Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/TlZL4jCwyRVXt5ORdBy54xTkcdo.roa
File: TlZL4jCwyRVXt5ORdBy54xTkcdo.roa (raw, json)
Hash identifier: CM+p0f26rVc5Aoq/g7RbCTn1B9CQIiUMXEuUI7q3VAI=
Subject key identifier: 4E:56:4B:E2:30:B0:C9:15:57:B7:93:91:74:1C:B9:E3:14:E4:71:DA
Certificate issuer: /CN=08d3a515683e9ddb85d38e7ab39c33aedacaf7ef
Certificate serial: 018572DEEDC789B81C29410C2B5876F3864C
Authority key identifier: 08:D3:A5:15:68:3E:9D:DB:85:D3:8E:7A:B3:9C:33:AE:DA:CA:F7:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNOlFWg-nduF0456s5wzrtrK9-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/TlZL4jCwyRVXt5ORdBy54xTkcdo.roa
Signing time: Mon 02 Jan 2023 14:24:50 +0000
ROA not before: Mon 02 Jan 2023 14:24:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42229
IP address blocks: 185.1.90.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:de:ed:c7:89:b8:1c:29:41:0c:2b:58:76:f3:86:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d3a515683e9ddb85d38e7ab39c33aedacaf7ef
Validity
Not Before: Jan 2 14:24:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4e564be230b0c91557b79391741cb9e314e471da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f4:09:f8:19:54:65:d3:f5:96:34:2d:fa:e7:
48:94:cd:57:f8:4e:b8:aa:68:38:6c:c8:21:38:bb:
75:57:be:17:41:ef:f2:4a:73:7a:b7:21:fe:af:ab:
b0:ed:a3:29:fc:e5:9f:25:33:cc:94:ee:53:9b:0b:
46:7f:6f:02:17:d8:c9:ef:93:9f:c5:fd:fd:ea:46:
dd:69:ee:9d:cd:18:01:7b:79:44:29:9b:e0:3b:69:
d3:6e:b0:1a:bd:8c:22:80:c6:40:c2:7e:12:2e:f5:
46:47:a3:b0:ac:25:54:57:9f:96:ba:b6:c7:81:04:
85:74:7d:72:8e:13:48:4b:a9:e3:e4:40:f0:ed:e3:
96:90:4a:b1:e3:65:db:2e:81:c2:06:c5:5d:83:8d:
6e:ca:4f:22:a9:2d:41:b1:91:24:29:51:1c:66:ec:
4b:1f:32:bd:d7:6e:97:ba:bc:ed:6c:2b:6e:fb:07:
e7:57:6d:98:49:9f:d1:d3:79:f4:db:60:c7:54:3d:
33:be:39:e8:01:61:82:20:a0:87:e9:df:46:5f:4e:
3f:21:30:5f:b6:48:44:e3:c6:30:4f:f3:88:00:10:
54:61:37:e6:f8:18:8f:cb:c1:83:45:95:38:cb:d7:
dc:30:1d:f4:83:12:92:ea:70:2d:22:c9:fd:64:d6:
69:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:56:4B:E2:30:B0:C9:15:57:B7:93:91:74:1C:B9:E3:14:E4:71:DA
X509v3 Authority Key Identifier:
keyid:08:D3:A5:15:68:3E:9D:DB:85:D3:8E:7A:B3:9C:33:AE:DA:CA:F7:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNOlFWg-nduF0456s5wzrtrK9-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/TlZL4jCwyRVXt5ORdBy54xTkcdo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.1.90.0/24
Signature Algorithm: sha256WithRSAEncryption
37:6a:66:97:46:94:8d:d4:ff:29:ef:94:ac:cb:86:fc:73:3a:
d0:8c:be:64:04:58:f6:e1:36:72:81:75:74:58:3b:77:bc:1e:
06:e5:2d:48:dc:97:cd:f4:d9:18:06:85:84:18:22:40:72:4b:
15:3d:5b:e3:ec:35:06:7b:c3:8c:e3:9b:12:50:50:e1:2a:44:
45:5a:51:4e:85:b9:ef:03:ee:7e:e2:c8:31:33:f8:c1:3c:7e:
8a:72:86:78:a1:40:3c:14:31:3a:a8:bd:5d:53:d4:7e:7c:ab:
62:62:5a:e9:2f:d6:e0:f8:36:50:84:6e:0c:82:e4:83:81:96:
36:f7:f3:e8:0e:aa:5c:da:d6:89:ba:bc:04:5d:af:87:48:9e:
0c:b9:07:5d:2b:77:f5:56:73:a5:5b:61:aa:55:77:e7:85:61:
2d:45:33:ba:01:1e:a2:e0:b1:b3:a5:fd:d6:29:62:85:67:8e:
b9:dd:6d:2b:01:75:b7:7e:4d:72:2f:70:66:65:2c:ea:0c:c3:
d7:be:e3:58:df:ad:b3:04:39:61:e2:dd:d4:36:6c:8b:59:de:
67:41:21:dd:bf:3e:fa:c4:3f:4d:55:a5:9f:25:39:f9:75:1c:
26:98:01:34:52:cc:ce:36:63:db:06:9e:df:f0:e1:02:e9:52:
a3:0c:a3:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:14:29 2024 by rpki-client on console.sobornost.net