Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/Tzh-Bh1TnoC6a1ooxtvg-k1VvRI.roa
File: Tzh-Bh1TnoC6a1ooxtvg-k1VvRI.roa (raw, json)
Hash identifier: VDNDFIrSf5N+Yw+Z12pey1XvEdHwP5btcV2CcqkDdkw=
Subject key identifier: 4F:38:7E:06:1D:53:9E:80:BA:6B:5A:28:C6:DB:E0:FA:4D:55:BD:12
Certificate issuer: /CN=0d7a912569b787d92e5355fffaed581fe50a29c0
Certificate serial: 0185715E5B65E1462AB6F128C6B010FBD5B4
Authority key identifier: 0D:7A:91:25:69:B7:87:D9:2E:53:55:FF:FA:ED:58:1F:E5:0A:29:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXqRJWm3h9kuU1X_-u1YH-UKKcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/Tzh-Bh1TnoC6a1ooxtvg-k1VvRI.roa
Signing time: Mon 02 Jan 2023 07:24:47 +0000
ROA not before: Mon 02 Jan 2023 07:24:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51580
IP address blocks: 185.208.19.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:5e:5b:65:e1:46:2a:b6:f1:28:c6:b0:10:fb:d5:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7a912569b787d92e5355fffaed581fe50a29c0
Validity
Not Before: Jan 2 07:24:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4f387e061d539e80ba6b5a28c6dbe0fa4d55bd12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4a:ed:58:a5:bd:c2:c9:6a:45:9a:0b:86:0b:
8c:4a:f2:e3:6e:47:b0:5a:ef:8d:10:32:39:3b:06:
ea:29:24:98:fc:34:34:df:d0:88:99:0c:dc:31:9a:
1c:4f:07:42:11:01:c1:03:f7:f0:89:02:2e:78:f1:
af:29:0a:37:56:63:0a:c7:4b:1d:df:63:87:68:82:
1e:87:e6:96:4c:85:40:8c:0f:de:e6:e2:f6:29:54:
a5:6c:4a:32:f1:0e:f8:93:8e:a0:52:20:6a:d7:68:
3d:79:1f:2d:27:f9:a1:79:bf:7d:c1:91:b0:f0:e9:
d5:04:1b:48:a6:50:d7:75:1b:13:b1:31:b4:7d:ce:
d3:e6:e4:77:18:ea:cf:55:dc:54:af:52:c7:4c:00:
86:26:f1:96:af:54:90:7f:41:75:89:d4:7d:eb:23:
4d:85:40:3c:c2:eb:f5:2b:2a:3b:75:42:68:30:8c:
48:57:3c:2e:c5:d4:79:79:f5:77:32:9a:5f:a7:32:
71:f1:4a:78:68:a4:90:99:4b:1a:92:41:3c:b8:e5:
e6:c0:9d:25:81:11:77:8e:c5:f1:c7:c4:06:ab:c7:
e7:32:b8:c9:25:36:4a:a0:df:fa:e5:e1:f3:8d:0a:
ac:20:18:7c:5e:ce:30:be:59:c1:a9:7a:dc:3d:da:
8d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:38:7E:06:1D:53:9E:80:BA:6B:5A:28:C6:DB:E0:FA:4D:55:BD:12
X509v3 Authority Key Identifier:
keyid:0D:7A:91:25:69:B7:87:D9:2E:53:55:FF:FA:ED:58:1F:E5:0A:29:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXqRJWm3h9kuU1X_-u1YH-UKKcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/Tzh-Bh1TnoC6a1ooxtvg-k1VvRI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.208.19.0/24
Signature Algorithm: sha256WithRSAEncryption
91:64:97:50:87:b1:71:ea:50:31:69:37:b1:d3:b7:42:39:ea:
58:8e:15:2c:75:3d:74:60:3c:99:e6:f7:18:7b:37:a0:d6:97:
af:8b:7c:f2:35:a4:46:25:70:a9:a3:79:25:61:d4:64:64:a0:
eb:09:0b:b1:a4:c4:54:d0:e5:9a:fa:71:dd:67:a4:db:63:71:
2d:90:2a:01:52:76:f5:dd:fb:48:0c:5e:78:ad:e1:22:31:ac:
f5:ca:44:ce:70:3a:cd:48:e9:5c:d4:c9:cd:a5:64:ef:45:91:
8e:03:66:72:93:80:44:6e:b7:39:e7:4e:63:cd:be:f0:eb:2c:
1c:38:a2:58:eb:9c:24:a3:f1:94:d9:c9:01:39:48:41:74:75:
d5:76:90:38:71:37:b4:30:4f:ee:a6:76:f2:f5:33:33:14:2f:
06:87:eb:44:75:c2:93:15:2e:96:49:8b:2b:81:8d:19:86:19:
8b:2f:e9:c6:aa:e6:f0:a4:71:4b:ef:6a:e1:4e:d2:c4:16:f2:
5c:c0:16:c8:13:f7:5b:82:32:f5:c2:53:7c:4a:64:b9:0a:15:
84:a8:20:72:24:f5:15:e4:87:ba:d6:82:86:76:71:81:19:be:
2a:77:97:eb:64:5c:9b:6c:7a:8e:32:10:2f:c0:f2:5e:45:95:
65:1b:5c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:40:43 2024 by rpki-client on console-ams.rpki-client.org