Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/tvG26-342zcbs0zkY-8rJ0kS6ZE.roa
File: tvG26-342zcbs0zkY-8rJ0kS6ZE.roa (raw, json)
Hash identifier: O1XOW5UYnf5Mi4X1ErbWGVpJ2MYRYmvckeB34Q0I0HE=
Subject key identifier: B6:F1:B6:EB:ED:F8:DB:37:1B:B3:4C:E4:63:EF:2B:27:49:12:E9:91
Certificate issuer: /CN=43965dd1f6f24a46d7cc4bccfecd4151c6dd1bfb
Certificate serial: 01869CA428A6776A009045C138FD6A389AAD
Authority key identifier: 43:96:5D:D1:F6:F2:4A:46:D7:CC:4B:CC:FE:CD:41:51:C6:DD:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/tvG26-342zcbs0zkY-8rJ0kS6ZE.roa
Signing time: Wed 01 Mar 2023 10:07:29 +0000
ROA not before: Wed 01 Mar 2023 10:07:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204650
IP address blocks: 185.137.61.0/24 maxlen: 24
185.125.20.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 04 Apr 2023 09:44:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:9c:a4:28:a6:77:6a:00:90:45:c1:38:fd:6a:38:9a:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43965dd1f6f24a46d7cc4bccfecd4151c6dd1bfb
Validity
Not Before: Mar 1 10:07:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b6f1b6ebedf8db371bb34ce463ef2b274912e991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:17:3c:a9:d0:1e:a3:27:9d:aa:88:e1:65:ae:
02:8e:cf:d8:63:1c:0c:38:c0:b6:3e:67:ed:e7:42:
da:37:61:a8:78:3c:a4:6d:57:65:be:81:51:0a:a3:
85:a6:e2:fc:f4:61:93:ae:e8:ae:8d:bf:da:1f:ca:
35:21:95:77:e9:51:ed:cc:1a:bb:31:64:ac:be:ff:
3a:f2:eb:4d:ea:30:1f:f9:ef:ea:15:40:ba:3c:d0:
9f:31:fa:fa:4f:c7:18:3b:f7:5f:a0:ae:18:c8:13:
91:66:d1:d9:0c:54:7c:84:e1:46:d9:79:3d:9a:4e:
de:13:28:ff:a2:88:1c:ef:8f:f2:4b:59:61:d8:65:
9e:05:00:61:71:e9:f2:ea:cc:79:dc:9e:c7:7f:94:
8d:59:bc:2c:99:b3:49:d9:9b:71:31:f4:7e:5a:7a:
13:90:9f:77:02:48:1c:a5:19:3f:21:8e:62:77:e2:
21:63:09:b2:29:21:b3:4a:73:df:8e:0e:94:66:8a:
f6:0d:ff:c9:bc:63:3b:39:36:88:83:d4:16:12:c1:
46:2c:2e:5a:e0:04:2d:d3:2c:2e:4d:44:a7:a4:9e:
c8:cd:12:17:e0:92:99:f5:da:15:21:4c:87:06:46:
6f:b7:7e:6b:41:61:43:92:6f:0c:cf:1a:9c:f1:5c:
71:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:F1:B6:EB:ED:F8:DB:37:1B:B3:4C:E4:63:EF:2B:27:49:12:E9:91
X509v3 Authority Key Identifier:
keyid:43:96:5D:D1:F6:F2:4A:46:D7:CC:4B:CC:FE:CD:41:51:C6:DD:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/tvG26-342zcbs0zkY-8rJ0kS6ZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.125.20.0/24
185.137.61.0/24
Signature Algorithm: sha256WithRSAEncryption
05:69:05:47:21:7a:ac:bc:85:66:48:b3:8d:04:b6:5e:81:9f:
44:7f:5e:03:ec:58:d1:1a:c5:59:18:aa:d8:ba:d4:a0:48:8b:
1b:39:7d:2f:c1:7a:d8:a6:80:ef:e8:ed:01:c7:05:d9:2a:06:
48:26:3c:fd:56:bc:44:d6:8e:26:a8:ec:8d:aa:f2:72:0d:eb:
67:5f:8b:aa:b1:7c:21:b2:dd:b1:78:91:1a:56:4c:e1:c1:cb:
59:6b:8c:bb:b6:27:ad:a5:bc:9c:b3:f2:08:0e:c0:0d:bc:11:
95:68:6b:fc:1a:8a:43:8a:80:72:68:b0:37:63:f5:cb:59:ba:
68:2e:25:c2:ea:87:cc:2f:c9:72:d6:01:ef:27:f8:41:31:6b:
f8:fb:fe:55:24:05:ce:12:a7:11:da:89:0b:6d:9f:f6:8f:a9:
58:75:ce:4f:4a:78:c0:85:ca:ae:28:68:c1:7f:37:c3:ab:b3:
45:58:9e:d3:0e:c9:5c:7d:85:74:ff:99:16:0e:e3:1f:1c:41:
07:d7:d1:e9:c6:f4:8c:23:de:8b:bc:cc:36:0f:e4:62:df:ba:
b3:78:58:24:b5:a8:86:3f:36:6d:0b:e6:11:67:4b:df:90:bc:
47:aa:e2:67:fd:8c:82:5a:07:43:7d:c0:40:a7:8d:08:43:6a:
83:9f:09:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:50 2024 by rpki-client on console-ams.rpki-client.org