Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/tLNRAV1citQI35eN2l8qnykUePs.roa
File: tLNRAV1citQI35eN2l8qnykUePs.roa (raw, json)
Hash identifier: TzwgCyzHlQxHMT7ckEmQ4TSY2JS4bfB6ZURN7ZvF8GM=
Subject key identifier: B4:B3:51:01:5D:5C:8A:D4:08:DF:97:8D:DA:5F:2A:9F:29:14:78:FB
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 01856BEEAE90695A2A2F501985FCB6A1C8BA
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/tLNRAV1citQI35eN2l8qnykUePs.roa
Signing time: Sun 01 Jan 2023 06:04:42 +0000
ROA not before: Sun 01 Jan 2023 06:04:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12912
IP address blocks: 85.202.56.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ee:ae:90:69:5a:2a:2f:50:19:85:fc:b6:a1:c8:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 06:04:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b4b351015d5c8ad408df978dda5f2a9f291478fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4b:b2:86:69:34:ea:0e:79:7f:87:59:10:2f:
a1:d3:28:9c:b8:7e:91:31:e2:0f:a0:36:e9:fa:61:
80:0b:0e:af:ce:81:1b:a8:f1:2b:72:02:3f:36:a9:
b1:27:f5:99:47:4a:4e:97:51:a1:ba:8a:9e:78:c9:
d1:75:30:f0:15:6a:e1:0f:9c:a5:2b:1e:59:a4:48:
9f:27:2f:13:c4:aa:50:2e:3a:f4:58:33:f0:d1:50:
2f:93:7b:ba:4e:c0:d3:74:27:b7:db:8c:94:59:58:
b6:1a:18:ba:ec:40:81:b3:b2:d9:97:34:84:3e:4a:
0d:05:29:67:c6:1b:9b:ed:67:e9:a1:7d:33:d9:75:
60:ea:05:a3:2f:4e:66:04:81:95:ff:c7:9f:d9:d2:
30:ef:a8:3c:5e:07:da:77:72:07:67:db:07:a7:d9:
af:ed:6b:8e:3f:8f:65:0d:30:a2:de:d8:20:e9:3a:
9a:1b:57:eb:fe:02:ac:8f:c4:2a:08:c1:02:a8:d5:
4e:1f:1a:35:b2:b6:a0:cc:b4:7e:a0:80:23:d2:96:
e1:59:44:8d:44:50:27:e5:08:90:b3:14:8e:d3:c8:
81:05:ca:a6:50:5b:b7:f7:83:c0:1e:d2:59:f0:ff:
88:02:25:c8:0f:7c:b0:fe:d4:94:f5:ce:33:90:72:
b2:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:B3:51:01:5D:5C:8A:D4:08:DF:97:8D:DA:5F:2A:9F:29:14:78:FB
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/tLNRAV1citQI35eN2l8qnykUePs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.202.56.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:04:cf:d0:ce:e2:38:73:05:61:06:90:42:34:8d:42:be:b5:
6b:e0:23:27:1a:fe:5c:b8:9b:4c:66:e1:79:50:70:c4:c9:00:
be:4b:12:33:14:6a:96:da:20:b9:87:d8:aa:df:2c:45:0b:12:
5e:07:15:39:55:1d:73:7e:9a:fe:79:48:d4:06:b4:b8:1e:cd:
db:47:30:60:b1:86:80:32:53:90:3d:de:aa:69:d9:07:35:31:
e9:e8:9f:73:c3:ee:7a:c4:d4:0d:35:2c:ec:46:67:36:7e:95:
20:dd:91:7d:f2:8f:23:af:58:2b:8a:2f:b6:2f:3d:12:85:06:
bf:9d:51:6e:55:c1:a6:e0:8d:df:80:7e:09:19:da:ed:c2:34:
a1:bf:89:a4:93:7f:9f:1c:10:f1:cd:ba:4e:73:7b:f2:f2:7e:
5d:51:c3:cb:ec:45:d0:3e:41:be:b3:21:d9:38:ed:9d:25:94:
60:96:53:7e:7e:9e:b8:61:3c:16:fe:bc:93:fd:a1:c8:3e:f1:
67:b2:34:21:ce:d9:ca:86:e7:02:84:4f:92:17:da:86:7c:33:
9f:8d:a7:31:1e:0a:07:b3:7d:20:ca:80:3d:02:6c:84:df:73:
f5:07:0e:46:b7:85:3d:fd:19:18:24:93:b5:e0:06:f0:27:a8:
28:19:d9:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:47 2024 by rpki-client on console-fra.rpki-client.org