Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/tmm26BFX2DXr7I4qgwFi_dVGlGU.roa
File: tmm26BFX2DXr7I4qgwFi_dVGlGU.roa (raw, json)
Hash identifier: 4nWcxXNrsF61qoaXJdOZGFhJt53BTWPsabshtY413Pc=
Subject key identifier: B6:69:B6:E8:11:57:D8:35:EB:EC:8E:2A:83:01:62:FD:D5:46:94:65
Certificate issuer: /CN=07e5c4e4be3b8cbde0eae9460a11032d6a64ab71
Certificate serial: 01856FCBAD1FCB8EC555D9006E9B486DE185
Authority key identifier: 07:E5:C4:E4:BE:3B:8C:BD:E0:EA:E9:46:0A:11:03:2D:6A:64:AB:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B-XE5L47jL3g6ulGChEDLWpkq3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/tmm26BFX2DXr7I4qgwFi_dVGlGU.roa
Signing time: Mon 02 Jan 2023 00:04:57 +0000
ROA not before: Mon 02 Jan 2023 00:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56611
IP address blocks: 185.173.232.0/24 maxlen: 24
185.173.233.0/24 maxlen: 24
185.173.234.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:cb:ad:1f:cb:8e:c5:55:d9:00:6e:9b:48:6d:e1:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07e5c4e4be3b8cbde0eae9460a11032d6a64ab71
Validity
Not Before: Jan 2 00:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b669b6e81157d835ebec8e2a830162fdd5469465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:82:e0:df:e7:3e:bb:a2:47:a8:8e:eb:37:fd:
cc:0c:94:2c:78:2a:04:26:8a:9b:be:51:b1:2f:0d:
45:7d:4e:2c:4f:e1:43:4b:a6:0f:8f:75:af:51:90:
95:6c:ce:d3:77:7b:0f:58:4c:aa:6c:c3:9b:51:e3:
37:0c:f2:18:f7:7f:90:90:b2:11:dd:73:c0:e7:76:
4e:ee:11:bc:a2:06:21:96:6b:d6:96:57:31:a4:90:
1b:54:dd:f8:41:19:4e:e9:b8:d1:7b:5e:d8:ac:d0:
b1:51:2d:0a:8f:f2:50:52:c0:80:e9:46:50:db:ef:
46:0f:3c:9e:84:16:f7:65:ba:f1:1a:39:0e:6c:18:
84:85:18:8f:d1:c4:42:a2:1d:0e:02:5f:82:49:81:
4a:e2:44:83:db:0b:37:e6:22:47:d7:ab:88:0c:8c:
ec:11:ab:2f:f9:da:f7:8c:eb:33:bc:91:7d:ed:d3:
0b:05:b4:84:17:ea:c9:fe:71:35:14:fb:1c:9d:a2:
9a:d5:f3:5d:af:a3:31:1d:e8:da:9a:50:fe:3b:a6:
33:dc:6e:d9:f9:73:a4:90:86:68:e5:ac:78:1b:af:
1b:ee:04:e8:27:13:85:65:42:17:94:63:c1:9c:44:
61:48:cc:71:43:e9:ac:e5:f8:1e:ce:19:33:13:81:
86:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:69:B6:E8:11:57:D8:35:EB:EC:8E:2A:83:01:62:FD:D5:46:94:65
X509v3 Authority Key Identifier:
keyid:07:E5:C4:E4:BE:3B:8C:BD:E0:EA:E9:46:0A:11:03:2D:6A:64:AB:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-XE5L47jL3g6ulGChEDLWpkq3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/tmm26BFX2DXr7I4qgwFi_dVGlGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.173.232.0-185.173.234.255
Signature Algorithm: sha256WithRSAEncryption
78:a6:6e:b3:ef:e8:05:ed:c3:be:c8:3c:f6:77:83:e9:f7:21:
ee:0c:c4:1b:8b:9e:68:07:2e:b9:a8:43:ea:b5:02:0e:d7:6c:
09:a0:ec:86:c4:69:a5:0b:e1:ca:db:a7:c0:a0:fe:60:39:e8:
9f:a2:27:82:66:a5:67:4c:8f:44:a0:63:8b:4c:c3:3e:b7:20:
28:b6:65:a0:18:dc:f4:4a:19:aa:25:0b:63:91:7d:2c:c5:4c:
73:2e:4b:2f:c9:f1:45:84:d5:2b:d3:1a:90:64:c2:f8:bf:5d:
06:8f:a8:6d:99:08:1e:b1:a6:64:82:11:f8:c1:72:82:ee:77:
36:6a:d2:a1:59:6a:37:af:4c:0a:4b:63:e9:bb:a5:cb:dd:0f:
35:bd:8c:c4:32:97:1a:94:fb:a2:86:b9:1e:b1:d7:5e:f1:ab:
6f:68:31:72:48:d8:7a:ee:5b:8f:f2:91:cf:4b:ae:aa:13:ee:
7a:c1:47:ab:7f:50:45:3d:a6:18:79:0d:ed:e7:76:dc:c5:76:
bf:ee:fd:07:2b:34:2c:cd:3d:b7:4b:3a:f2:65:d8:9d:93:99:
22:65:90:56:68:4c:05:07:94:e0:b3:46:61:43:f0:8f:ff:1d:
b4:89:23:1e:ea:00:02:ad:af:ad:4b:1b:6b:0e:0f:f7:15:f0:
e2:0c:56:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:56 2023 by rpki-client on console-fra.rpki-client.org