Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/tAXycMiL0l-PcpCd0kWrALEoOyE.roa
File: tAXycMiL0l-PcpCd0kWrALEoOyE.roa (raw, json)
Hash identifier: R49pO96eAO6inyKWG1Sn9m21cVTKviB6dlkl/gBcx5o=
Subject key identifier: B4:05:F2:70:C8:8B:D2:5F:8F:72:90:9D:D2:45:AB:00:B1:28:3B:21
Certificate issuer: /CN=16ea37a8e73e7679a933d70f7b9c872081024455
Certificate serial: 018AEAB931089D519C8AE695BFF31EDCA486
Authority key identifier: 16:EA:37:A8:E7:3E:76:79:A9:33:D7:0F:7B:9C:87:20:81:02:44:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fuo3qOc-dnmpM9cPe5yHIIECRFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/tAXycMiL0l-PcpCd0kWrALEoOyE.roa
Signing time: Sun 01 Oct 2023 10:11:59 +0000
ROA not before: Sun 01 Oct 2023 10:11:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 64458
IP address blocks: 194.59.170.0/24 maxlen: 24
185.81.97.0/24 maxlen: 24
2a05:8640::/29 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ea:b9:31:08:9d:51:9c:8a:e6:95:bf:f3:1e:dc:a4:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16ea37a8e73e7679a933d70f7b9c872081024455
Validity
Not Before: Oct 1 10:11:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b405f270c88bd25f8f72909dd245ab00b1283b21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1f:62:9e:a5:07:87:35:64:1d:6a:c7:58:2d:
8d:2f:72:91:42:1e:4d:43:07:fa:ca:d6:c4:d3:6e:
55:ed:3f:28:f0:29:c3:06:7e:60:dc:02:68:8c:90:
64:df:ec:cc:9d:ef:62:6d:16:ca:e7:7b:d7:13:73:
4e:d7:f0:0a:e7:8f:82:f5:76:3d:d1:66:61:ef:1e:
e4:e8:89:e3:90:30:b9:12:e9:ab:bf:be:65:db:b5:
db:a4:70:9a:82:77:ec:8d:1a:6d:4b:df:c5:b2:09:
31:2f:64:08:e5:6e:3f:d6:67:b1:d4:c8:71:a1:4a:
f7:96:ef:de:d3:d8:81:35:2a:73:88:62:6f:1c:08:
95:9d:ef:93:5d:98:fa:fd:1a:6d:3e:e2:50:61:68:
9b:85:fb:f1:a3:33:94:e8:8c:9a:1f:bf:12:f2:11:
b4:55:21:7d:82:66:41:3c:8e:a0:10:2c:5f:03:84:
c1:c8:48:10:18:5d:3f:e2:38:4f:41:b2:b3:8a:bb:
97:fa:72:41:bf:b2:30:44:9f:be:71:b3:b2:a1:0f:
df:dd:6b:de:fa:b9:90:89:84:a3:2a:06:b7:02:13:
c4:01:4f:66:99:a6:9a:68:9e:3e:6a:be:b0:5b:0b:
20:d8:13:1d:cc:64:63:dc:cc:60:e6:5d:b5:c0:52:
e5:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:05:F2:70:C8:8B:D2:5F:8F:72:90:9D:D2:45:AB:00:B1:28:3B:21
X509v3 Authority Key Identifier:
keyid:16:EA:37:A8:E7:3E:76:79:A9:33:D7:0F:7B:9C:87:20:81:02:44:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fuo3qOc-dnmpM9cPe5yHIIECRFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/tAXycMiL0l-PcpCd0kWrALEoOyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/51cd94-a055-43ee-a09b-472b0d072e83/1/Fuo3qOc-dnmpM9cPe5yHIIECRFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.97.0/24
194.59.170.0/24
IPv6:
2a05:8640::/29
Signature Algorithm: sha256WithRSAEncryption
2b:69:5e:6e:bf:ea:10:a4:96:f1:b1:0d:b6:a0:a9:aa:11:b0:
2d:e4:d6:70:25:71:27:5f:1d:2e:fb:28:43:47:0a:83:94:3b:
0c:c3:38:8b:2b:18:d0:d3:d6:b5:e5:4a:92:33:bf:79:cf:5b:
ef:ba:39:65:51:65:74:95:86:96:cd:45:57:af:38:90:4a:1e:
bb:00:10:bf:51:97:4c:ee:4d:4c:87:8b:0a:c8:1f:50:8c:28:
34:d1:dc:62:bf:47:29:94:69:a6:1e:5b:69:a7:45:b4:a9:2b:
8e:96:57:75:6b:7a:d6:80:63:a7:ed:7e:c9:ca:77:70:96:90:
17:dd:c2:27:61:83:ef:69:9c:0c:40:5a:62:fb:8c:42:d7:bf:
1e:37:fa:9a:03:31:4e:77:2d:25:fe:45:5c:61:3f:4b:b5:7b:
68:99:42:13:d7:c4:02:4b:ff:7a:f2:a8:b3:cd:54:df:3f:36:
49:a9:06:09:c4:5d:64:02:f6:a4:e4:a1:63:4d:e3:a1:45:d8:
78:f1:97:f6:5c:70:9f:89:c7:3b:bb:f1:91:9c:53:88:81:3a:
0b:28:64:49:92:ab:83:62:c5:cc:fa:37:79:bd:02:08:ab:dd:
78:83:12:fa:61:17:b1:45:e3:09:e8:75:c9:ac:b7:57:87:f3:
dd:24:92:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 14 17:21:46 2023 by rpki-client on console-ams.rpki-client.org