Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/ttb_38z68_iRGUgcuxuyvCDdoBw.roa
File: ttb_38z68_iRGUgcuxuyvCDdoBw.roa (raw, json)
Hash identifier: M19/f0Z2hJ8Zpt3eCZznTtRyxe2n9xysN0wDrDNZRBU=
Subject key identifier: B6:D6:FF:DF:CC:FA:F3:F8:91:19:48:1C:BB:1B:B2:BC:20:DD:A0:1C
Certificate issuer: /CN=d48555f9a52727f6bcf715cb4750a2a4a6c35161
Certificate serial: 018572D5C98AE63B3E129FE2A0B6D37A05CD
Authority key identifier: D4:85:55:F9:A5:27:27:F6:BC:F7:15:CB:47:50:A2:A4:A6:C3:51:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1IVV-aUnJ_a89xXLR1CipKbDUWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/ttb_38z68_iRGUgcuxuyvCDdoBw.roa
Signing time: Mon 02 Jan 2023 14:14:51 +0000
ROA not before: Mon 02 Jan 2023 14:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 54103
IP address blocks: 130.185.172.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:d5:c9:8a:e6:3b:3e:12:9f:e2:a0:b6:d3:7a:05:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48555f9a52727f6bcf715cb4750a2a4a6c35161
Validity
Not Before: Jan 2 14:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b6d6ffdfccfaf3f89119481cbb1bb2bc20dda01c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:9f:a1:fa:45:a5:f0:3c:46:36:13:7c:28:45:
62:38:0a:dc:8b:a8:0a:07:01:aa:52:ce:0d:8d:4d:
65:72:95:5e:bd:0e:8c:8c:62:62:c1:7e:fc:f4:76:
ee:d6:fc:fb:9c:e7:ba:e4:a9:1b:aa:b7:f9:40:8e:
a8:57:f4:48:7d:c3:2b:97:9a:1d:5e:b4:a9:c0:eb:
01:c2:01:40:63:ea:62:b1:50:04:12:08:f1:90:46:
32:da:02:40:16:75:09:3b:06:72:80:ac:c0:c7:bb:
63:8b:15:25:dc:67:d7:4c:5d:88:30:b5:c0:d8:5c:
c0:fe:3e:51:04:a5:05:36:28:68:02:ab:a1:ed:c8:
28:29:50:63:5d:a4:69:8d:f8:cf:00:7e:1c:ee:10:
7d:b3:67:95:9f:0c:d7:83:f6:2d:bc:4f:66:26:a2:
d9:5c:be:ec:3c:a9:8b:6c:f2:93:63:36:a6:4d:e5:
41:ff:2a:64:32:36:a2:5a:ec:34:ba:d7:7b:1f:55:
43:2e:01:c0:1e:1c:03:77:64:33:d0:53:37:90:b0:
f7:cd:c7:00:b4:66:aa:5d:ba:d3:10:af:9d:e6:1b:
48:fb:a3:cc:d7:c8:90:06:77:87:70:35:0c:00:50:
90:44:06:b3:3f:ed:13:7c:90:52:62:34:5d:b1:1f:
0c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:D6:FF:DF:CC:FA:F3:F8:91:19:48:1C:BB:1B:B2:BC:20:DD:A0:1C
X509v3 Authority Key Identifier:
keyid:D4:85:55:F9:A5:27:27:F6:BC:F7:15:CB:47:50:A2:A4:A6:C3:51:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IVV-aUnJ_a89xXLR1CipKbDUWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/ttb_38z68_iRGUgcuxuyvCDdoBw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/1IVV-aUnJ_a89xXLR1CipKbDUWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.185.172.0/22
Signature Algorithm: sha256WithRSAEncryption
c4:87:91:be:a5:ea:f6:85:24:37:b1:f6:2d:c9:b0:4c:4e:3c:
5b:f5:e5:72:02:ef:7d:b9:4c:b2:ab:d8:34:51:c6:21:e1:46:
7f:43:7c:6b:82:ad:44:9a:61:ce:e7:2d:80:37:c5:8a:0e:05:
4e:ee:57:bc:5b:3b:0a:ac:0c:24:a8:cc:35:b2:7d:50:12:e5:
f4:5b:ae:7c:27:6e:b6:0b:e2:93:6b:93:6b:2f:59:2c:46:36:
ca:7c:79:0e:f8:8e:2f:35:c5:ba:6b:37:f6:5f:cf:fc:78:24:
62:78:4f:9b:80:38:67:9c:7d:5d:ff:7a:90:14:64:f9:d8:08:
a2:70:76:fb:34:aa:ac:1f:7b:af:d0:e7:d0:41:2d:64:b0:20:
a7:1c:da:61:34:3f:75:f4:fa:ef:18:3c:9b:79:47:6f:39:be:
35:6d:44:06:a6:1b:80:0b:df:b1:74:e7:6f:34:17:78:fb:55:
42:ff:63:5c:ce:ce:9f:0f:b9:f4:60:da:be:3f:67:a5:aa:b4:
44:ea:d0:36:11:f4:04:d1:7e:49:76:4e:66:8c:e9:dd:4d:bb:
b0:66:ef:d3:fe:ae:25:81:38:04:16:e8:49:8d:72:a1:f7:2e:
6b:be:7f:54:48:c9:a8:9e:5c:0c:20:d4:15:cb:1f:db:6b:34:
8e:5b:d1:ff
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVy1cmK5js+Ep/ioLbTegXNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0ODU1NWY5YTUyNzI3ZjZiY2Y3MTVjYjQ3NTBhMmE0YTZj
MzUxNjEwHhcNMjMwMTAyMTQxNDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNmQ2ZmZkZmNjZmFmM2Y4OTExOTQ4MWNiYjFiYjJiYzIwZGRhMDFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJ+h+kWl8DxGNhN8KEViOArci6gK
BwGqUs4NjU1lcpVevQ6MjGJiwX789Hbu1vz7nOe65Kkbqrf5QI6oV/RIfcMrl5od
XrSpwOsBwgFAY+pisVAEEgjxkEYy2gJAFnUJOwZygKzAx7tjixUl3GfXTF2IMLXA
2FzA/j5RBKUFNihoAquh7cgoKVBjXaRpjfjPAH4c7hB9s2eVnwzXg/YtvE9mJqLZ
XL7sPKmLbPKTYzamTeVB/ypkMjaiWuw0utd7H1VDLgHAHhwDd2Qz0FM3kLD3zccA
tGaqXbrTEK+d5htI+6PM18iQBneHcDUMAFCQRAazP+0TfJBSYjRdsR8MTwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLbW/9/M+vP4kRlIHLsbsrwg3aAcMB8GA1UdIwQY
MBaAFNSFVfmlJyf2vPcVy0dQoqSmw1FhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUlWVi1hVW5KX2E4OXhYTFIxQ2lwS2JEVVdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9lNDU1NzctNjViMS00ZDQzLTg1M2Et
MDJhYmY4NTcyZmNiLzEvdHRiXzM4ejY4X2lSR1VnY3V4dXl2Q0Rkb0J3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi9lNDU1NzctNjViMS00ZDQzLTg1M2EtMDJhYmY4NTcyZmNi
LzEvMUlWVi1hVW5KX2E4OXhYTFIxQ2lwS2JEVVdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgrmsMA0G
CSqGSIb3DQEBCwUAA4IBAQDEh5G+per2hSQ3sfYtybBMTjxb9eVyAu99uUyyq9g0
UcYh4UZ/Q3xrgq1EmmHO5y2AN8WKDgVO7le8WzsKrAwkqMw1sn1QEuX0W658J262
C+KTa5NrL1ksRjbKfHkO+I4vNcW6azf2X8/8eCRieE+bgDhnnH1d/3qQFGT52Aii
cHb7NKqsH3uv0OfQQS1ksCCnHNphND919PrvGDybeUdvOb41bUQGphuAC9+xdOdv
NBd4+1VC/2Nczs6fD7n0YNq+P2elqrRE6tA2EfQE0X5Jdk5mjOndTbuwZu/T/q4l
gTgEFuhJjXKh9y5rvn9USMmonlwMINQVyx/bazSOW9H/
-----END CERTIFICATE-----
Generated at Mon Jan 1 19:16:48 2024 by rpki-client on console-ams.rpki-client.org