Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/TIF5EPZsNTRHDCvyge4a2LZHNoQ.roa
File: TIF5EPZsNTRHDCvyge4a2LZHNoQ.roa (raw, json)
Hash identifier: PVBJoGWdvJt1JGQq4V75xLrsER0LxyDKLPleuOq6eJ4=
Subject key identifier: 4C:81:79:10:F6:6C:35:34:47:0C:2B:F2:81:EE:1A:D8:B6:47:36:84
Certificate issuer: /CN=4a8ae7871525be2ea4d0dffdae4f3a8bff372496
Certificate serial: 018A6EFCC6A59C083BE8C65B6AF0813D15F5
Authority key identifier: 4A:8A:E7:87:15:25:BE:2E:A4:D0:DF:FD:AE:4F:3A:8B:FF:37:24:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SornhxUlvi6k0N_9rk86i_83JJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/TIF5EPZsNTRHDCvyge4a2LZHNoQ.roa
Signing time: Thu 07 Sep 2023 09:32:54 +0000
ROA not before: Thu 07 Sep 2023 09:32:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207503
IP address blocks: 185.102.242.0/23 maxlen: 23
212.110.232.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:6e:fc:c6:a5:9c:08:3b:e8:c6:5b:6a:f0:81:3d:15:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8ae7871525be2ea4d0dffdae4f3a8bff372496
Validity
Not Before: Sep 7 09:32:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4c817910f66c3534470c2bf281ee1ad8b6473684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:cb:cf:8b:de:72:9e:dc:91:33:76:1f:5e:ba:
33:ea:ee:24:67:e6:36:47:cb:df:7f:2c:b2:4a:ba:
53:49:69:64:46:03:d8:1f:2e:14:43:13:42:05:31:
b0:18:2b:1d:d2:00:f9:66:f1:71:f8:2e:70:2e:9d:
c1:44:dc:0d:8e:f9:10:3a:38:76:07:b4:06:83:c7:
cb:07:14:09:bc:c0:84:05:1d:00:d7:ef:b2:10:f1:
fb:3f:9c:20:b1:ac:07:81:48:df:3b:6a:bf:6a:5d:
8c:fd:9e:91:1c:c0:28:d8:08:ee:3d:57:ed:21:5d:
33:60:74:62:72:99:73:fd:77:8c:a0:f3:19:23:8b:
57:8f:8d:62:f3:05:a4:b8:af:c8:c7:d3:1d:3c:4f:
ba:d0:3e:f4:37:f9:d6:51:11:8b:62:43:c2:b6:94:
88:de:2f:ff:6b:13:32:7c:e1:ef:a3:25:00:27:dc:
3b:92:5d:55:ec:58:11:89:a6:5b:8c:90:47:50:4c:
db:99:4e:57:60:1a:2c:f6:76:a3:33:59:13:a1:1a:
bb:43:01:53:8d:a0:04:7e:23:3b:b5:e0:1f:88:dd:
87:1e:ef:65:c4:46:75:e8:2d:b9:0f:77:a1:fd:b7:
cb:ff:49:2f:3c:b1:d1:6e:10:26:d0:ba:c1:35:cc:
85:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:81:79:10:F6:6C:35:34:47:0C:2B:F2:81:EE:1A:D8:B6:47:36:84
X509v3 Authority Key Identifier:
keyid:4A:8A:E7:87:15:25:BE:2E:A4:D0:DF:FD:AE:4F:3A:8B:FF:37:24:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SornhxUlvi6k0N_9rk86i_83JJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/TIF5EPZsNTRHDCvyge4a2LZHNoQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.102.242.0/23
212.110.232.0/21
Signature Algorithm: sha256WithRSAEncryption
84:d3:f4:d7:f2:c8:14:5a:f0:81:de:7a:0a:27:39:16:ce:ca:
c2:4e:b9:53:30:40:b0:da:73:fd:88:7d:a8:2d:ee:b4:06:3d:
9e:ee:9d:a9:1f:4b:cc:bf:af:3b:38:73:8d:b7:a1:40:38:90:
0c:d8:bb:ef:80:e8:e6:7b:7e:17:a5:00:43:c8:37:93:02:c0:
1a:ae:d8:c7:1e:70:4c:91:87:a6:20:5c:2b:f2:88:b6:f2:ef:
2b:78:e6:cd:d8:c0:11:f5:f5:39:06:7c:8a:32:d8:5e:13:ab:
15:04:53:63:f4:f6:08:55:de:88:a2:1f:bf:ac:62:05:77:ef:
6d:c3:87:11:96:02:2b:1a:67:ae:28:09:af:25:31:ef:5a:1d:
c7:8b:d8:98:fb:b2:d6:f7:e0:17:c1:df:9b:f8:14:46:f9:75:
e8:08:10:57:71:6b:eb:51:55:9e:1c:ca:4d:6c:27:32:70:4d:
31:5b:a3:5c:db:cb:01:9e:a9:f7:57:c8:1c:7d:5f:8b:d2:d2:
d6:15:68:18:44:29:18:ec:ea:16:d5:dd:69:bf:b4:43:5b:e7:
6c:30:b6:2c:5a:74:28:14:8b:7b:80:19:45:d9:46:0b:cb:ba:
75:4f:6d:2a:05:62:cd:5f:45:90:ea:6e:bd:2b:8b:c3:e2:ae:
e4:d4:46:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 20 10:02:27 2023 by rpki-client on console-ams.rpki-client.org