Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/TzhrjKjXxEm0VlFvJOMKWHdxIVs.roa
File: TzhrjKjXxEm0VlFvJOMKWHdxIVs.roa (raw, json)
Hash identifier: ZN9Bc4betj378+ZUGjsnN6stz5/HKDl/Xwm/+XneD5w=
Subject key identifier: 4F:38:6B:8C:A8:D7:C4:49:B4:56:51:6F:24:E3:0A:58:77:71:21:5B
Certificate issuer: /CN=ee6f421c253096280347dc2e92ca10cc398c134f
Certificate serial: 01856CEF0448C313008101C9A5170E84F3A2
Authority key identifier: EE:6F:42:1C:25:30:96:28:03:47:DC:2E:92:CA:10:CC:39:8C:13:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7m9CHCUwligDR9wuksoQzDmME08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/TzhrjKjXxEm0VlFvJOMKWHdxIVs.roa
Signing time: Sun 01 Jan 2023 10:44:41 +0000
ROA not before: Sun 01 Jan 2023 10:44:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8696
IP address blocks: 195.230.106.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ef:04:48:c3:13:00:81:01:c9:a5:17:0e:84:f3:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee6f421c253096280347dc2e92ca10cc398c134f
Validity
Not Before: Jan 1 10:44:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4f386b8ca8d7c449b456516f24e30a587771215b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c6:40:50:e8:8e:49:82:4d:95:69:97:96:91:
e6:c4:a9:55:bd:80:a6:4e:a9:56:77:07:cd:c4:92:
16:e0:36:ea:63:24:ab:f1:66:b5:16:4a:1f:7c:e8:
01:e6:46:6a:40:5d:ca:3f:54:af:30:47:cd:d5:48:
f8:a9:c5:c2:df:b7:41:ee:18:73:10:78:a8:a8:80:
9b:fb:00:92:df:54:04:00:0b:34:e4:6c:ed:f6:17:
a0:4b:f9:ed:a0:99:15:49:d5:f2:a0:1c:dc:ac:c9:
30:ca:eb:ea:05:36:b4:77:1c:f1:3c:9c:a6:8f:ae:
a2:ba:8a:02:aa:5e:6a:41:5d:76:04:e0:e4:d4:27:
db:66:9c:20:72:f5:1e:a2:eb:de:df:3b:36:52:d7:
eb:3e:76:fa:e1:73:45:33:a2:a5:1a:a6:17:a9:2f:
bc:63:1d:b9:e9:3c:fc:af:c5:9d:1f:70:4b:90:69:
00:e7:b1:11:39:ad:40:5c:87:8c:79:3b:2b:9c:32:
86:ce:ac:d1:29:17:02:23:fa:df:9d:99:df:26:2e:
c8:e0:21:17:24:8e:3f:d1:9b:36:87:5e:71:e5:97:
09:a5:ff:b5:f6:40:d3:10:0a:c5:a7:40:97:1f:44:
cf:f4:60:59:eb:91:cb:10:d0:10:a0:f9:c4:b9:06:
ee:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:38:6B:8C:A8:D7:C4:49:B4:56:51:6F:24:E3:0A:58:77:71:21:5B
X509v3 Authority Key Identifier:
keyid:EE:6F:42:1C:25:30:96:28:03:47:DC:2E:92:CA:10:CC:39:8C:13:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7m9CHCUwligDR9wuksoQzDmME08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/TzhrjKjXxEm0VlFvJOMKWHdxIVs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.230.106.0/24
Signature Algorithm: sha256WithRSAEncryption
83:8f:77:30:3f:31:cd:9f:08:43:80:ac:47:5b:9b:df:20:95:
5b:f3:5c:d3:93:48:0f:03:90:eb:e4:14:d8:5b:23:84:02:b2:
7a:ee:01:e8:75:45:a2:a2:1a:98:c0:77:bb:32:e5:ca:fd:06:
42:b7:89:58:c4:c0:be:c2:9b:2a:12:b7:8e:a6:8f:5b:4c:9d:
04:33:24:6e:ed:83:bc:18:42:a3:5d:ae:69:a6:3d:f1:52:69:
c3:d1:72:28:96:af:32:3f:20:cf:53:fb:4e:bc:11:a6:97:05:
18:68:5b:21:a3:7b:25:09:79:95:2e:0b:62:a4:0b:d0:25:ee:
13:94:62:8d:e0:fa:93:8b:b9:ea:a9:b2:f5:6e:6c:e1:a1:c9:
c6:e0:65:63:92:18:f3:17:82:19:41:d6:a2:0a:22:e6:66:bb:
04:21:a3:f7:ad:81:0b:76:dd:9f:bb:79:48:63:0d:71:51:c0:
16:69:34:35:5d:1a:f0:7a:00:f4:ab:ba:4f:66:48:2c:64:f4:
4d:54:a3:94:93:96:16:30:27:90:ff:44:7f:c9:09:e8:33:79:
72:c2:b6:a2:01:fd:ca:92:ff:33:b9:b2:09:a8:c3:07:21:c9:
65:1e:78:5d:af:4b:55:53:b6:48:66:71:73:62:75:ec:13:12:
bd:89:cc:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:28 2023 by rpki-client on console-fra.rpki-client.org