Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/TxIaWeZ5wUrwlXQYe3gktZ8NqVw.roa
File: TxIaWeZ5wUrwlXQYe3gktZ8NqVw.roa (raw, json)
Hash identifier: bJwwAGTxNmpZBHa738QECtHrczYF4i4Iyhyc4UEQ4wI=
Subject key identifier: 4F:12:1A:59:E6:79:C1:4A:F0:95:74:18:7B:78:24:B5:9F:0D:A9:5C
Certificate issuer: /CN=60b9615df8c659dac8cc087bd011d4b5ff373e2a
Certificate serial: 01856ED4CA7DCA4992EE5AF8E618BB9C726A
Authority key identifier: 60:B9:61:5D:F8:C6:59:DA:C8:CC:08:7B:D0:11:D4:B5:FF:37:3E:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YLlhXfjGWdrIzAh70BHUtf83Pio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/TxIaWeZ5wUrwlXQYe3gktZ8NqVw.roa
Signing time: Sun 01 Jan 2023 19:35:17 +0000
ROA not before: Sun 01 Jan 2023 19:35:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8589
IP address blocks: 185.121.124.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:ca:7d:ca:49:92:ee:5a:f8:e6:18:bb:9c:72:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60b9615df8c659dac8cc087bd011d4b5ff373e2a
Validity
Not Before: Jan 1 19:35:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4f121a59e679c14af09574187b7824b59f0da95c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e4:e8:1e:0c:e5:02:d5:3a:7f:85:2f:27:c5:
e8:d8:e9:1c:dc:c6:0d:e2:96:0e:2a:d9:80:02:31:
db:d5:33:c8:8a:7e:44:75:95:3f:7f:9c:ef:79:db:
65:bc:17:ef:63:45:2b:e5:f7:4e:b4:43:d5:ee:76:
a3:f1:d2:cf:d2:81:ec:d5:3a:f6:6a:7f:f9:31:04:
9a:85:ce:a2:1f:9f:e9:7e:35:53:5a:2a:53:cb:9a:
94:06:d8:f4:95:3e:4d:a8:0b:2a:35:c7:ee:da:cd:
fc:c5:3b:ff:a1:ed:8e:c7:73:4e:a7:63:f8:8a:51:
ff:47:50:e6:84:0d:22:40:e8:44:4d:0b:89:b2:4f:
bf:db:33:2e:c6:6d:5d:8d:9e:f1:31:21:6f:4e:46:
ab:87:58:24:0c:c7:29:cc:db:a9:87:9f:d3:c8:41:
d8:ee:f7:30:20:fb:5b:10:9a:ae:d8:21:d7:cb:3f:
9f:9d:04:bd:3d:16:2d:19:5f:34:71:95:ef:a3:19:
c6:26:72:ce:b3:07:af:1f:e8:f5:9e:dc:e0:cf:bf:
15:e6:e0:37:81:a7:ba:7b:60:65:18:71:d2:26:bd:
42:d5:90:ae:ef:3d:0a:3e:3c:e9:e0:7b:03:c4:1d:
d0:2b:ca:12:8d:26:a9:00:e4:2f:47:0c:30:92:d4:
5c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:12:1A:59:E6:79:C1:4A:F0:95:74:18:7B:78:24:B5:9F:0D:A9:5C
X509v3 Authority Key Identifier:
keyid:60:B9:61:5D:F8:C6:59:DA:C8:CC:08:7B:D0:11:D4:B5:FF:37:3E:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YLlhXfjGWdrIzAh70BHUtf83Pio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/TxIaWeZ5wUrwlXQYe3gktZ8NqVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.124.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:58:52:ac:ba:3b:8a:8f:97:3e:ff:53:80:14:f2:49:ca:87:
4e:9b:5e:cf:22:14:51:98:ea:ba:7b:35:ce:5c:63:a0:0d:b4:
6f:ed:68:9f:49:db:9c:0f:4f:aa:25:2a:e0:3c:0f:4d:85:bf:
e5:b7:fe:84:b1:43:c1:db:92:d2:7d:63:ba:67:dd:12:40:19:
1d:cc:de:f2:87:83:17:1b:25:5d:be:e3:e0:08:24:96:51:f8:
39:03:2f:aa:f2:66:57:e2:7f:9e:63:3a:b9:1e:d5:f4:69:df:
1a:b2:2d:d2:c5:d1:09:88:ba:7b:b2:3d:11:fc:31:aa:6c:1b:
58:b2:28:5f:1d:f8:26:2f:86:dc:6d:b6:a7:f2:4c:63:91:70:
19:d1:4a:3f:2d:a3:2d:a4:c6:ed:21:d1:0b:3c:bb:2c:01:c7:
ab:4d:e3:e4:e4:d0:5b:83:46:49:d2:1d:47:ea:9e:89:24:cd:
56:2c:32:f8:b1:ad:80:82:fe:9a:4f:fe:b1:24:89:25:fb:6d:
24:ec:aa:20:b4:75:f9:9f:3d:02:fc:15:2a:3e:31:e5:0c:d1:
84:c7:eb:ee:69:2c:bc:f5:8c:92:3b:f8:ae:dc:d0:c3:8f:0b:
bb:40:71:d0:8c:6a:41:f4:94:f6:8e:40:2e:be:0c:28:18:ce:
3b:59:04:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:14:14 2024 by rpki-client on console.sobornost.net