Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/tDTi-xmU3W58WyPNMvgc4PAXq5g.roa
File: tDTi-xmU3W58WyPNMvgc4PAXq5g.roa (raw, json)
Hash identifier: QNg+XcpSPHBdvJOwxFgMQSLAygPJbAmp9NNH+g1vjo8=
Subject key identifier: B4:34:E2:FB:19:94:DD:6E:7C:5B:23:CD:32:F8:1C:E0:F0:17:AB:98
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 01856C53F9BB68A9FDC0E6501F8AB5415207
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/tDTi-xmU3W58WyPNMvgc4PAXq5g.roa
Signing time: Sun 01 Jan 2023 07:55:20 +0000
ROA not before: Sun 01 Jan 2023 07:55:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50673
IP address blocks: 185.172.167.0/24 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:53:f9:bb:68:a9:fd:c0:e6:50:1f:8a:b5:41:52:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 07:55:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b434e2fb1994dd6e7c5b23cd32f81ce0f017ab98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:64:32:69:dd:35:0f:b1:4d:6f:a9:93:d0:97:
a2:4d:10:34:1f:bb:dd:10:48:5c:b2:bc:7d:a8:9b:
d1:94:a5:4a:d0:38:79:b0:85:2c:b6:f3:74:4c:1c:
7e:26:7c:ce:c7:80:12:e5:8a:de:1b:d2:16:3f:0a:
7c:40:bd:a0:0f:2a:a7:ac:7f:c1:76:e5:00:6d:b5:
c4:10:78:ee:a8:bf:64:8a:58:4a:ad:d3:29:51:f5:
24:a9:8c:e7:24:f1:5d:8f:03:0a:f0:8b:df:e6:ef:
ee:24:b1:08:2b:ec:ad:52:15:5c:52:c4:b6:97:8e:
c7:5a:0e:1a:73:e6:40:82:a5:b2:4c:90:78:00:fa:
be:46:ef:0b:d3:61:81:75:93:79:53:4c:cd:b4:bc:
ff:fe:33:61:eb:97:0c:50:fd:ef:f4:94:ad:c7:b6:
22:e0:51:65:e4:0e:d2:56:66:ea:50:8c:c2:95:b3:
ac:86:01:f1:a6:65:da:a4:09:3e:be:93:68:71:a8:
b7:08:f5:35:32:e4:53:8d:f5:44:73:81:f2:a7:d7:
96:c7:8c:c2:e3:b6:e3:2e:b4:a4:02:93:00:75:fe:
0f:23:73:42:63:57:fe:c3:55:18:34:1a:34:0f:cb:
62:26:c1:00:93:64:59:b3:eb:1b:bd:5c:a0:ac:b4:
d3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:34:E2:FB:19:94:DD:6E:7C:5B:23:CD:32:F8:1C:E0:F0:17:AB:98
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/tDTi-xmU3W58WyPNMvgc4PAXq5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.172.167.0/24
Signature Algorithm: sha256WithRSAEncryption
14:30:af:a7:fb:13:7e:a7:1a:95:eb:da:b5:a7:58:cf:32:aa:
fa:89:e3:04:9e:0e:31:80:61:43:de:1a:a2:77:88:11:ab:6a:
f2:22:6f:57:82:9a:a2:94:24:20:25:41:e6:92:e8:7a:7d:49:
af:99:16:1c:a9:51:e0:2b:89:7a:8d:52:d4:bf:ad:12:0c:f9:
79:92:5c:82:02:8a:3d:79:30:eb:0b:24:9a:dc:04:0b:94:1d:
c8:e2:a2:54:00:2a:41:91:66:4c:eb:27:92:18:57:14:c6:af:
d9:b1:8d:d5:0c:d9:2c:37:05:4f:a9:35:37:b1:bd:ff:7b:3e:
6b:86:b6:6a:16:66:e4:91:60:88:6b:49:e9:cc:06:f1:d4:c5:
50:43:06:c6:d8:83:c2:2b:c4:1e:ce:d5:e7:b0:9f:4a:78:41:
a2:e2:f3:ff:77:31:bc:80:b9:b6:73:95:6e:07:87:01:93:14:
7d:c1:b3:84:34:7f:ca:1a:36:b3:cb:a0:79:a5:d4:1e:b8:3c:
c3:ba:d6:71:84:bb:ee:0c:b5:2f:64:ad:d6:ea:ec:72:e8:9c:
b8:42:59:41:27:e3:9b:d8:9c:d6:b3:9e:c0:ea:bd:bb:8e:4c:
83:28:06:ad:d4:9b:c4:74:22:2e:f0:9c:bc:11:18:3c:95:9e:
84:28:be:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:23:00 2024 by rpki-client on console-ams.rpki-client.org