Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/Tpm2R9sK137E2JXzyTIfJClzcTo.roa
File: Tpm2R9sK137E2JXzyTIfJClzcTo.roa (raw, json)
Hash identifier: rVUL0Vqgjg0up92XKRh61nUcG2RHjvStEH32N1hb8hc=
Subject key identifier: 4E:99:B6:47:DB:0A:D7:7E:C4:D8:95:F3:C9:32:1F:24:29:73:71:3A
Certificate issuer: /CN=e61bd7dd1f8ac8b4192ba78a592348b5dd0a1a66
Certificate serial: 0188D280000E99E71AE57272103880050B5B
Authority key identifier: E6:1B:D7:DD:1F:8A:C8:B4:19:2B:A7:8A:59:23:48:B5:DD:0A:1A:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/Tpm2R9sK137E2JXzyTIfJClzcTo.roa
Signing time: Mon 19 Jun 2023 07:13:03 +0000
ROA not before: Mon 19 Jun 2023 07:13:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2856
IP address blocks: 185.69.120.0/22 maxlen: 22
185.129.208.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d2:80:00:0e:99:e7:1a:e5:72:72:10:38:80:05:0b:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e61bd7dd1f8ac8b4192ba78a592348b5dd0a1a66
Validity
Not Before: Jun 19 07:13:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4e99b647db0ad77ec4d895f3c9321f242973713a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:78:5b:38:30:32:7d:7c:fa:af:ec:26:06:6b:
b4:74:36:8f:1d:66:c8:8e:7d:45:02:9d:ed:22:00:
0f:a1:ba:d4:f8:ec:9e:7e:cc:86:9f:e1:78:b5:93:
8b:6c:4f:48:c6:91:1c:55:b3:5a:01:d8:83:fc:be:
a9:65:26:50:e8:0c:b8:05:61:72:c7:88:b5:35:30:
3e:35:af:49:68:d8:be:65:24:09:1f:7d:57:97:dd:
07:90:08:a8:3f:de:9e:af:d1:f8:40:b3:f0:66:dd:
73:a0:11:38:b6:aa:c0:a1:32:54:67:09:db:84:cf:
b8:d0:66:ab:26:7a:1b:2d:0c:33:95:6c:3b:7d:5a:
a6:29:4b:10:03:e2:f2:cd:0a:00:ca:6b:3d:1f:a9:
2f:b9:8b:b0:1b:e5:d0:b0:b3:d6:55:ec:9c:32:21:
c1:bf:13:35:9e:5e:f0:d9:2b:23:8c:00:ed:aa:c1:
a2:cb:28:5f:d3:a0:ca:78:ee:fa:00:15:82:c3:71:
b6:0d:4a:ea:87:25:8c:76:b2:42:03:5d:e6:a6:1b:
77:47:3c:e0:83:2f:8c:ed:f7:3a:7a:e2:c9:ef:71:
ec:67:5e:e2:01:e1:e8:f8:fc:f4:2d:22:d4:51:59:
2d:a0:17:17:57:9a:bd:31:3d:1d:e2:16:8d:d9:69:
1d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:99:B6:47:DB:0A:D7:7E:C4:D8:95:F3:C9:32:1F:24:29:73:71:3A
X509v3 Authority Key Identifier:
keyid:E6:1B:D7:DD:1F:8A:C8:B4:19:2B:A7:8A:59:23:48:B5:DD:0A:1A:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/Tpm2R9sK137E2JXzyTIfJClzcTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.69.120.0/22
185.129.208.0/22
Signature Algorithm: sha256WithRSAEncryption
85:fd:ae:2d:3f:7d:2f:82:39:bc:fb:cc:70:f6:c0:e8:26:d2:
3b:6d:ca:2c:24:02:51:23:68:41:1f:09:b7:fc:f8:c6:97:00:
af:9b:4b:de:29:8d:b0:d8:4d:d6:0e:a9:38:3c:90:9a:fa:ba:
73:32:9d:9f:15:08:5b:e2:7a:3c:ce:13:99:9a:91:c3:c3:63:
83:37:a9:66:12:83:45:1c:a9:71:41:87:6a:35:fa:b3:48:2a:
79:68:b9:e9:0d:3c:92:a0:13:10:51:f9:3c:19:7e:06:f7:00:
b9:a6:7a:14:14:6d:82:6c:56:96:8a:f3:57:22:e8:f4:d5:64:
7e:1a:b7:a4:a0:cb:ec:70:d6:24:d2:ed:9b:eb:01:1e:0a:4c:
20:a1:45:c8:78:78:52:ec:48:e0:a7:15:d2:b2:02:43:26:f4:
c0:b6:31:67:7d:40:d4:ef:7d:9a:9c:d5:02:8b:3b:b5:f8:d2:
23:d7:3c:3a:5f:2b:c2:4c:e2:a1:a6:65:18:db:d2:aa:73:e5:
ae:19:63:71:42:12:88:da:96:fa:8a:6d:2b:64:91:5f:de:2d:
0c:2f:c2:15:3a:5b:17:3f:09:08:08:02:73:19:93:ca:7e:62:
92:d0:ef:73:14:42:96:62:1f:79:40:60:17:70:ba:c2:13:c1:
47:10:80:1c
-----BEGIN CERTIFICATE-----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Generated at Wed Oct 11 11:25:38 2023 by rpki-client on console-fra.rpki-client.org