Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/TB11EwMYCRECcVka4Jr4S68Qc1c.roa
File: TB11EwMYCRECcVka4Jr4S68Qc1c.roa (raw, json)
Hash identifier: X1IeGGDH8d7FdTnztx5c23yjm5VFADH++njc5c5MBmk=
Subject key identifier: 4C:1D:75:13:03:18:09:11:02:71:59:1A:E0:9A:F8:4B:AF:10:73:57
Certificate issuer: /CN=42ce759320195b9cc18ccfcb1b532aea949258f1
Certificate serial: 01856CCAE2EA049577DADD6E79AF52889BAE
Authority key identifier: 42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/TB11EwMYCRECcVka4Jr4S68Qc1c.roa
Signing time: Sun 01 Jan 2023 10:05:13 +0000
ROA not before: Sun 01 Jan 2023 10:05:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35145
IP address blocks: 5.181.226.0/23 maxlen: 23
5.181.226.0/24 maxlen: 24
5.181.227.0/24 maxlen: 24
2a0e:800::/32 maxlen: 48
2a0e:802:1::/48 maxlen: 48
2a0e:801::/32 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 14:35:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ca:e2:ea:04:95:77:da:dd:6e:79:af:52:88:9b:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42ce759320195b9cc18ccfcb1b532aea949258f1
Validity
Not Before: Jan 1 10:05:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4c1d7513031809110271591ae09af84baf107357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:51:eb:0f:2a:af:d3:c3:7a:15:34:63:c2:b3:
08:a7:80:5b:28:de:7b:67:4a:46:77:88:3c:b5:61:
54:7a:b1:76:52:8d:e1:39:a0:a3:2d:a9:77:d6:be:
93:b4:ed:2f:b8:6b:ca:f1:88:c4:30:e2:24:09:d0:
a2:98:b5:99:96:9f:6f:b6:a0:d2:e7:74:01:17:0f:
de:71:ef:3c:42:ff:20:d3:d2:e9:cb:fa:8d:38:a4:
98:f8:ca:03:9b:d3:2b:40:af:a7:a4:8e:b3:57:de:
cb:78:68:0b:2f:c0:fc:eb:7d:1f:2d:c7:4a:33:8c:
81:2e:5f:6a:df:fd:72:c3:4e:96:63:ff:47:cf:ab:
be:20:f7:2b:07:3e:4c:2f:ef:29:4f:cd:ee:55:2d:
f9:1f:df:3c:73:be:c0:98:49:ed:10:ec:c4:05:d6:
50:bd:f3:69:d9:42:04:fc:ff:5f:bf:c4:52:dd:5c:
19:92:71:b2:05:e5:1c:18:b4:b3:e0:63:9d:7e:99:
db:ab:60:94:33:b3:f6:3c:4c:b9:ca:0c:3f:e1:07:
af:e9:37:bf:a7:4e:4f:19:7f:59:da:0c:ab:29:d0:
ab:9d:ff:74:4d:0d:26:44:b1:28:d8:cf:a7:ea:85:
c7:b0:f3:cd:06:9b:3c:71:26:aa:9e:b1:8a:d0:66:
dc:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:1D:75:13:03:18:09:11:02:71:59:1A:E0:9A:F8:4B:AF:10:73:57
X509v3 Authority Key Identifier:
keyid:42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/TB11EwMYCRECcVka4Jr4S68Qc1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.226.0/23
IPv6:
2a0e:800::/31
2a0e:802:1::/48
Signature Algorithm: sha256WithRSAEncryption
11:5d:d7:2d:b6:cf:f7:f8:b2:d7:23:fa:f0:95:5d:39:83:f8:
c5:c0:d1:5e:0c:2a:76:04:dc:22:54:ed:43:50:00:9a:51:f8:
6a:e1:98:02:21:1f:9e:83:9a:8e:12:16:40:a6:e7:cb:ef:9e:
d3:ae:00:44:30:c8:2c:49:5b:2c:0c:c3:50:6e:3e:78:20:e5:
b5:01:7e:ae:a8:36:b4:10:ee:9f:41:08:be:61:bf:61:97:8a:
e5:58:be:e5:6f:23:08:59:cf:ed:cb:ba:4e:d1:0e:7f:4e:0b:
cc:67:e3:dc:ca:f5:9a:1b:23:59:1e:b9:e1:77:0c:b3:5e:e9:
24:0d:f4:9a:8f:cb:fe:bb:1e:f0:4e:59:b6:c4:3d:30:64:69:
40:fb:09:58:db:a4:01:18:a7:a5:ba:2e:e7:06:50:1f:c1:3f:
c8:cc:4e:0a:1c:ac:0d:07:86:10:d8:2d:74:b8:ef:ba:0e:91:
e6:f4:48:c9:0b:5b:e6:38:a2:72:5a:f3:22:17:c9:f2:1a:c0:
8a:7c:15:e7:f8:ce:48:8c:df:3e:0b:b6:07:55:10:e7:f1:59:
ea:4d:c8:78:fd:b7:57:9e:76:b9:64:c0:8a:65:fa:ef:f0:fa:
6a:94:24:17:93:79:b1:80:18:7c:94:82:10:94:c1:3c:ef:1a:
fa:7a:de:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:36 2024 by rpki-client on console-fra.rpki-client.org