Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/TLtkY4WxxBDGdA_f_iOxzWA9KwA.roa
File: TLtkY4WxxBDGdA_f_iOxzWA9KwA.roa (raw, json)
Hash identifier: uRWUoOInKrYfti/NPrId9CVod6jL4qhcxQwlm6OYrVU=
Subject key identifier: 4C:BB:64:63:85:B1:C4:10:C6:74:0F:DF:FE:23:B1:CD:60:3D:2B:00
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 01856C53E6505DEB7C050C8A2BB5C1E06EE3
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/TLtkY4WxxBDGdA_f_iOxzWA9KwA.roa
Signing time: Sun 01 Jan 2023 07:55:15 +0000
ROA not before: Sun 01 Jan 2023 07:55:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25369
IP address blocks: 185.141.206.0/23 maxlen: 23
185.144.100.0/24 maxlen: 24
2a06:8ec4::/43 maxlen: 43
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:53:e6:50:5d:eb:7c:05:0c:8a:2b:b5:c1:e0:6e:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 07:55:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4cbb646385b1c410c6740fdffe23b1cd603d2b00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:11:c8:b9:e4:cb:96:7a:82:d9:37:1e:d9:5f:
a4:28:a7:43:46:47:a5:79:67:94:18:53:92:7b:61:
a3:47:ae:db:65:86:27:cf:5f:c8:99:17:24:14:7d:
f5:ef:06:20:5d:ab:02:c7:2d:f4:f9:9e:b4:33:4f:
02:af:69:b7:95:09:cf:ff:52:dd:ad:4f:e1:40:5b:
00:de:e0:2d:e0:57:d7:e3:a4:c8:ca:2a:ed:ed:68:
aa:0b:6f:14:31:30:42:7f:32:42:11:bd:a4:37:65:
23:87:47:5f:33:04:73:e0:e8:a7:f8:4f:7f:e3:9a:
a3:3f:d4:60:cb:63:1e:b1:7a:75:50:49:5f:2f:40:
32:0b:9f:d3:02:49:a6:f7:26:00:d1:f6:47:ff:c5:
0b:42:35:4f:ec:f0:85:ee:85:69:62:42:04:fc:47:
3e:1b:9c:9b:4a:89:4c:42:e2:91:23:2e:b8:90:40:
f9:a2:3d:cc:67:6f:05:14:8a:33:5b:cd:7a:77:03:
a7:92:b8:6f:c6:a6:9c:b6:2c:ee:fe:ef:43:a8:75:
34:21:c0:a8:4d:b5:35:9a:1a:4f:c8:f7:f5:cb:8b:
cf:08:06:91:d1:59:c5:1e:f2:6b:d7:dd:be:b5:e0:
7a:4b:a3:d8:54:ef:a8:60:31:99:d9:97:4d:c4:c6:
70:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:BB:64:63:85:B1:C4:10:C6:74:0F:DF:FE:23:B1:CD:60:3D:2B:00
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/TLtkY4WxxBDGdA_f_iOxzWA9KwA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.141.206.0/23
185.144.100.0/24
IPv6:
2a06:8ec4::/43
Signature Algorithm: sha256WithRSAEncryption
20:8a:88:d8:36:18:7d:a7:d5:c9:26:50:9e:c1:1c:96:72:a5:
7d:b0:56:0c:ba:5a:7a:50:c2:30:29:f7:42:3e:e3:62:e2:60:
92:1d:c4:13:99:f8:1b:c5:1c:60:68:5b:7d:ef:46:7c:25:13:
e0:b9:55:f5:6a:97:c7:94:18:be:88:6d:42:74:9d:dd:75:e7:
e4:c5:e3:44:e5:e8:df:33:11:45:de:a5:12:90:00:91:55:13:
63:58:63:33:82:17:32:2e:5b:d6:04:1c:45:e6:95:45:a7:8c:
fe:83:32:c0:92:46:62:de:5f:43:af:00:5e:8c:bb:31:ae:ad:
e2:21:8b:a9:91:dd:58:01:8b:7f:c0:d7:11:90:b7:7b:cf:99:
de:fb:e3:25:3c:fb:8e:a3:90:a0:f2:ef:f1:76:08:21:69:f1:
12:c2:27:11:24:80:71:79:9b:b2:2f:72:6f:76:76:41:a8:e5:
5e:fc:dd:3f:46:7f:e1:c1:b7:f8:d5:67:41:88:32:ac:8c:eb:
fc:4e:a5:3a:68:2e:14:9e:89:54:3d:6e:dd:0e:41:09:12:0b:
b0:85:4e:45:ca:93:43:31:9d:38:49:f5:ba:31:32:60:28:7d:
5f:98:a1:2c:f8:ce:15:76:b1:72:2d:6c:3e:9e:16:80:5f:7c:
36:91:07:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:23:00 2024 by rpki-client on console-ams.rpki-client.org