Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/TQuRtW01M_YI1lbBk5SHyj8M1BU.roa
File: TQuRtW01M_YI1lbBk5SHyj8M1BU.roa (raw, json)
Hash identifier: dZ9zH/CAVZNc01eSXHzWElM7rOrW+wZdlrroBYwODwU=
Subject key identifier: 4D:0B:91:B5:6D:35:33:F6:08:D6:56:C1:93:94:87:CA:3F:0C:D4:15
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 01856CB836A8778C73F0802D13101D7C6C66
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/TQuRtW01M_YI1lbBk5SHyj8M1BU.roa
Signing time: Sun 01 Jan 2023 09:44:50 +0000
ROA not before: Sun 01 Jan 2023 09:44:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8362
IP address blocks: 195.6.244.0/22 maxlen: 24
92.188.0.0/16 maxlen: 24
194.51.85.0/24 maxlen: 24
194.206.79.0/24 maxlen: 24
194.206.126.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:b8:36:a8:77:8c:73:f0:80:2d:13:10:1d:7c:6c:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 1 09:44:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4d0b91b56d3533f608d656c1939487ca3f0cd415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:4f:58:01:e6:49:46:92:da:5f:f8:66:da:9f:
e1:83:df:0b:04:4c:c7:61:3f:3b:f4:91:c7:e5:0c:
96:c2:89:cf:15:97:29:b1:10:87:45:17:3a:23:8a:
73:ee:ea:c7:ee:0a:2d:ad:01:82:55:68:e6:08:2d:
c3:f1:c3:b5:7b:17:0c:7c:90:e5:d3:34:0c:a3:77:
2d:30:ec:b5:8c:f3:31:51:d8:b2:b7:a6:02:88:80:
fd:de:99:8e:a3:a1:2d:f7:11:c3:32:26:db:e0:3b:
75:8d:2c:0d:68:36:99:8b:75:c4:7b:e3:9e:00:5e:
f1:f7:b6:0e:a7:f6:18:2f:cf:b9:ea:79:32:09:71:
76:59:15:3c:61:58:9a:90:14:90:a0:76:10:1a:65:
a0:89:8b:ff:39:5d:1f:f5:59:bc:5f:f2:ef:82:92:
9e:f7:3f:8e:3c:e4:bb:04:62:52:68:b4:94:08:24:
65:c4:7d:dc:a6:7a:cc:89:b1:ff:5d:5c:de:d2:3d:
89:8e:db:42:4b:aa:54:28:00:4d:e2:a6:66:e5:27:
5d:ea:af:3e:49:6f:ba:c0:54:9e:f3:47:11:e2:56:
50:bf:c0:db:f4:85:02:ee:e8:86:e0:07:82:d6:44:
3e:74:21:e0:f9:f2:f3:88:ca:f0:ad:53:35:9f:d9:
5c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:0B:91:B5:6D:35:33:F6:08:D6:56:C1:93:94:87:CA:3F:0C:D4:15
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/TQuRtW01M_YI1lbBk5SHyj8M1BU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.188.0.0/16
194.51.85.0/24
194.206.79.0/24
194.206.126.0/24
195.6.244.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:1e:50:a8:b7:26:b3:43:0f:87:b7:d7:6f:1b:fd:0c:c4:4c:
a5:a0:a7:e5:d2:1e:85:96:30:28:3c:a4:c6:d9:63:01:02:9c:
87:4d:26:d0:3a:d9:64:50:31:5c:46:27:00:03:78:6b:a6:a0:
90:fc:b3:84:13:4e:a9:cb:97:70:cb:12:e4:40:c0:96:37:55:
75:06:8e:ec:56:41:4e:8d:17:ca:62:17:70:78:2c:2b:92:c2:
c6:0e:da:a2:b7:af:fe:56:47:75:71:c5:72:8f:91:f5:5e:fb:
ed:20:cf:ad:42:78:8a:f6:7a:47:97:da:66:d1:c3:37:8d:5e:
59:c8:a2:dc:77:a2:43:54:1f:81:32:e5:df:41:41:79:4b:4c:
9b:0f:ba:91:ff:d1:6b:25:7e:b3:cf:4b:a6:b2:86:3b:9a:62:
5f:62:21:12:7e:e5:38:8f:10:d0:e0:06:69:63:56:01:90:4d:
72:f8:94:c2:73:61:17:8e:f3:a1:6d:c6:6d:0a:d2:e8:1e:e8:
7e:ca:a5:0f:e3:5e:82:f4:03:3e:ea:e9:dc:2b:0b:cf:96:64:
b1:e0:3c:18:48:72:eb:cc:11:5f:5f:24:2d:6b:d9:8a:0b:c4:
ca:f5:2a:16:6c:0a:64:ec:35:48:84:93:01:48:93:e7:5b:f1:
56:cc:8d:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:19 2024 by rpki-client on console-ams.rpki-client.org