Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/tUtGQC59DdBIhozRPWlkls1VcSA.roa
File: tUtGQC59DdBIhozRPWlkls1VcSA.roa (raw, json)
Hash identifier: mjWN3OTgOz9XTT0OiNt/CMlUBBE0m+wHMDcOXDPFUYE=
Subject key identifier: B5:4B:46:40:2E:7D:0D:D0:48:86:8C:D1:3D:69:64:96:CD:55:71:20
Certificate issuer: /CN=99ce569a14c2db3772f23187ce68e6541ec0048e
Certificate serial: 018571FA1E8C64D530066786D46BACEE22F0
Authority key identifier: 99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/tUtGQC59DdBIhozRPWlkls1VcSA.roa
Signing time: Mon 02 Jan 2023 10:14:55 +0000
ROA not before: Mon 02 Jan 2023 10:14:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206776
IP address blocks: 185.196.222.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:fa:1e:8c:64:d5:30:06:67:86:d4:6b:ac:ee:22:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99ce569a14c2db3772f23187ce68e6541ec0048e
Validity
Not Before: Jan 2 10:14:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b54b46402e7d0dd048868cd13d696496cd557120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6a:c6:1e:a6:0a:04:1a:20:e9:e1:8f:46:21:
ed:e4:1c:72:35:eb:bb:61:4f:cb:65:08:5e:e8:8c:
2d:5c:3e:72:1e:27:1d:e1:6b:3c:f9:b0:76:0e:55:
a5:5a:41:2e:3a:f9:60:46:85:50:b1:fb:4d:09:f9:
56:2f:46:c3:e1:76:47:43:8f:62:d7:47:62:0f:a6:
3a:5b:70:2f:b1:a7:5f:4c:01:00:b4:03:45:98:53:
ed:76:4d:e8:cf:58:e6:13:31:cd:fc:2d:8e:95:0f:
84:fe:a8:0c:0c:6c:df:c6:b9:10:d4:e8:d6:b1:7f:
08:20:fa:23:83:12:d8:bb:03:b6:de:36:ef:b4:6d:
c0:ae:42:f7:d8:02:d3:72:6e:c4:57:fd:9e:44:8c:
ef:b6:f6:46:03:9f:03:98:c8:f9:ab:d1:fd:21:80:
b4:6c:a9:b9:d8:08:ec:87:1e:05:69:da:48:89:9e:
61:af:0d:8a:b5:dc:36:18:e5:98:28:3f:f8:8e:91:
04:d4:fa:d8:34:0f:70:b5:7e:bf:2d:01:60:06:71:
f1:2c:27:1e:d2:82:3a:41:da:06:3e:bf:bd:12:cc:
ed:df:d0:e8:e3:51:4a:b0:92:2a:46:34:d0:1c:5b:
a4:74:df:56:4c:d8:68:7a:57:d2:ef:fe:8a:49:f3:
e9:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:4B:46:40:2E:7D:0D:D0:48:86:8C:D1:3D:69:64:96:CD:55:71:20
X509v3 Authority Key Identifier:
keyid:99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/tUtGQC59DdBIhozRPWlkls1VcSA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.196.222.0/24
Signature Algorithm: sha256WithRSAEncryption
48:af:15:28:4c:8c:10:a3:bc:54:43:d2:e6:ca:5f:20:da:0c:
73:d8:db:c4:89:63:ff:4d:5d:a8:67:e4:59:1a:b5:69:6b:59:
6f:d9:81:55:71:77:ab:07:f0:d1:70:16:15:82:43:42:98:ac:
55:64:a6:0e:3f:71:42:1b:97:51:e7:64:9e:d8:19:6f:dc:ff:
d9:f0:a2:d0:e2:f4:77:41:32:c9:03:84:18:64:42:d4:7e:2c:
0f:a4:a5:61:c5:ea:9b:39:be:66:42:23:f3:01:e4:d5:e7:bc:
ca:f0:60:29:85:34:7d:4d:65:8b:5b:36:75:b5:78:b7:ea:29:
3b:d1:4c:f3:8e:d7:4b:10:3d:ee:93:71:00:50:61:c7:38:ca:
ab:4a:27:57:7e:3a:0b:1e:16:35:b0:d6:e5:4e:cb:15:bb:9f:
c7:97:9c:29:fb:43:4b:cf:89:57:8b:75:46:99:dc:2f:7d:d4:
89:5f:d1:aa:01:55:23:7a:6d:8f:66:ea:c1:a4:08:c1:57:ff:
76:34:aa:5b:26:bd:36:8b:ca:58:76:ec:5b:a5:ef:61:0e:2d:
94:44:a6:c4:eb:92:96:76:86:0d:ed:26:78:5b:5a:4b:2a:99:
5e:70:90:fb:5d:30:34:8e:24:d1:77:a6:c9:8c:b2:e7:6c:d1:
92:d6:0d:e5
-----BEGIN CERTIFICATE-----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Generated at Mon Sep 4 11:14:51 2023 by rpki-client on console-fra.rpki-client.org