Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/TKZZwXOZt9_ih9bVNc49zAOFcgI.roa
File: TKZZwXOZt9_ih9bVNc49zAOFcgI.roa (raw, json)
Hash identifier: 0zP3DvCMdOIJ+/6cTdpsQvtVaOFO7GEKVzxqbXbUbuY=
Subject key identifier: 4C:A6:59:C1:73:99:B7:DF:E2:87:D6:D5:35:CE:3D:CC:03:85:72:02
Certificate issuer: /CN=9301ea05963c9756f28ee2e98b8f3cc479dc9f58
Certificate serial: 01856D4AC767E9ADB08D1E0D323C26954D81
Authority key identifier: 93:01:EA:05:96:3C:97:56:F2:8E:E2:E9:8B:8F:3C:C4:79:DC:9F:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwHqBZY8l1byjuLpi488xHncn1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/TKZZwXOZt9_ih9bVNc49zAOFcgI.roa
Signing time: Sun 01 Jan 2023 12:24:55 +0000
ROA not before: Sun 01 Jan 2023 12:24:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 185.176.101.0/24 maxlen: 24
185.176.100.0/24 maxlen: 24
185.176.103.0/24 maxlen: 24
185.176.102.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:4a:c7:67:e9:ad:b0:8d:1e:0d:32:3c:26:95:4d:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9301ea05963c9756f28ee2e98b8f3cc479dc9f58
Validity
Not Before: Jan 1 12:24:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4ca659c17399b7dfe287d6d535ce3dcc03857202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b3:0d:90:47:ea:da:b8:dc:60:4a:f2:ad:03:
4e:8b:fb:46:3c:cd:2c:73:c4:86:92:e2:44:8d:70:
1e:77:47:02:cf:93:b6:84:6d:14:3c:cf:f5:8e:02:
22:49:e8:7f:ee:2f:f4:df:56:83:a7:4d:01:25:fc:
9b:13:ab:52:5b:b2:ea:2d:89:96:e9:3c:cd:7a:ec:
4e:c3:97:84:c4:f4:7a:d2:e9:f1:f5:0c:3e:a8:a2:
82:05:86:49:12:d3:5f:00:5e:ed:54:f8:6d:f0:5a:
ff:6c:c8:8d:ca:75:db:16:f1:cc:9d:cb:1d:28:f5:
ae:94:dc:c7:b1:24:3b:43:4e:de:9d:9c:23:30:4c:
6f:4f:15:a1:7c:c6:c8:61:3b:73:9a:4d:75:2f:46:
d9:77:f3:24:11:22:12:93:72:b7:bf:59:78:71:12:
a4:48:41:33:03:73:e2:03:c6:0f:11:c8:26:cb:31:
d1:11:9b:ab:c5:c1:c0:f9:fc:f5:ec:b8:88:aa:2f:
a3:74:ff:4d:91:cb:c0:6b:a3:51:b1:7c:7a:ee:3d:
1e:fd:bd:35:23:ce:8e:7d:67:b1:b7:d3:12:2b:d6:
3a:75:89:b9:ea:93:cc:a1:5e:29:da:21:2e:83:48:
a1:4d:1e:e9:bb:ea:d6:eb:8d:55:40:70:f7:a9:9d:
1c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:A6:59:C1:73:99:B7:DF:E2:87:D6:D5:35:CE:3D:CC:03:85:72:02
X509v3 Authority Key Identifier:
keyid:93:01:EA:05:96:3C:97:56:F2:8E:E2:E9:8B:8F:3C:C4:79:DC:9F:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwHqBZY8l1byjuLpi488xHncn1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/TKZZwXOZt9_ih9bVNc49zAOFcgI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.176.100.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:e9:77:4a:72:06:d4:6f:a5:e3:0e:7b:f3:5e:c8:4a:12:dd:
f1:90:79:a0:f3:47:30:09:d2:ad:ef:90:60:83:13:f7:37:cf:
f6:09:3e:f0:d2:d8:b3:a3:d1:a1:74:09:dc:a4:71:db:e4:50:
c3:1a:e1:52:b5:67:a2:4a:a4:2e:1d:ec:22:f1:83:92:a8:7e:
6c:b2:16:65:12:f7:92:20:ba:e7:7d:57:a8:2e:73:89:bf:71:
e7:e4:71:6b:2f:88:e0:40:76:75:0b:89:99:d0:bb:35:2c:41:
e9:bb:9a:a5:fc:0d:cb:23:bc:57:9a:09:3b:3c:ed:10:ab:44:
4b:43:c1:5d:26:b1:c6:87:fe:f2:ad:48:13:4e:47:d2:8c:67:
32:d8:4f:5f:b1:27:ca:e7:be:d8:30:8e:ec:47:b0:69:df:64:
09:dc:5e:2f:57:9f:e0:42:52:6d:d3:0b:cb:4f:5f:0c:4e:c1:
82:f8:df:c3:c6:90:ea:bb:5e:4c:a0:7b:6d:86:ab:61:ae:80:
45:a1:1d:fd:b7:0a:c0:af:8c:70:8c:52:db:56:0b:0f:f9:3a:
3f:28:e7:ba:8f:95:b3:02:3a:53:cb:74:5f:97:ec:06:e1:73:
23:3a:22:d7:38:38:77:b3:3b:c8:ee:17:dc:70:a9:57:2b:33:
56:ee:b1:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:23:17 2024 by rpki-client on console-fra.rpki-client.org