Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/tkJsDm-Kxab_d5bbOTEexyFFKmU.roa
File: tkJsDm-Kxab_d5bbOTEexyFFKmU.roa (raw, json)
Hash identifier: /S5REunEQr4h617jR4CMMrDDJxhBaraJxTVg5WJBM34=
Subject key identifier: B6:42:6C:0E:6F:8A:C5:A6:FF:77:96:DB:39:31:1E:C7:21:45:2A:65
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01856CCAE5673CC64CA2838E59A26514FA72
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/tkJsDm-Kxab_d5bbOTEexyFFKmU.roa
Signing time: Sun 01 Jan 2023 10:05:14 +0000
ROA not before: Sun 01 Jan 2023 10:05:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39658
IP address blocks: 193.180.124.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ca:e5:67:3c:c6:4c:a2:83:8e:59:a2:65:14:fa:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 10:05:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b6426c0e6f8ac5a6ff7796db39311ec721452a65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:9e:10:fb:fc:90:90:88:2f:f6:4c:23:05:bb:
a2:af:37:50:be:dd:14:ee:64:50:61:21:f7:5e:c2:
ba:b8:02:8b:d7:00:27:8b:dd:67:bc:31:bd:6f:10:
df:c1:e0:1b:58:07:06:9b:c2:17:5f:88:dc:d2:30:
e4:38:75:19:03:55:ab:9e:47:a8:ea:b4:27:9c:1e:
65:27:fe:08:ad:79:1b:25:89:07:84:f6:68:81:9a:
05:57:45:43:bd:46:82:bb:7f:42:e8:77:16:cc:3e:
9f:89:05:73:e3:0c:e6:53:d7:2f:67:79:b4:58:0a:
b7:2e:ae:4d:94:a4:19:7f:71:fd:85:62:a9:f5:aa:
f4:51:5d:a6:4b:fe:ac:29:37:25:47:25:21:05:19:
a8:19:16:b6:93:5f:38:42:d6:7d:99:7a:40:7d:74:
b7:bd:5b:b5:2e:e7:c3:d4:fe:85:9e:d1:20:4d:16:
65:1a:75:5e:6a:51:c9:89:d5:24:03:5a:84:e6:bb:
bb:4c:74:38:03:20:c4:28:91:8d:17:0b:df:f6:be:
80:7b:39:3d:62:8d:1d:26:61:22:7f:d2:f9:dd:34:
ad:f1:be:7b:5a:5d:09:18:c8:d3:70:32:66:c5:38:
8b:d3:56:f2:c3:40:a4:7a:4b:9a:48:87:08:25:8f:
8b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:42:6C:0E:6F:8A:C5:A6:FF:77:96:DB:39:31:1E:C7:21:45:2A:65
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/tkJsDm-Kxab_d5bbOTEexyFFKmU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.180.124.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:08:33:93:af:ba:9b:3d:38:18:99:24:fe:5f:6e:b6:44:9c:
b0:b3:71:ff:8f:34:b8:c8:3f:1c:1a:f8:0e:d5:3e:e5:f0:d0:
10:ae:d1:e7:46:b2:bb:63:0e:03:e9:8a:4e:a5:9b:5a:85:d5:
43:61:31:d6:65:ef:28:d6:70:8d:2e:4f:ee:75:42:d1:c0:50:
db:c2:f5:29:72:54:cc:32:89:7f:34:ba:88:b2:48:80:7b:18:
29:28:c6:83:38:0e:b3:ed:2d:dc:2a:0a:1a:f0:1e:f9:e9:c3:
0f:cb:48:3f:5e:db:f8:42:58:df:0f:6b:5e:68:a1:05:f9:2e:
1b:6b:b0:cf:52:03:c0:74:0d:16:9f:de:ec:90:6e:ae:0a:dd:
ba:db:b6:70:f0:2a:38:3e:d0:1f:b1:0d:b1:17:50:64:2a:56:
57:25:21:4d:d1:1c:22:72:18:3e:04:9c:84:7e:dd:a2:08:8d:
05:f6:80:22:cb:eb:f4:cb:3a:ff:a0:7d:4b:38:fc:53:81:40:
35:c5:a7:05:ef:0e:d1:c0:bc:8c:71:a5:93:58:19:5a:cb:b8:
ab:7d:a0:de:5a:69:9f:c0:cd:d0:86:52:48:c5:20:d8:15:4a:
18:c3:d1:e2:c0:7e:83:d5:35:ff:d5:89:34:04:48:2f:f6:f1:
21:f0:50:06
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVsyuVnPMZMooOOWaJlFPpyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh
ZGFmMWIwHhcNMjMwMTAxMTAwNTE0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNjQyNmMwZTZmOGFjNWE2ZmY3Nzk2ZGIzOTMxMWVjNzIxNDUyYTY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjp4Q+/yQkIgv9kwjBbuirzdQvt0U
7mRQYSH3XsK6uAKL1wAni91nvDG9bxDfweAbWAcGm8IXX4jc0jDkOHUZA1Wrnkeo
6rQnnB5lJ/4IrXkbJYkHhPZogZoFV0VDvUaCu39C6HcWzD6fiQVz4wzmU9cvZ3m0
WAq3Lq5NlKQZf3H9hWKp9ar0UV2mS/6sKTclRyUhBRmoGRa2k184QtZ9mXpAfXS3
vVu1LufD1P6FntEgTRZlGnVealHJidUkA1qE5ru7THQ4AyDEKJGNFwvf9r6Aezk9
Yo0dJmEif9L53TSt8b57Wl0JGMjTcDJmxTiL01byw0CkekuaSIcIJY+LEQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLZCbA5visWm/3eW2zkxHschRSplMB8GA1UdIwQY
MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt
OTQzZDAzMzIxMzI2LzEvdGtKc0RtLUt4YWJfZDViYk9URWV4eUZGS21VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2
LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwbR8MA0G
CSqGSIb3DQEBCwUAA4IBAQBKCDOTr7qbPTgYmST+X262RJyws3H/jzS4yD8cGvgO
1T7l8NAQrtHnRrK7Yw4D6YpOpZtahdVDYTHWZe8o1nCNLk/udULRwFDbwvUpclTM
Mol/NLqIskiAexgpKMaDOA6z7S3cKgoa8B756cMPy0g/Xtv4QljfD2teaKEF+S4b
a7DPUgPAdA0Wn97skG6uCt2627Zw8Co4PtAfsQ2xF1BkKlZXJSFN0Rwichg+BJyE
ft2iCI0F9oAiy+v0yzr/oH1LOPxTgUA1xacF7w7RwLyMcaWTWBlay7irfaDeWmmf
wM3QhlJIxSDYFUoYw9HiwH6D1TX/1Yk0BEgv9vEh8FAG
-----END CERTIFICATE-----
Generated at Tue Jan 2 06:33:20 2024 by rpki-client on console-ams.rpki-client.org