5a:
ff:c8:63:8e:b2:a5:8b:08:5a:58:c9:71:85:a1:e6:fa:8c:6b:
60:1f:31:6e:43:c9:43:46:93:f6:a7:d4:43:60:9f:ec:b7:f8:
65:4f:33:e3:7f:9d:b9:4a:62:2c:3b:33:29:46:34:d3:ee:05:
5f:59:6a:3c:fe:e0:d8:9d:97:e8:23:c2:5a:b3:87:3c:68:93:
da:bc:a6:5d:ae:5a:5a:9f:e6:7d:d2:bd:5e:f9:a5:64:5f:75:
35:ad:20:23:09:ad:dc:0f:2e:a0:e2:6d:05:ae:a8:d3:f2:13:
a7:9a:4a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:24 2023 by rpki-client on console-ams.rpki-client.org