Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/e1a78b-dd36-4ee9-a260-3b1aad9fdd57/1/Tbr8Iexq0IBGrmCVqTE103UcCIc.roa
File: Tbr8Iexq0IBGrmCVqTE103UcCIc.roa (raw, json)
Hash identifier: wpbUSGMTzKS5O/ASGLHxyNMXW7bDPneeYO98cb6vXdQ=
Subject key identifier: 4D:BA:FC:21:EC:6A:D0:80:46:AE:60:95:A9:31:35:D3:75:1C:08:87
Certificate issuer: /CN=ad102f1af17d00fd80a3d9fe9ffe81d04ce17447
Certificate serial: 0186786604C46BEA07A8A71262A0DC9C25F0
Authority key identifier: AD:10:2F:1A:F1:7D:00:FD:80:A3:D9:FE:9F:FE:81:D0:4C:E1:74:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rRAvGvF9AP2Ao9n-n_6B0EzhdEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/e1a78b-dd36-4ee9-a260-3b1aad9fdd57/1/Tbr8Iexq0IBGrmCVqTE103UcCIc.roa
Signing time: Wed 22 Feb 2023 09:13:17 +0000
ROA not before: Wed 22 Feb 2023 09:13:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202022
IP address blocks: 185.160.56.0/23 maxlen: 23
185.56.32.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:78:66:04:c4:6b:ea:07:a8:a7:12:62:a0:dc:9c:25:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad102f1af17d00fd80a3d9fe9ffe81d04ce17447
Validity
Not Before: Feb 22 09:13:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4dbafc21ec6ad08046ae6095a93135d3751c0887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:11:d9:dc:88:95:cf:73:28:69:28:52:d4:c1:
7b:5f:e2:f2:66:3d:01:4e:8b:db:55:c2:72:ae:d2:
0f:55:a3:dd:3a:02:f0:65:23:e1:0f:88:1f:71:e1:
8f:07:cc:6d:85:b3:c0:48:dd:be:08:8b:84:21:4f:
3d:a9:28:e1:3e:1c:05:7b:18:d1:da:e8:0c:d4:2a:
2c:e1:fd:ea:23:2f:fa:2f:b1:49:19:d5:03:ea:da:
ed:25:a2:db:fd:39:92:cc:ef:7c:0e:9d:70:9e:56:
38:9c:3e:ef:e3:9b:6c:f8:a8:3f:15:f1:c1:9c:90:
20:72:72:da:2a:20:44:12:38:7d:c9:32:2f:00:36:
a7:47:85:30:e0:b7:7a:af:ed:3c:3c:ba:56:27:8f:
de:d1:37:0b:58:87:a8:17:92:f0:66:a9:dd:ef:a7:
be:4e:76:fc:87:61:1c:90:ab:69:6f:a6:ee:24:9d:
b5:58:78:bd:7c:3b:35:c8:99:eb:77:a2:cd:da:17:
9b:75:ba:e5:cb:a2:4e:17:a9:7d:df:29:e3:0f:9b:
e6:59:df:67:63:5d:72:9e:22:cf:53:1f:25:05:22:
65:60:89:d1:f8:27:b4:77:35:09:5b:82:e8:64:67:
fc:47:25:0f:aa:01:7e:6b:0a:a0:a2:bf:a0:ed:1d:
3f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:BA:FC:21:EC:6A:D0:80:46:AE:60:95:A9:31:35:D3:75:1C:08:87
X509v3 Authority Key Identifier:
keyid:AD:10:2F:1A:F1:7D:00:FD:80:A3:D9:FE:9F:FE:81:D0:4C:E1:74:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rRAvGvF9AP2Ao9n-n_6B0EzhdEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e1a78b-dd36-4ee9-a260-3b1aad9fdd57/1/Tbr8Iexq0IBGrmCVqTE103UcCIc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e1a78b-dd36-4ee9-a260-3b1aad9fdd57/1/rRAvGvF9AP2Ao9n-n_6B0EzhdEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.56.32.0/22
185.160.56.0/23
Signature Algorithm: sha256WithRSAEncryption
4c:23:9c:01:a4:06:52:80:3d:e9:ba:ca:7c:72:bd:9a:67:80:
f3:14:04:7e:d0:81:e1:f4:1e:f4:9d:ab:88:41:83:fd:40:9a:
be:fc:b5:9d:9a:f2:e4:27:04:49:37:2e:60:42:04:6f:8d:42:
ca:0d:65:d0:41:fc:89:10:09:71:19:ff:39:64:1d:43:f8:22:
ee:3b:0b:e1:10:49:d5:37:86:22:f9:53:29:57:1c:20:53:21:
59:e8:c5:5d:26:5a:13:93:fb:7f:98:ed:8f:4c:6f:4e:9a:f2:
92:19:c8:a0:7b:d5:d1:10:a8:7d:b3:b9:ab:a5:11:d9:50:ed:
bb:d9:b5:72:61:96:2c:4a:40:8d:30:14:58:79:cd:08:6f:57:
92:4f:a6:27:de:18:11:a3:d5:d5:de:ad:dc:de:f7:8a:4b:ee:
8e:a8:fa:e4:b3:0f:20:de:cc:e5:88:bf:9a:e5:7f:ed:de:b4:
64:9e:55:a4:79:75:3e:66:35:bc:93:e3:23:81:78:0b:e0:24:
a4:67:46:60:37:09:93:6d:7c:76:b8:6c:69:20:33:97:f6:1a:
16:88:43:40:b1:41:dc:3e:57:2c:96:fa:2d:19:bc:86:9a:86:
30:be:40:35:2d:66:02:b7:4c:22:78:89:26:fa:2d:68:bc:60:
b3:a4:08:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:56 2023 by rpki-client on console.sobornost.net