Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/tFVzFjCrMAGFL2TB84UCEhzK1tA.roa
File: tFVzFjCrMAGFL2TB84UCEhzK1tA.roa (raw, json)
Hash identifier: 4hPQUneukIcGdVV+ir+DIMunhVstkuSYHC3JcMFwqzs=
Subject key identifier: B4:55:73:16:30:AB:30:01:85:2F:64:C1:F3:85:02:12:1C:CA:D6:D0
Certificate issuer: /CN=2f2b26c552563006213cfe4814a9dc2a0fc16f43
Certificate serial: 018B807ECE8E9BD60F40E006F05B037CE49C
Authority key identifier: 2F:2B:26:C5:52:56:30:06:21:3C:FE:48:14:A9:DC:2A:0F:C1:6F:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LysmxVJWMAYhPP5IFKncKg_Bb0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/tFVzFjCrMAGFL2TB84UCEhzK1tA.roa
Signing time: Mon 30 Oct 2023 12:11:15 +0000
ROA not before: Mon 30 Oct 2023 12:11:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6730
IP address blocks: 185.131.204.0/24 maxlen: 24
2a12:bfc0::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:80:7e:ce:8e:9b:d6:0f:40:e0:06:f0:5b:03:7c:e4:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f2b26c552563006213cfe4814a9dc2a0fc16f43
Validity
Not Before: Oct 30 12:11:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b455731630ab3001852f64c1f38502121ccad6d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:4d:84:27:cd:3c:75:c7:6e:e5:3a:51:fb:07:
ec:36:56:4f:13:db:d5:ca:f3:a0:b9:e7:9e:3e:8b:
b8:5a:48:f6:af:56:68:08:a9:7a:17:c1:d5:2f:6b:
1f:55:b1:3d:18:e2:bf:db:4e:be:96:7e:ec:f1:9d:
8e:52:71:78:94:bf:4e:34:78:37:30:53:07:f7:82:
b8:a6:21:95:fa:24:fe:18:60:be:7f:1b:7b:eb:b4:
d9:7e:aa:ad:5f:12:7e:22:9b:b0:01:8a:e9:90:10:
af:83:fc:af:4d:24:19:ac:58:55:7f:6b:95:bc:33:
cd:af:8f:d1:50:b5:8d:19:c0:3c:d3:f9:da:21:84:
f9:62:df:0b:c9:19:cd:ca:68:bc:1b:23:ea:8f:a6:
cc:97:2f:db:17:b3:c0:0b:c3:ca:34:81:d7:f9:eb:
aa:d9:55:a5:fb:20:9b:83:30:00:eb:de:d2:f4:16:
c7:bb:2d:25:f0:dc:0c:d1:3f:9e:84:58:5a:a0:ef:
a7:86:4c:9c:20:fd:1d:cb:09:87:ba:73:0c:f1:f1:
ec:54:79:71:26:26:4d:d1:40:2f:e5:c3:9c:c2:45:
eb:6d:50:16:c9:11:34:ea:2e:0f:bc:b9:81:bb:96:
d1:dc:d5:e6:03:7a:1f:df:86:b5:e7:8b:4e:18:c4:
b2:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:55:73:16:30:AB:30:01:85:2F:64:C1:F3:85:02:12:1C:CA:D6:D0
X509v3 Authority Key Identifier:
keyid:2F:2B:26:C5:52:56:30:06:21:3C:FE:48:14:A9:DC:2A:0F:C1:6F:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LysmxVJWMAYhPP5IFKncKg_Bb0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/tFVzFjCrMAGFL2TB84UCEhzK1tA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.131.204.0/24
IPv6:
2a12:bfc0::/48
Signature Algorithm: sha256WithRSAEncryption
73:8f:38:09:c7:79:b2:f2:a4:23:b3:6b:72:de:c5:e4:e1:2c:
be:08:f2:15:55:24:5c:6c:d1:15:b0:a3:69:14:77:85:ec:90:
0e:4a:2d:61:4a:88:64:ab:4a:27:6a:68:3d:a7:fc:bc:85:a4:
bf:2d:1e:46:61:b1:f9:33:5c:7f:da:2b:96:2b:58:05:0e:3a:
1e:16:58:d1:54:f4:3e:7b:d0:e7:28:e0:0b:36:5b:24:b0:de:
c3:ba:84:19:6b:6f:03:ee:62:51:bb:42:5c:6f:83:25:02:60:
b2:1f:aa:63:7c:4b:5d:23:ce:c7:c8:3b:1d:65:c8:43:3f:b9:
4b:75:d1:76:7f:72:31:2a:e4:35:2a:cb:bf:c3:54:ed:09:63:
42:71:66:61:c3:4e:1c:05:da:4b:66:3b:da:e1:ea:15:3a:e9:
02:b0:ce:ff:1d:10:ac:04:3d:5d:46:a7:04:2d:7e:2b:d0:dc:
0d:e4:b3:06:0f:e3:eb:32:f7:cf:e3:19:c1:ad:08:2f:36:10:
07:cb:97:06:39:91:c9:cb:60:3b:a4:59:8a:d7:4c:2f:e3:b9:
b1:49:3c:65:ff:19:5a:eb:07:a6:ee:7a:7a:fc:ed:56:e9:bf:
df:5f:ec:7a:68:d6:c6:1f:5c:50:f0:a0:12:1d:82:82:b5:aa:
aa:bf:98:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:14:55 2024 by rpki-client on console.sobornost.net