Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/TMf4FJIsWgeZIlZEpb7TR81iw5k.roa
File: TMf4FJIsWgeZIlZEpb7TR81iw5k.roa (raw, json)
Hash identifier: qA4ZneI0jz8vkEG6xEqiGYhPjI/CET/bLCOqakAF9f8=
Subject key identifier: 4C:C7:F8:14:92:2C:5A:07:99:22:56:44:A5:BE:D3:47:CD:62:C3:99
Certificate issuer: /CN=29c2103fd2417c8869145617de94fcc913b085ef
Certificate serial: 0189F38A34084C9FCF311F3C3F0EA993430A
Authority key identifier: 29:C2:10:3F:D2:41:7C:88:69:14:56:17:DE:94:FC:C9:13:B0:85:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KcIQP9JBfIhpFFYX3pT8yROwhe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/TMf4FJIsWgeZIlZEpb7TR81iw5k.roa
Signing time: Mon 14 Aug 2023 10:14:28 +0000
ROA not before: Mon 14 Aug 2023 10:14:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8368
IP address blocks: 193.243.150.0/24 maxlen: 24
185.8.240.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 16 Aug 2023 10:05:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f3:8a:34:08:4c:9f:cf:31:1f:3c:3f:0e:a9:93:43:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29c2103fd2417c8869145617de94fcc913b085ef
Validity
Not Before: Aug 14 10:14:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4cc7f814922c5a0799225644a5bed347cd62c399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:da:95:f3:ca:1d:57:17:c0:1d:d9:d1:e1:73:
b6:89:46:d1:e7:20:ae:1f:44:a6:2e:da:9c:e3:d2:
31:55:4c:50:e1:27:a2:a3:9b:d1:43:e6:71:ad:fb:
dd:e2:c4:26:43:99:2b:c2:a8:73:38:d5:79:46:67:
42:73:68:94:e7:94:eb:0c:00:6d:9b:e8:fc:1b:b8:
ad:67:d6:0b:e9:4e:f3:75:f5:df:ad:c5:db:10:32:
af:73:3d:9d:ff:a9:02:03:57:eb:9a:47:bc:fb:95:
8a:b6:14:64:49:50:5d:0c:03:a1:e6:f6:c0:4b:21:
1f:d8:74:67:7b:d6:43:db:fa:18:90:2b:01:b5:f2:
ae:10:1e:2c:fb:ee:02:3c:a5:df:77:89:11:0a:53:
94:c0:a8:da:d4:8c:b9:c5:55:59:f7:b7:dc:7e:35:
76:2c:8b:59:3c:97:4f:3b:1e:3b:c3:09:c1:6b:24:
f3:f8:d7:45:40:76:b7:a7:bc:ce:3b:46:f9:49:4c:
0f:4c:9d:4a:41:21:63:cc:18:58:59:9c:39:2d:ea:
e2:77:ab:99:b6:a5:3b:63:d1:c8:f9:40:89:bb:b6:
05:4c:df:3f:95:3e:c4:e0:fb:b0:3b:aa:f1:20:ce:
46:d1:31:ca:8f:78:9d:6f:cf:f8:1a:7d:ba:07:66:
1c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:C7:F8:14:92:2C:5A:07:99:22:56:44:A5:BE:D3:47:CD:62:C3:99
X509v3 Authority Key Identifier:
keyid:29:C2:10:3F:D2:41:7C:88:69:14:56:17:DE:94:FC:C9:13:B0:85:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KcIQP9JBfIhpFFYX3pT8yROwhe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/TMf4FJIsWgeZIlZEpb7TR81iw5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.8.240.0/22
193.243.150.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:87:bf:6a:f1:b7:16:6c:c8:ed:28:dd:85:31:23:fd:21:6c:
94:c3:bd:03:a5:17:65:21:f6:2d:ca:63:39:95:e6:c2:e6:06:
1d:0f:01:db:14:7f:8e:ce:3d:be:ff:4a:dd:3e:f3:5c:27:b0:
d7:1a:18:3f:ec:c7:eb:b1:18:c2:ac:ca:8b:be:0e:3d:30:97:
1c:07:10:0c:4a:86:a5:ed:18:09:f2:e9:91:d1:ca:65:41:7b:
f7:2a:64:66:6d:fe:39:01:00:81:34:70:2d:cb:4b:fa:c3:77:
1d:f1:3e:22:20:c4:9b:8f:e3:70:6d:03:42:25:0d:c6:41:53:
58:96:35:aa:05:5d:fc:53:e2:e3:76:59:c3:a9:cc:b1:00:61:
ad:28:e2:78:37:d4:d9:a5:f3:21:bb:0f:b5:75:bf:7c:2d:d6:
c8:67:bc:4f:1b:2a:38:d5:3f:bd:d0:8e:4a:e2:70:5a:03:23:
38:8c:19:28:ff:78:1d:65:50:4a:97:af:4d:f6:92:16:4f:42:
95:bc:79:fe:de:58:0b:8e:9c:4b:5f:1d:2a:77:ba:c7:6d:71:
c6:94:fe:7b:69:4a:6e:e2:a6:b2:67:b0:35:c6:7a:28:cb:14:
a3:95:af:0e:45:f3:bc:40:a7:33:fb:57:8d:02:24:22:1d:d5:
c9:c2:76:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:09 2024 by rpki-client on console-ams.rpki-client.org