Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/6ecfdf-a94d-4ff0-8800-198c7872df4f/1/Tg49o_Hs2PWYMoNSJEGhXzIAbiM.roa
File: Tg49o_Hs2PWYMoNSJEGhXzIAbiM.roa (raw, json)
Hash identifier: /jV9Rvy/doPPuGr7Ct7TRp28bxTBnkf8RBL30XDrbkY=
Subject key identifier: 4E:0E:3D:A3:F1:EC:D8:F5:98:32:83:52:24:41:A1:5F:32:00:6E:23
Certificate issuer: /CN=d34271d123c60ecd7ac5288c72e60e41b5791f9f
Certificate serial: 01856E78EDA7B9F50734603F0DAE5CCB1770
Authority key identifier: D3:42:71:D1:23:C6:0E:CD:7A:C5:28:8C:72:E6:0E:41:B5:79:1F:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00Jx0SPGDs16xSiMcuYOQbV5H58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/6ecfdf-a94d-4ff0-8800-198c7872df4f/1/Tg49o_Hs2PWYMoNSJEGhXzIAbiM.roa
Signing time: Sun 01 Jan 2023 17:54:56 +0000
ROA not before: Sun 01 Jan 2023 17:54:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48095
IP address blocks: 185.222.172.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:78:ed:a7:b9:f5:07:34:60:3f:0d:ae:5c:cb:17:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d34271d123c60ecd7ac5288c72e60e41b5791f9f
Validity
Not Before: Jan 1 17:54:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4e0e3da3f1ecd8f5983283522441a15f32006e23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:56:91:39:43:8e:0d:68:59:9a:38:9d:7a:cb:
6e:ca:da:74:67:5e:c6:1b:af:75:6e:70:99:d3:b8:
9b:66:73:34:6d:8e:3e:a7:ec:69:3c:87:c5:fc:43:
a9:a7:8a:4d:a8:3d:97:a0:e1:50:0d:a6:d8:e2:ef:
a9:b5:6a:6f:71:65:f7:bf:e2:ff:ad:ab:57:39:97:
ec:67:b2:40:f4:f0:b6:55:ed:ea:89:1b:1d:bc:05:
b1:04:04:a8:42:d8:4d:2f:46:62:a2:47:14:21:b6:
6a:3e:1d:5d:60:99:54:fe:0b:75:48:31:88:4c:0f:
d8:22:84:15:09:53:79:04:ab:d4:b4:7d:50:6d:a6:
0a:a8:3c:17:e6:25:4d:2d:58:f4:48:04:cf:ec:1b:
74:2a:d1:01:b9:5c:a4:59:43:ee:04:0a:fa:99:9f:
8a:b8:4b:52:f3:11:65:7e:fb:85:64:2c:7b:61:05:
4c:5d:e1:f3:91:45:be:f3:3b:4c:cf:30:78:97:f7:
0b:87:c9:7c:b8:99:b1:29:6d:ec:b3:97:43:6a:0d:
3f:72:18:85:bb:19:8c:da:23:fd:9a:e2:5c:40:9e:
e2:b6:f1:14:a2:1b:37:86:e9:ee:be:bc:de:1d:7d:
bb:d3:79:6a:aa:e3:b2:7f:c0:d0:53:f7:9d:de:ad:
cd:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:0E:3D:A3:F1:EC:D8:F5:98:32:83:52:24:41:A1:5F:32:00:6E:23
X509v3 Authority Key Identifier:
keyid:D3:42:71:D1:23:C6:0E:CD:7A:C5:28:8C:72:E6:0E:41:B5:79:1F:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00Jx0SPGDs16xSiMcuYOQbV5H58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/6ecfdf-a94d-4ff0-8800-198c7872df4f/1/Tg49o_Hs2PWYMoNSJEGhXzIAbiM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/6ecfdf-a94d-4ff0-8800-198c7872df4f/1/00Jx0SPGDs16xSiMcuYOQbV5H58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.172.0/22
Signature Algorithm: sha256WithRSAEncryption
90:d6:08:58:41:d7:48:4a:09:ab:49:a0:2b:e8:0c:51:37:b5:
2f:d2:c3:30:ac:e9:c1:76:d0:07:2d:22:d8:84:00:3c:05:bb:
ce:8b:c8:7e:c3:d4:69:b0:29:41:f4:24:9a:3f:37:b7:f9:48:
1e:b4:55:92:b6:9e:6f:91:c0:0d:2b:0a:93:34:02:2e:e6:e1:
c9:0b:e6:49:b2:0c:25:c1:ab:9b:4b:ad:37:44:12:25:58:16:
7b:15:db:63:a3:5a:49:45:42:bb:3d:1e:ad:87:0e:13:07:9a:
53:45:91:2a:69:bd:56:05:df:80:d3:c7:b5:c7:13:9f:15:81:
6f:89:3e:b0:21:fa:1f:ff:be:38:67:e9:18:9a:9e:fe:82:b4:
2c:0c:a8:45:fd:23:d8:7d:71:67:b8:db:23:9a:4e:df:77:c0:
9a:6b:81:e8:12:85:e1:05:d5:42:d9:a6:12:3e:e7:d8:a9:8f:
d2:5c:92:56:e0:eb:62:21:a9:46:de:a0:46:45:07:68:85:3c:
3c:6f:a8:41:9c:b4:97:14:a5:56:e2:b3:2e:86:6d:54:64:7d:
3c:d1:90:d1:1a:bc:4a:49:0e:c9:0c:15:a1:5b:37:9b:bf:b3:
d7:2f:f3:b7:16:23:d2:d9:ef:d3:64:a4:7e:da:5b:09:93:46:
43:b5:2c:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:18:14 2024 by rpki-client on console.sobornost.net