Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/Y2Td0-Cak0KukmpUBzC0DCKtzik.roa
File: Y2Td0-Cak0KukmpUBzC0DCKtzik.roa (raw, json)
Hash identifier: eAYD+YPzTffzSv+GXUxQnEQj7eGhk+ZC2VUT3D9s5sQ=
Subject key identifier: 63:64:DD:D3:E0:9A:93:42:AE:92:6A:54:07:30:B4:0C:22:AD:CE:29
Certificate issuer: /CN=4da84d247ce37cdccf06e1571d226a2b85677bcd
Certificate serial: 0186EE67D53B9F595A57C72DA9B9A9AB867A
Authority key identifier: 4D:A8:4D:24:7C:E3:7C:DC:CF:06:E1:57:1D:22:6A:2B:85:67:7B:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/Y2Td0-Cak0KukmpUBzC0DCKtzik.roa
Signing time: Fri 17 Mar 2023 07:10:27 +0000
ROA not before: Fri 17 Mar 2023 07:10:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57152
IP address blocks: 93.180.132.0/24 maxlen: 24
93.180.133.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ee:67:d5:3b:9f:59:5a:57:c7:2d:a9:b9:a9:ab:86:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4da84d247ce37cdccf06e1571d226a2b85677bcd
Validity
Not Before: Mar 17 07:10:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6364ddd3e09a9342ae926a540730b40c22adce29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8e:85:35:bd:fb:c2:fc:e6:0d:53:16:67:d1:
86:05:e4:f0:45:20:5c:e7:51:e3:39:70:14:fa:d9:
8e:1e:0c:09:9e:5a:68:47:f7:5b:eb:26:a6:43:2b:
70:01:6c:2e:c9:ae:b2:8d:d5:85:46:64:9f:d4:9b:
e3:07:59:dc:a1:79:72:9b:41:70:fa:8f:a0:e4:7c:
75:13:96:4c:ca:b7:10:dd:cb:8d:a5:cd:fb:3a:ba:
ef:64:e9:18:25:83:49:6f:24:6d:d6:8e:00:92:16:
fb:70:48:84:4f:38:c7:d6:24:a5:1d:36:f7:9c:18:
39:81:35:3f:53:1b:a2:a1:f1:d0:0d:5c:59:ee:e6:
a9:db:20:b8:4d:40:90:5d:fc:0b:cd:aa:77:6b:81:
48:d7:4f:ac:a7:47:41:cc:dc:f0:78:0e:9b:b9:0e:
ac:72:9c:ab:05:49:aa:e1:bf:ad:1f:e5:64:5c:0a:
26:35:55:00:a0:a7:86:0e:b1:0a:f8:c9:14:af:89:
75:f3:33:f8:96:56:15:a6:17:36:3b:3f:6c:9e:c9:
0e:8c:7c:58:fb:d0:48:61:a7:53:fc:15:37:ba:da:
cd:f7:d8:14:04:91:34:ab:68:7e:04:96:a7:85:d5:
bf:b7:9e:1f:31:a1:0b:5a:f7:90:37:59:d4:04:a7:
a9:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:64:DD:D3:E0:9A:93:42:AE:92:6A:54:07:30:B4:0C:22:AD:CE:29
X509v3 Authority Key Identifier:
keyid:4D:A8:4D:24:7C:E3:7C:DC:CF:06:E1:57:1D:22:6A:2B:85:67:7B:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TahNJHzjfNzPBuFXHSJqK4Vne80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/Y2Td0-Cak0KukmpUBzC0DCKtzik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/210fbb-aa6e-49c9-918b-5558a8b53e3d/1/TahNJHzjfNzPBuFXHSJqK4Vne80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.180.132.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:d0:d9:06:8f:ed:f9:ba:c9:32:c3:aa:b2:47:6a:2e:a8:05:
a2:62:56:7c:95:4c:8c:95:8c:8e:6b:17:ba:42:2b:8d:55:5d:
21:c8:39:8f:f6:7e:db:f6:8e:00:f3:2b:d5:74:5f:e9:1b:a1:
00:2a:0a:5b:40:c2:92:17:33:3a:3e:0f:85:8b:b6:b0:aa:de:
b8:fd:66:56:a1:5a:ba:29:c7:3d:eb:ec:c8:10:05:03:6e:62:
8b:e0:5b:90:8f:a3:b9:05:1b:5f:d1:1c:6a:00:c8:49:74:0c:
5c:09:18:e9:d1:6d:06:94:16:09:1a:45:50:65:22:d1:ac:23:
a6:24:fc:d6:46:6a:59:3e:42:dd:e6:85:33:09:a9:ce:fb:77:
50:23:a7:ad:11:5e:db:69:02:08:99:20:fa:3e:bc:97:74:bf:
94:c8:4d:93:40:e7:f7:67:35:45:7a:95:22:15:c1:88:d1:c1:
ff:96:74:55:9a:1a:cc:3e:9c:88:0f:c6:bc:7a:0a:00:81:af:
7c:fd:1c:bb:61:61:07:48:f4:c2:ef:c2:6f:72:49:ab:8b:31:
99:c3:55:c7:c1:2f:5b:94:c9:c3:96:a3:e6:4e:14:51:03:1a:
6c:26:a4:f3:66:8c:77:c6:e5:41:40:32:35:5f:77:20:c3:12:
e4:c3:6a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:02:55 2024 by rpki-client on console-ams.rpki-client.org