Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/TLLwtFsZXIbaqFL3LZHezjimQyk.roa
File: TLLwtFsZXIbaqFL3LZHezjimQyk.roa (raw, json)
Hash identifier: Qz5qZSbuVZXJJb+Wk5E959PizLcb8Rcubsjl+rKzWeU=
Subject key identifier: 4C:B2:F0:B4:5B:19:5C:86:DA:A8:52:F7:2D:91:DE:CE:38:A6:43:29
Certificate issuer: /CN=07266adfb18b189f3dc4d3be6dc596254be5c9b1
Certificate serial: 018A1B8217DBD87A0C7D6AD50349D5C3F7E7
Authority key identifier: 07:26:6A:DF:B1:8B:18:9F:3D:C4:D3:BE:6D:C5:96:25:4B:E5:C9:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ByZq37GLGJ89xNO-bcWWJUvlybE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/TLLwtFsZXIbaqFL3LZHezjimQyk.roa
Signing time: Tue 22 Aug 2023 04:30:25 +0000
ROA not before: Tue 22 Aug 2023 04:30:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24722
IP address blocks: 46.20.202.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 10 Sep 2023 16:29:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:1b:82:17:db:d8:7a:0c:7d:6a:d5:03:49:d5:c3:f7:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07266adfb18b189f3dc4d3be6dc596254be5c9b1
Validity
Not Before: Aug 22 04:30:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4cb2f0b45b195c86daa852f72d91dece38a64329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:0a:65:85:c9:50:6c:b1:63:66:fc:c3:c7:7c:
51:e8:31:3a:4e:5e:52:fd:67:21:0a:04:c4:6a:12:
04:9e:ea:70:78:dd:8b:d6:2c:39:46:53:5f:e1:56:
dd:e6:61:d3:29:dc:53:1d:79:99:66:d2:7d:8b:1e:
31:18:82:6b:e1:cb:04:fe:29:55:ff:a0:a3:43:ec:
2e:50:ec:bd:ee:25:e4:68:b7:a3:79:55:07:35:50:
93:61:87:13:e1:b2:f4:f6:5f:e3:dd:a5:bb:03:df:
23:8b:4f:28:d7:f9:a1:e5:d3:6f:f7:66:1e:44:96:
cc:91:7a:47:f9:8d:2e:9c:bc:c0:6a:40:21:76:0d:
3c:9e:a7:1a:48:f5:1a:03:ec:e8:9e:82:60:f7:13:
c3:bc:74:29:35:94:9a:e8:01:cf:46:a9:b4:3b:57:
b3:81:99:3d:43:cd:1e:c1:7f:8f:a3:84:fc:68:5a:
73:2a:d4:56:52:72:03:62:09:d7:4c:b5:21:71:f8:
2f:59:4c:b3:06:c6:dc:65:93:12:0a:dd:de:17:79:
43:c8:ca:67:7b:88:c3:eb:13:0f:5e:49:8e:22:8f:
e6:fd:82:1e:a8:c1:76:0a:4d:a8:ac:ea:c7:57:f6:
0d:b7:67:08:1f:bc:48:82:0b:7b:24:08:8f:62:d5:
cc:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:B2:F0:B4:5B:19:5C:86:DA:A8:52:F7:2D:91:DE:CE:38:A6:43:29
X509v3 Authority Key Identifier:
keyid:07:26:6A:DF:B1:8B:18:9F:3D:C4:D3:BE:6D:C5:96:25:4B:E5:C9:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ByZq37GLGJ89xNO-bcWWJUvlybE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/TLLwtFsZXIbaqFL3LZHezjimQyk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.202.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:08:be:72:23:fd:c8:4f:74:24:49:db:d6:5c:df:7f:40:d2:
5f:f3:08:ce:55:85:63:76:af:c3:6b:6e:85:2e:a9:bd:d1:67:
a9:6f:54:db:a0:9e:6e:4c:38:dd:90:ba:87:19:e4:e2:bb:c8:
29:95:26:04:c7:18:09:ce:5d:1f:c6:c3:39:50:11:52:21:f6:
52:aa:eb:fd:b4:f2:7f:69:57:5e:2a:e0:96:8d:71:bd:c7:a1:
d7:f6:04:81:53:7d:ec:a4:91:73:8a:f7:7d:22:61:88:43:10:
c8:4e:62:ae:ab:b0:77:65:5f:36:d5:df:39:cd:c5:c6:e1:1c:
80:03:c5:0d:86:c9:bf:00:51:27:71:81:27:57:38:0e:15:58:
00:c8:32:52:de:ee:4c:83:66:ad:5e:c5:69:80:f0:48:ac:20:
39:6b:25:f4:11:5d:99:f2:d0:65:f7:24:a7:62:9e:f6:7e:78:
f5:3c:65:1c:0e:17:ba:6b:25:1f:a0:73:b0:8f:a9:e2:ec:d3:
e3:88:f2:3e:78:e0:a9:17:db:58:0c:c4:60:7d:c2:7e:e3:8a:
8c:82:56:77:25:62:0c:24:89:d9:23:7d:23:eb:be:e2:93:71:
be:b0:d4:e2:e9:b3:50:40:aa:7f:3b:17:19:83:0f:4f:95:b0:
34:21:d1:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:43 2024 by rpki-client on console-ams.rpki-client.org