Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/TtfA6N64TBtp7_wLxmgm3TEwKTg.roa
File: TtfA6N64TBtp7_wLxmgm3TEwKTg.roa (raw, json)
Hash identifier: ZASTu3OfsDg91Ke8Az8JV4mp8BRkyFMIZkHGWmAWSYQ=
Subject key identifier: 4E:D7:C0:E8:DE:B8:4C:1B:69:EF:FC:0B:C6:68:26:DD:31:30:29:38
Certificate issuer: /CN=15ce06b44d8dc43dc742c40de3bda8aa3744e2bd
Certificate serial: 0185720C7D497BF1C33E3E39989D75D9A586
Authority key identifier: 15:CE:06:B4:4D:8D:C4:3D:C7:42:C4:0D:E3:BD:A8:AA:37:44:E2:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fc4GtE2NxD3HQsQN472oqjdE4r0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/TtfA6N64TBtp7_wLxmgm3TEwKTg.roa
Signing time: Mon 02 Jan 2023 10:34:59 +0000
ROA not before: Mon 02 Jan 2023 10:34:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21467
IP address blocks: 193.109.231.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:30:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:0c:7d:49:7b:f1:c3:3e:3e:39:98:9d:75:d9:a5:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15ce06b44d8dc43dc742c40de3bda8aa3744e2bd
Validity
Not Before: Jan 2 10:34:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4ed7c0e8deb84c1b69effc0bc66826dd31302938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ee:24:76:03:b1:77:46:f9:de:35:c6:5c:dd:
f5:81:c5:ee:06:01:36:f2:b7:af:75:8c:32:ba:88:
f1:c5:dc:67:02:ea:a8:5a:b1:ba:c5:22:f1:51:15:
45:5c:46:d3:eb:90:e0:71:37:fc:30:72:c8:53:68:
61:b7:7c:62:1c:5e:9b:33:57:15:4c:53:e6:5c:c0:
bf:c5:c1:60:42:de:b0:4c:bb:f7:e1:fa:a5:45:93:
9f:7c:2b:3e:e4:b0:67:43:67:41:65:9b:b3:d2:ff:
7e:63:9e:1e:65:f2:43:22:3a:f8:c0:88:ec:af:18:
9f:1d:fb:84:d6:6d:87:ac:87:bf:d9:00:c7:29:aa:
c2:c1:d6:c4:6f:08:ee:7b:b0:c3:4e:b5:58:c8:76:
c2:1e:cf:00:53:31:34:06:7d:34:5c:9b:08:45:42:
d7:d6:e1:e3:3e:17:79:ee:56:8e:82:ca:cd:75:d5:
b9:72:52:b6:48:7a:cf:bd:75:de:e2:7e:e7:0b:81:
e0:c9:f5:95:02:a0:f8:84:1e:4f:55:9a:db:8f:7a:
95:58:e1:ba:19:d1:02:9b:e2:2c:cb:eb:d4:8a:9e:
90:6d:44:d3:03:e9:f7:86:c7:71:f9:45:cc:77:17:
b8:8c:12:53:59:c7:26:29:90:31:65:0b:d5:87:09:
0a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:D7:C0:E8:DE:B8:4C:1B:69:EF:FC:0B:C6:68:26:DD:31:30:29:38
X509v3 Authority Key Identifier:
keyid:15:CE:06:B4:4D:8D:C4:3D:C7:42:C4:0D:E3:BD:A8:AA:37:44:E2:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fc4GtE2NxD3HQsQN472oqjdE4r0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/TtfA6N64TBtp7_wLxmgm3TEwKTg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.231.0/24
Signature Algorithm: sha256WithRSAEncryption
26:b1:89:d2:5a:e3:2f:1f:f7:bc:c9:90:c0:e0:df:45:93:7a:
66:c6:12:36:4f:de:29:84:26:54:ec:77:83:7f:1b:c4:c9:9a:
b3:ac:2e:de:00:ff:83:bc:d3:36:1d:43:af:92:36:d4:1a:17:
fe:a2:31:1c:32:08:ca:b7:fa:aa:1b:f3:4e:29:66:b6:ed:c2:
6b:b8:db:6f:f5:78:0e:be:40:72:5f:aa:28:a6:33:4b:81:05:
3a:0b:06:90:24:78:77:1c:e9:06:4c:45:c1:30:3b:77:1d:74:
62:cd:ac:1c:02:2c:3a:47:32:10:c0:07:a8:d3:d4:36:83:59:
26:b6:1d:c9:4f:9c:63:bc:6d:d8:cb:59:3c:92:e4:f7:19:07:
50:0c:69:7f:6f:6a:ae:55:3d:d5:c7:45:22:7a:90:fd:eb:bb:
5d:1e:61:e7:b8:b5:3c:45:be:ca:93:f4:2d:03:c8:a9:af:f0:
83:c3:94:9e:a2:ff:6d:23:51:57:85:f1:47:ae:9f:a4:c9:36:
d1:d7:33:69:b6:b5:b0:db:38:69:c6:c7:20:eb:da:4c:0f:47:
ef:ff:29:c7:59:d1:f7:7a:8d:bf:01:e4:ff:f9:c6:dc:71:38:
80:f0:a0:b8:d0:8b:d4:ad:1d:1e:cf:40:31:82:d9:6a:81:3f:
7f:16:7b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:26 2024 by rpki-client on console-fra.rpki-client.org