Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/TZ1veggTT7hB17FgR7tFYXTcRY0.roa
File: TZ1veggTT7hB17FgR7tFYXTcRY0.roa (raw, json)
Hash identifier: mvJfyRZqhWNy7yCKtIGwA7F+6EpDFteWFXyEb/t/vxY=
Subject key identifier: 4D:9D:6F:7A:08:13:4F:B8:41:D7:B1:60:47:BB:45:61:74:DC:45:8D
Certificate issuer: /CN=21e86ff9973c93abe6398f031966c29d75a3ba86
Certificate serial: 01856D7876C2E7271486F68D9EE4DBBF132E
Authority key identifier: 21:E8:6F:F9:97:3C:93:AB:E6:39:8F:03:19:66:C2:9D:75:A3:BA:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/TZ1veggTT7hB17FgR7tFYXTcRY0.roa
Signing time: Sun 01 Jan 2023 13:14:49 +0000
ROA not before: Sun 01 Jan 2023 13:14:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13443
IP address blocks: 144.2.22.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:30:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:78:76:c2:e7:27:14:86:f6:8d:9e:e4:db:bf:13:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21e86ff9973c93abe6398f031966c29d75a3ba86
Validity
Not Before: Jan 1 13:14:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4d9d6f7a08134fb841d7b16047bb456174dc458d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c0:cb:12:3a:11:95:97:55:f1:b4:58:6d:dc:
ff:f6:14:3e:22:9e:06:e4:8b:c9:1c:cd:4c:45:89:
01:b4:d2:3b:d8:fd:06:2b:b6:ff:62:b8:83:c4:71:
d9:1f:f8:a5:68:d1:3d:83:66:65:d9:42:78:11:58:
b2:c5:8f:7c:bb:36:c0:a2:63:a6:c4:fa:b5:cc:bc:
cb:4b:25:30:d3:03:78:b4:d5:e5:c1:b9:15:2c:fd:
8a:f2:c8:45:f4:7b:d5:24:e2:05:c1:08:05:54:47:
a1:39:6a:92:3b:15:01:70:41:f0:d5:2b:77:0d:75:
16:cc:4c:9e:1b:c1:4e:3f:60:2a:03:91:50:48:18:
15:c5:84:d1:d9:fa:80:4b:6c:c6:ab:ca:e1:67:e1:
14:01:59:de:22:39:51:61:1b:be:06:92:fc:d2:71:
50:f3:8c:6f:0c:e9:ac:49:c4:94:f7:29:e0:28:b5:
e6:4b:31:f4:3f:72:4d:0e:1c:9d:3d:4f:dc:36:45:
46:ab:e5:2c:fd:f5:1c:e0:97:eb:e3:5b:99:51:c5:
f2:67:a3:f2:be:15:df:bb:17:3c:a8:67:6a:18:be:
ba:35:7d:f2:6f:ef:91:a7:65:65:12:66:eb:db:8b:
5e:9e:98:23:f5:94:b1:5a:d0:71:6a:7c:23:16:00:
9d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:9D:6F:7A:08:13:4F:B8:41:D7:B1:60:47:BB:45:61:74:DC:45:8D
X509v3 Authority Key Identifier:
keyid:21:E8:6F:F9:97:3C:93:AB:E6:39:8F:03:19:66:C2:9D:75:A3:BA:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/TZ1veggTT7hB17FgR7tFYXTcRY0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.2.22.0/24
Signature Algorithm: sha256WithRSAEncryption
05:9f:b5:e3:11:0d:94:52:b7:8e:c4:01:f0:48:4b:b2:74:f8:
1f:a2:fd:cc:07:e0:c5:f0:f7:f6:ee:1d:32:dd:fe:78:6b:c3:
fa:e9:3c:dc:44:54:3a:95:a2:52:95:76:2a:b5:5a:ff:15:9f:
2e:02:45:63:cd:5d:d3:ed:8b:97:6e:98:cf:ab:92:4d:10:bd:
88:90:31:dd:48:43:13:6c:83:e7:da:f7:b1:c5:2b:b8:32:93:
4a:e2:56:ec:3b:1c:32:5c:fb:6b:59:51:d3:20:82:63:21:13:
e4:ac:fb:89:5c:d6:27:67:ed:c5:59:a3:ae:38:c1:6e:41:99:
4e:5e:c8:50:9d:ec:7d:5c:01:df:a3:30:ae:b1:7d:89:e1:d6:
c9:68:63:d1:54:a0:db:4c:3a:fe:50:65:f5:2a:0b:71:b8:0a:
d4:77:16:67:ed:0e:11:da:92:68:4a:18:af:db:b6:09:ff:80:
6b:5c:46:7e:22:06:6b:33:ec:a1:fa:29:1b:52:5a:9a:21:d9:
40:42:f2:49:34:29:2d:2c:ef:bf:6f:9e:c8:c2:f2:bd:a2:09:
c5:10:dd:37:33:50:38:ce:0a:c9:ed:ec:b4:5b:cd:81:81:60:
e2:b9:dd:ea:1a:5e:30:8b:c9:1b:e3:2d:99:07:07:68:ce:58:
a4:83:39:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:47 2024 by rpki-client on console-fra.rpki-client.org