Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/tsPVaOm1HcU29wd16Wm3aioRc28.roa
File: tsPVaOm1HcU29wd16Wm3aioRc28.roa (raw, json)
Hash identifier: nmunovQIzaC6St/1od8mI/t61FAggpROs/YJDkGJwZ0=
Subject key identifier: B6:C3:D5:68:E9:B5:1D:C5:36:F7:07:75:E9:69:B7:6A:2A:11:73:6F
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018571B63829A9122A4E13BEA486ADA8C19F
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/tsPVaOm1HcU29wd16Wm3aioRc28.roa
Signing time: Mon 02 Jan 2023 09:00:45 +0000
ROA not before: Mon 02 Jan 2023 09:00:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61138
IP address blocks: 185.226.106.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:b6:38:29:a9:12:2a:4e:13:be:a4:86:ad:a8:c1:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 2 09:00:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b6c3d568e9b51dc536f70775e969b76a2a11736f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:0f:75:27:3b:e4:1d:51:74:e9:53:a2:58:d2:
9f:53:48:42:34:d5:4e:9c:f9:c5:25:59:56:49:b3:
36:01:0c:0e:23:f9:45:2f:ec:89:81:bd:7c:ab:be:
1a:8d:81:57:0c:57:b8:8d:da:60:7d:6f:9c:a3:cf:
d9:26:20:a8:a9:4f:45:16:d4:bf:b5:03:c9:f2:e5:
99:9f:c3:0e:2f:61:be:6a:da:76:00:05:06:bb:a9:
9f:e9:15:85:c4:a3:7d:e3:13:e6:e3:3f:36:0e:dc:
2e:65:e7:18:72:74:a7:78:2e:3e:6f:04:48:e9:fc:
d5:da:54:29:2d:56:64:67:8a:d0:39:33:49:17:95:
40:95:ad:97:a6:ca:b4:50:25:1a:8d:94:2b:34:16:
15:84:a0:bf:da:1c:8e:6f:66:8d:37:9e:91:d7:53:
95:49:01:68:e0:39:aa:0c:11:81:46:d2:97:1f:c9:
2e:5c:f9:75:2a:01:87:6b:70:8f:ca:5f:03:b1:8b:
80:70:f0:a6:59:dd:c4:40:d7:c9:39:29:df:b8:58:
6a:cd:a4:b9:35:f5:78:ab:99:e8:3f:a3:e2:58:ad:
f3:a6:7e:30:03:95:04:e1:22:e6:5b:cd:d1:c0:1d:
d5:52:b7:54:bd:b3:4b:8f:05:de:26:b6:7b:a2:5d:
1d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:C3:D5:68:E9:B5:1D:C5:36:F7:07:75:E9:69:B7:6A:2A:11:73:6F
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/tsPVaOm1HcU29wd16Wm3aioRc28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.106.0/24
Signature Algorithm: sha256WithRSAEncryption
21:ab:9a:c8:a9:78:e8:7d:07:8a:d4:7a:23:bc:a9:42:5a:0a:
51:78:4a:36:c6:2c:9e:0a:12:35:a4:f1:92:03:35:3c:84:1d:
36:8d:5c:a9:40:da:99:82:6b:8f:42:75:92:5e:6c:54:54:fc:
63:94:ea:1a:68:b8:39:12:d2:20:5f:f1:a6:81:04:91:3a:4a:
ca:f1:32:fe:4f:2b:df:91:93:af:e1:e5:b4:67:f4:fd:30:cf:
e4:91:14:4f:cf:d5:a9:6e:06:4d:07:6d:a7:af:16:70:35:95:
9d:a8:18:b1:67:7f:6e:9d:ed:6e:7d:6e:12:86:e2:fb:f0:36:
33:04:39:e6:9b:48:75:15:05:aa:2b:91:a6:07:19:b4:f4:9e:
2b:e2:05:df:a6:b9:d9:a8:22:13:d7:1a:e8:51:1f:fb:3b:3a:
c4:33:ac:56:8b:bd:f3:e4:66:cf:15:8f:e6:99:0d:f3:aa:05:
00:7e:99:c1:55:85:45:20:8f:42:11:df:7a:45:81:d2:4b:d1:
f4:fb:42:6f:bd:75:b7:be:41:b2:a2:40:26:b9:10:71:af:4d:
be:7d:37:15:e7:b7:f5:84:72:04:e0:95:af:b3:3a:1b:46:4e:
0e:ba:2d:b6:06:f3:77:2d:89:44:d8:df:d3:b5:8b:0f:0d:51:
d0:33:9f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:16 2023 by rpki-client on console-fra.rpki-client.org