Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/8d7c02-b38d-4d65-af35-837d0031b3d1/1/tZKpXKkfkF2csJMFyZ2ZAwYV7as.roa
File: tZKpXKkfkF2csJMFyZ2ZAwYV7as.roa (raw, json)
Hash identifier: t7qeRNtThiCOWCibDZkXvNiFZpCQmMjmDR1A4XQ8EaE=
Subject key identifier: B5:92:A9:5C:A9:1F:90:5D:9C:B0:93:05:C9:9D:99:03:06:15:ED:AB
Certificate issuer: /CN=4a222ed1b8a533858f4658c5d2539faf52abdaa7
Certificate serial: 01856ECB7E9FA97BEEB27F579F094DA4167F
Authority key identifier: 4A:22:2E:D1:B8:A5:33:85:8F:46:58:C5:D2:53:9F:AF:52:AB:DA:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SiIu0bilM4WPRljF0lOfr1Kr2qc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/8d7c02-b38d-4d65-af35-837d0031b3d1/1/tZKpXKkfkF2csJMFyZ2ZAwYV7as.roa
Signing time: Sun 01 Jan 2023 19:25:07 +0000
ROA not before: Sun 01 Jan 2023 19:25:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49952
IP address blocks: 185.197.208.0/24 maxlen: 24
91.213.224.0/24 maxlen: 24
2a00:e4a0:100::/40 maxlen: 40
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:cb:7e:9f:a9:7b:ee:b2:7f:57:9f:09:4d:a4:16:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a222ed1b8a533858f4658c5d2539faf52abdaa7
Validity
Not Before: Jan 1 19:25:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b592a95ca91f905d9cb09305c99d99030615edab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:24:58:40:b4:1a:85:24:c7:d7:ab:af:af:d3:
0d:1a:f0:fe:c6:b7:95:2a:b3:63:03:ee:42:cc:dc:
b5:ab:55:2d:10:2a:a1:b7:f0:53:be:16:a4:8d:6d:
32:25:96:b1:04:27:4c:b0:67:10:4c:ad:64:ee:6d:
e0:2f:a2:87:c5:cc:34:48:05:05:22:bd:e3:4b:71:
6c:17:8e:50:6f:4b:44:00:04:23:99:82:c5:48:51:
7f:cf:1f:94:35:ac:73:92:7d:5a:cd:29:96:a5:07:
fb:82:8b:cd:e4:35:db:ff:de:da:82:05:a0:25:d5:
42:5c:9f:63:7f:93:8b:a2:0a:70:82:6d:9a:72:c2:
e8:c6:a1:c4:08:aa:91:e0:4b:5c:0b:36:91:1f:4d:
71:98:2a:a8:e5:8c:3e:5b:16:db:ef:e1:8e:10:c4:
61:bf:5e:48:52:c5:5e:7e:84:fd:08:3a:e0:a1:ac:
7e:c2:0f:5f:e4:fd:ea:1f:71:f7:d1:f8:4e:e5:f4:
4e:28:32:7c:28:48:99:bd:0a:55:5c:12:43:38:1e:
10:f0:45:c6:ca:af:9a:68:2d:2b:83:bc:6f:73:4e:
30:91:91:67:eb:3d:66:d2:01:93:62:28:de:c1:ed:
a7:ad:ae:65:27:29:89:d7:5f:16:e2:19:02:10:33:
8f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:92:A9:5C:A9:1F:90:5D:9C:B0:93:05:C9:9D:99:03:06:15:ED:AB
X509v3 Authority Key Identifier:
keyid:4A:22:2E:D1:B8:A5:33:85:8F:46:58:C5:D2:53:9F:AF:52:AB:DA:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SiIu0bilM4WPRljF0lOfr1Kr2qc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8d7c02-b38d-4d65-af35-837d0031b3d1/1/tZKpXKkfkF2csJMFyZ2ZAwYV7as.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8d7c02-b38d-4d65-af35-837d0031b3d1/1/SiIu0bilM4WPRljF0lOfr1Kr2qc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.224.0/24
185.197.208.0/24
IPv6:
2a00:e4a0:100::/40
Signature Algorithm: sha256WithRSAEncryption
5b:3c:bc:14:0b:09:cb:57:e2:31:9e:ee:e7:a1:b1:e3:76:6c:
fc:31:de:80:98:7e:c7:2a:74:07:51:4a:af:f4:52:cf:c9:94:
2d:1f:e7:9f:61:c1:12:e9:47:2a:9e:7f:c5:59:23:d3:bf:a2:
69:72:26:00:5a:4b:42:d9:cb:bd:ac:97:02:4e:15:51:92:a5:
c2:55:a1:61:a3:42:84:67:0c:41:38:74:d3:4a:da:08:92:62:
41:7e:61:aa:5b:e4:ee:fc:c5:45:8b:72:e2:d1:14:ec:83:02:
37:38:ca:25:ad:5c:39:04:ca:72:6e:e6:4e:99:45:2b:7a:45:
53:2d:51:5a:45:e3:3e:52:de:8d:8a:34:35:e5:b0:0e:05:84:
dd:36:7e:42:11:e3:35:ae:3e:ac:4a:8c:95:aa:c9:0b:30:a3:
85:31:6b:6c:b3:ba:b8:62:89:e8:97:bc:6b:0a:0a:cd:57:af:
3a:f4:de:c2:e7:fb:a3:59:35:f6:f9:c2:fa:61:e2:c9:2d:6d:
a0:ee:af:ad:34:0f:94:be:35:29:9c:28:d5:00:1a:74:60:90:
be:ce:91:aa:ca:3f:6b:cc:e5:bc:41:52:a0:be:6c:1c:ab:dc:
b3:53:70:30:b0:07:e1:86:5d:89:3b:27:23:42:73:be:0c:85:
7f:14:af:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:31 2023 by rpki-client on console-fra.rpki-client.org