Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/Tg-hxwP-y0P_AnrWUk3V_d2ARp0.roa
File: Tg-hxwP-y0P_AnrWUk3V_d2ARp0.roa (raw, json)
Hash identifier: 4F3Pb3nZSlfH5829cTZ1wCoyoucG/DcKEyVWLdoS6I0=
Subject key identifier: 4E:0F:A1:C7:03:FE:CB:43:FF:02:7A:D6:52:4D:D5:FD:DD:80:46:9D
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 01856FD53E73E6E4C6698F4C078A316BCDB5
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/Tg-hxwP-y0P_AnrWUk3V_d2ARp0.roa
Signing time: Mon 02 Jan 2023 00:15:24 +0000
ROA not before: Mon 02 Jan 2023 00:15:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60149
IP address blocks: 93.113.126.0/24 maxlen: 24
86.107.73.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d5:3e:73:e6:e4:c6:69:8f:4c:07:8a:31:6b:cd:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 2 00:15:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4e0fa1c703fecb43ff027ad6524dd5fddd80469d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8a:24:79:5d:aa:fa:93:1d:b7:f3:bb:da:0c:
18:ec:82:f9:0c:24:6b:bd:14:45:b5:13:93:08:07:
39:c1:ec:3c:4f:8d:83:ec:98:0b:79:2e:d4:83:6c:
45:f1:46:86:14:07:da:79:87:e4:dd:09:3f:3f:80:
12:49:b5:8e:05:2e:0d:3b:9c:25:de:18:03:5b:59:
1c:8e:5b:c3:ee:4e:63:a8:ae:af:c6:b3:c3:00:eb:
fd:06:b8:4f:9f:a7:f0:89:ec:08:f7:7e:5a:e4:82:
25:39:b4:39:fe:9e:88:4a:9a:80:95:c4:18:b4:70:
43:07:f0:8b:33:74:71:79:e4:7f:7b:db:65:63:a2:
20:3d:9a:99:3b:3f:eb:2e:24:5d:9c:47:57:4c:1b:
c1:c0:7d:7f:74:e0:6f:ca:79:80:7a:25:26:d9:0f:
ce:5f:65:69:07:68:9b:c0:fa:c3:87:c8:5b:d8:8e:
23:75:8c:39:a2:f4:63:ed:2b:45:ca:90:d5:f4:47:
2d:35:9d:d1:5a:64:ad:bd:8f:18:51:b0:25:24:63:
4e:e3:03:9d:90:6a:9f:69:18:bd:97:2b:86:38:05:
7d:5e:1f:6d:a9:7c:7c:83:9a:c5:9e:c3:46:8a:46:
ae:49:9d:91:38:c5:9e:17:38:42:77:54:36:4d:b3:
b7:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:0F:A1:C7:03:FE:CB:43:FF:02:7A:D6:52:4D:D5:FD:DD:80:46:9D
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/Tg-hxwP-y0P_AnrWUk3V_d2ARp0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.107.73.0/24
93.113.126.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:7d:1f:20:9c:44:df:09:5a:79:ec:f1:6d:72:d2:3a:fb:75:
d3:2c:e0:51:18:71:c2:55:d5:57:89:d5:52:4b:88:51:25:bf:
55:4a:dd:52:c9:a8:fd:44:ef:1d:3f:30:b3:72:88:27:72:2d:
c7:f8:3a:7a:60:26:a8:db:4a:48:16:35:d4:7b:ea:c2:7a:02:
19:59:37:0b:cf:e8:43:1c:0e:32:42:5e:75:9c:50:90:62:dd:
cc:04:cd:a7:f2:4d:ad:cc:0b:8f:69:a1:5e:b8:c1:bd:e7:c3:
53:80:98:16:64:7a:09:34:2e:5f:ca:62:bb:c0:63:92:5b:7b:
26:d7:95:0d:07:4b:6a:19:fb:ca:0a:c4:42:83:55:fb:3c:54:
67:18:3b:23:63:6e:21:e6:c2:00:11:c5:fb:d4:c9:00:f8:15:
37:cd:b7:a9:2c:b4:f5:96:a9:6b:f5:45:5a:d6:aa:f0:0c:63:
fb:d9:9c:d8:ed:bb:ee:72:eb:88:99:25:16:88:9a:55:2f:04:
08:02:69:34:04:75:7c:e9:80:f2:5a:d4:99:d9:bd:93:70:d1:
43:14:ca:2f:d0:6c:d0:a7:be:1c:af:6a:44:0c:e3:9a:bb:78:
f1:98:0f:07:a4:7a:0f:5a:1a:ec:d6:d7:6b:66:cb:7a:a4:68:
ac:fa:b7:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:52 2024 by rpki-client on console-ams.rpki-client.org