Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/Ts0zXjDhAbvF0cHITaGdfwBVrfA.roa
File: Ts0zXjDhAbvF0cHITaGdfwBVrfA.roa (raw, json)
Hash identifier: Z4HfYLYL7etm8FINfthpREqDwQnGbN3JCBTD+heX4V0=
Subject key identifier: 4E:CD:33:5E:30:E1:01:BB:C5:D1:C1:C8:4D:A1:9D:7F:00:55:AD:F0
Certificate issuer: /CN=13a0f7143ffa22113442dc8589ee1352ebe3daa3
Certificate serial: 018571F10D484961F5664DA0378083C9B579
Authority key identifier: 13:A0:F7:14:3F:FA:22:11:34:42:DC:85:89:EE:13:52:EB:E3:DA:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E6D3FD_6IhE0QtyFie4TUuvj2qM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/Ts0zXjDhAbvF0cHITaGdfwBVrfA.roa
Signing time: Mon 02 Jan 2023 10:05:00 +0000
ROA not before: Mon 02 Jan 2023 10:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60977
IP address blocks: 185.136.70.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:f1:0d:48:49:61:f5:66:4d:a0:37:80:83:c9:b5:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13a0f7143ffa22113442dc8589ee1352ebe3daa3
Validity
Not Before: Jan 2 10:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4ecd335e30e101bbc5d1c1c84da19d7f0055adf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:5d:3d:7d:f6:94:ea:1e:d5:d5:c2:6a:1d:52:
57:e5:af:bb:8c:52:76:bd:9c:85:45:64:80:fe:ca:
03:e1:93:2b:a3:99:c3:62:8f:a9:7b:97:90:d9:2a:
c4:08:7e:35:a8:c0:21:8f:38:b0:e0:9c:c4:3e:3e:
3e:bf:e9:37:1e:c0:84:d4:5e:75:a0:3e:f5:00:7a:
c0:b7:14:57:7c:ae:d0:35:cb:75:72:7f:fb:62:5a:
2f:34:73:59:7d:74:cd:10:0b:7c:72:75:75:2e:ba:
f8:c2:3f:0a:59:3f:4c:5b:21:0f:3f:23:0a:4a:0c:
f4:de:01:8b:f1:93:31:27:bf:05:fb:46:7f:ac:1c:
e8:9e:52:18:7f:81:7f:6e:d1:f6:39:a5:89:9a:f8:
07:7e:97:d7:a9:38:27:8d:e7:ae:57:61:db:eb:08:
6a:c5:6a:8b:01:73:dd:9c:08:eb:c0:b6:1d:88:7d:
83:b6:39:2f:d3:87:82:c5:ae:45:26:c2:d5:c2:c3:
4a:85:31:8f:a8:4c:37:32:14:d7:5d:77:9c:5a:2f:
f9:4c:d0:5c:32:1d:48:9b:32:b6:67:62:eb:74:cf:
d1:33:20:a7:6a:24:9d:1e:4f:44:46:13:63:63:30:
e3:c3:13:a2:f7:13:c0:a3:87:bd:59:38:a0:23:76:
f6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:CD:33:5E:30:E1:01:BB:C5:D1:C1:C8:4D:A1:9D:7F:00:55:AD:F0
X509v3 Authority Key Identifier:
keyid:13:A0:F7:14:3F:FA:22:11:34:42:DC:85:89:EE:13:52:EB:E3:DA:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E6D3FD_6IhE0QtyFie4TUuvj2qM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/Ts0zXjDhAbvF0cHITaGdfwBVrfA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/443f87-4ae0-4198-bcb8-104a33437665/1/E6D3FD_6IhE0QtyFie4TUuvj2qM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.136.70.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:cc:56:50:f9:67:3b:75:10:b4:39:38:45:f3:16:52:9b:f8:
9c:82:7f:63:42:9e:eb:3d:20:fa:1b:ad:30:ff:4a:07:5e:c2:
66:27:21:59:93:1e:57:3a:5c:48:1f:5f:4c:c4:ee:bd:3b:04:
6a:ad:23:cc:77:51:fa:1e:2f:6a:81:5a:6b:1f:a4:b3:93:bb:
6a:85:48:17:2e:7f:e4:5b:df:1c:0c:6b:dc:fa:88:ce:93:fe:
24:7c:3a:d3:c8:d6:72:57:d0:6a:06:8a:bd:f3:35:02:02:17:
2a:3c:8a:06:b4:7f:f7:a4:c5:e8:f4:6f:a4:06:23:43:0e:80:
41:51:0c:91:98:6f:2d:94:59:a1:a3:6e:3c:6c:1f:35:ff:fb:
11:f8:98:fa:1f:69:98:40:4f:c2:8d:d6:73:e6:50:22:ec:fc:
20:1b:f5:2a:2d:8f:96:d9:8d:69:31:57:8a:58:f1:92:f3:a6:
d9:03:b1:8c:0e:77:22:e9:aa:f5:e6:b2:1c:4f:90:28:5b:4f:
b3:8c:42:17:a2:30:d8:30:94:e6:c8:70:d5:10:95:6c:67:a3:
96:52:5b:3d:76:2b:3b:cb:44:77:be:f8:89:6a:26:3e:2c:4b:
92:d7:23:c7:c9:0c:10:78:d6:87:7b:2f:5b:3f:68:3a:05:ea:
81:36:02:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:50 2023 by rpki-client on console-ams.rpki-client.org