Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/30e653-9c0b-4164-9a7d-ca7e6c3ae8ce/1/1-tYfXKCp2EJUJ9O3J5aMXuKlV8s.roa
File: 1-tYfXKCp2EJUJ9O3J5aMXuKlV8s.roa (raw, json)
Hash identifier: O8hRnj8ioJRX9I2Zd5Lou+xazuhfuNbBFDCvtS3vxHc=
Subject key identifier: FA:D6:1F:5C:A0:A9:D8:42:54:27:D3:B7:27:96:8C:5E:E2:A5:57:CB
Certificate issuer: /CN=15982be200f2ed9be40fc983d94d9c726350a9d9
Certificate serial: 018C87B9ED52562913200943B1BFD148C95A
Authority key identifier: 15:98:2B:E2:00:F2:ED:9B:E4:0F:C9:83:D9:4D:9C:72:63:50:A9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZgr4gDy7ZvkD8mD2U2ccmNQqdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/30e653-9c0b-4164-9a7d-ca7e6c3ae8ce/1/1-tYfXKCp2EJUJ9O3J5aMXuKlV8s.roa
Signing time: Wed 20 Dec 2023 14:55:58 +0000
ROA not before: Wed 20 Dec 2023 14:55:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49981
IP address blocks: 185.13.226.0/24 maxlen: 24
185.13.227.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:87:b9:ed:52:56:29:13:20:09:43:b1:bf:d1:48:c9:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15982be200f2ed9be40fc983d94d9c726350a9d9
Validity
Not Before: Dec 20 14:55:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fad61f5ca0a9d8425427d3b727968c5ee2a557cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:fa:66:32:61:1d:d2:c1:82:b9:5e:72:0f:36:
c2:bb:39:a1:57:f0:8c:c6:f7:16:ae:36:b9:f0:45:
6c:d3:3e:25:27:e1:2e:8b:bd:bf:ea:b8:90:1e:ba:
06:4d:b7:7d:d9:04:e4:24:60:13:7b:75:40:a1:02:
b1:8f:a2:52:f2:82:06:b2:6e:68:9b:f7:5a:07:e0:
f8:e5:b8:eb:b1:32:9e:41:b9:fb:c7:9e:52:02:9c:
a6:ed:39:ef:f0:a3:31:03:e9:c4:ec:03:56:d6:6b:
41:89:a7:7c:a8:2a:46:17:4b:da:78:26:75:42:13:
77:af:9c:05:20:bd:91:1c:9c:18:b7:0d:40:c8:73:
0d:f5:3f:62:1b:1d:f0:fc:ce:b9:1e:6c:e8:1d:0f:
1f:08:e6:7f:86:9d:64:f4:ab:ee:20:fb:51:9c:48:
5b:0f:e5:ac:c6:38:04:3d:67:da:56:15:fa:fe:13:
e9:87:6a:7d:ed:89:8b:10:61:b8:d2:3d:7c:f6:db:
c5:05:e3:77:4e:68:14:25:45:42:be:1e:fb:c6:cd:
a7:1a:05:60:82:b9:28:79:b7:8a:62:e2:dc:95:6c:
7c:31:9b:cc:bd:92:de:a6:82:db:00:ad:44:52:b0:
f4:8a:5d:ef:d4:70:eb:43:82:6c:44:cb:d6:f4:94:
0c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:D6:1F:5C:A0:A9:D8:42:54:27:D3:B7:27:96:8C:5E:E2:A5:57:CB
X509v3 Authority Key Identifier:
keyid:15:98:2B:E2:00:F2:ED:9B:E4:0F:C9:83:D9:4D:9C:72:63:50:A9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZgr4gDy7ZvkD8mD2U2ccmNQqdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/30e653-9c0b-4164-9a7d-ca7e6c3ae8ce/1/1-tYfXKCp2EJUJ9O3J5aMXuKlV8s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/30e653-9c0b-4164-9a7d-ca7e6c3ae8ce/1/FZgr4gDy7ZvkD8mD2U2ccmNQqdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.13.226.0/23
Signature Algorithm: sha256WithRSAEncryption
0e:96:08:35:d2:1f:58:bd:87:e7:2b:bd:b7:45:e1:bb:41:33:
6e:19:69:03:d8:23:f5:95:08:55:2e:7c:84:f2:91:f0:e7:95:
95:14:dc:c2:29:c8:bd:d3:6d:b9:bc:44:42:64:ef:8b:4d:c7:
75:bd:70:c9:7e:c3:dd:00:8a:01:82:3c:87:f0:a4:c1:53:86:
8e:b6:a1:e0:d9:35:87:94:7b:b0:ed:1f:ba:24:33:d7:45:51:
3c:1b:d5:cf:5e:97:76:67:1c:fd:bf:53:f4:ca:57:22:f4:63:
ce:b6:36:02:f5:16:88:fb:92:44:9b:32:4f:65:c0:c4:25:6a:
7c:16:96:7a:5c:be:69:6d:82:79:6c:4a:bc:ec:71:c6:99:44:
3f:a6:03:cf:cd:ea:a9:d0:6f:85:56:0f:87:11:d4:1a:e0:ae:
5a:26:a0:ec:27:80:7e:3c:bd:32:f5:48:0f:63:6d:b6:3b:8c:
a6:0c:6e:a6:34:2d:b5:9a:0b:97:11:26:5d:4d:c9:07:d2:3e:
a8:50:81:fc:f6:b9:3f:86:c6:94:29:f2:90:78:9b:83:a1:9a:
e7:25:a6:61:fc:a5:51:d4:13:ce:c6:bb:90:f1:b1:81:ca:46:
25:1b:a4:74:8b:9c:3c:b4:b7:4a:e5:fd:59:51:94:45:b9:64:
64:5f:c5:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:51:36 2024 by rpki-client on console-fra.rpki-client.org