Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/182632-63c5-4e8e-b299-a04603709519/1/TedILEsL7WaACGmtRL6eMuDFplE.roa
File: TedILEsL7WaACGmtRL6eMuDFplE.roa (raw, json)
Hash identifier: LADQAisuW+77xGSIK1Ota0gLje4af0Pbc9lrDSpdVT4=
Subject key identifier: 4D:E7:48:2C:4B:0B:ED:66:80:08:69:AD:44:BE:9E:32:E0:C5:A6:51
Certificate issuer: /CN=d7db132b47c8edd83fed02d561e750604c20b1f8
Certificate serial: 01870921DE1CA7DBC4358A9CDD8D175EB8E1
Authority key identifier: D7:DB:13:2B:47:C8:ED:D8:3F:ED:02:D5:61:E7:50:60:4C:20:B1:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/19sTK0fI7dg_7QLVYedQYEwgsfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/182632-63c5-4e8e-b299-a04603709519/1/TedILEsL7WaACGmtRL6eMuDFplE.roa
Signing time: Wed 22 Mar 2023 11:43:47 +0000
ROA not before: Wed 22 Mar 2023 11:43:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199188
IP address blocks: 185.97.160.0/23 maxlen: 23
185.97.160.0/22 maxlen: 22
185.97.163.0/24 maxlen: 24
176.124.191.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:09:21:de:1c:a7:db:c4:35:8a:9c:dd:8d:17:5e:b8:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7db132b47c8edd83fed02d561e750604c20b1f8
Validity
Not Before: Mar 22 11:43:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4de7482c4b0bed66800869ad44be9e32e0c5a651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a4:a1:31:d2:b4:d1:48:ff:e9:2b:2a:c5:5f:
87:1f:3f:1a:d7:7b:3d:c3:37:2d:6b:6e:c4:ca:83:
fc:ed:e5:db:3c:28:53:ea:08:63:44:ca:9e:d8:a0:
49:79:a3:4f:2d:d5:57:9d:9c:94:ad:b9:83:d0:bc:
a6:7c:dd:8a:74:ef:df:bc:8a:1a:2d:da:a9:11:15:
8a:19:f2:b6:78:b3:d7:f3:53:a7:cc:ac:ec:29:3e:
02:90:b0:3a:d7:dd:ec:68:d3:3d:f7:d3:a0:5a:bc:
a6:82:3a:b0:69:4c:2b:2b:fb:6b:14:46:cc:91:e5:
12:57:2e:d9:fd:4a:ab:92:fe:e1:45:f2:2b:01:50:
6b:a7:b1:ba:2c:31:f2:81:d5:dc:2e:11:dd:64:42:
50:4a:5f:49:77:a3:2b:27:94:d6:e9:55:c3:f9:d0:
b7:59:0d:dc:d2:0b:85:03:09:06:40:98:64:29:da:
ce:7f:41:4e:1d:ec:af:d8:63:69:90:37:76:7d:e4:
b8:68:53:63:68:10:e0:a1:bc:20:b9:c6:13:dd:37:
8a:6e:31:f1:20:67:95:ab:33:ad:7b:d4:94:5f:e4:
8f:f5:e9:4d:a2:b8:d8:ea:99:ea:39:6e:0c:40:99:
b1:a6:91:08:51:c1:b8:a6:5f:6f:85:c8:90:53:2e:
bc:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:E7:48:2C:4B:0B:ED:66:80:08:69:AD:44:BE:9E:32:E0:C5:A6:51
X509v3 Authority Key Identifier:
keyid:D7:DB:13:2B:47:C8:ED:D8:3F:ED:02:D5:61:E7:50:60:4C:20:B1:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/19sTK0fI7dg_7QLVYedQYEwgsfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/182632-63c5-4e8e-b299-a04603709519/1/TedILEsL7WaACGmtRL6eMuDFplE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/182632-63c5-4e8e-b299-a04603709519/1/19sTK0fI7dg_7QLVYedQYEwgsfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.124.191.0/24
185.97.160.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:2f:a5:7b:5a:49:6b:59:ce:2b:a2:84:99:4d:19:25:16:7f:
ce:6e:b2:07:4d:ef:fd:75:ed:ff:b4:bf:23:ef:dc:14:51:3c:
2f:c7:c9:3b:b5:d0:5b:f7:5a:c8:0e:c3:d8:d6:39:5f:6a:a2:
dc:52:c6:58:e0:f7:12:fa:7b:33:22:0e:f7:1b:3f:54:70:d0:
e6:bf:5a:d6:ab:f7:ee:a2:c5:36:df:ea:a3:76:5e:93:0e:41:
79:96:2f:87:50:a3:d9:09:1f:76:a6:60:5d:35:ec:0f:39:2e:
8c:d5:8f:23:bf:1e:fb:30:b1:0e:d1:44:06:16:75:8a:34:dd:
85:93:9a:5a:57:71:e8:50:64:ad:cb:0c:b0:10:ae:8d:98:e2:
e3:17:fa:0c:35:a9:45:6c:09:7b:7e:0c:b4:4d:60:f6:f4:d4:
df:e4:ee:43:b6:17:b9:ee:94:1c:71:d5:12:bf:6a:e4:2a:7a:
ac:38:06:ee:5c:0f:fd:f6:86:d6:9e:da:34:8f:a0:ad:e9:9a:
74:b3:ef:99:c6:9a:81:40:2c:7d:f2:ed:9d:18:89:5a:72:2d:
14:8f:11:12:50:f0:63:d0:84:d0:68:a5:6a:f4:ad:9a:62:2f:
db:2f:dd:45:70:6e:bd:fa:fe:ab:41:af:fa:0c:a9:e2:6a:fb:
6c:5b:07:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:36:14 2024 by rpki-client on console-fra.rpki-client.org