Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/TvrORZrOlXqn8Ho2TZjkf7XMjWQ.roa
File: TvrORZrOlXqn8Ho2TZjkf7XMjWQ.roa (raw, json)
Hash identifier: hxzhfRn+4RM634YU7mxdDu8+raqhYIoeLtp+r4Ri0g0=
Subject key identifier: 4E:FA:CE:45:9A:CE:95:7A:A7:F0:7A:36:4D:98:E4:7F:B5:CC:8D:64
Certificate issuer: /CN=5dde4b3b82f209b701ae340cf53b974078f16a9f
Certificate serial: 01856FCBB437F3427681D61C891A9C27F6FB
Authority key identifier: 5D:DE:4B:3B:82:F2:09:B7:01:AE:34:0C:F5:3B:97:40:78:F1:6A:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xd5LO4LyCbcBrjQM9TuXQHjxap8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/TvrORZrOlXqn8Ho2TZjkf7XMjWQ.roa
Signing time: Mon 02 Jan 2023 00:04:58 +0000
ROA not before: Mon 02 Jan 2023 00:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400039
IP address blocks: 185.143.242.0/24 maxlen: 24
185.200.245.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:cb:b4:37:f3:42:76:81:d6:1c:89:1a:9c:27:f6:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dde4b3b82f209b701ae340cf53b974078f16a9f
Validity
Not Before: Jan 2 00:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4eface459ace957aa7f07a364d98e47fb5cc8d64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:59:76:72:e2:5b:00:07:13:20:27:54:57:bd:
58:3d:6f:39:4c:31:3d:4e:17:29:52:79:81:01:e4:
f1:27:d0:49:03:13:ca:48:8a:cb:07:ff:2b:0a:44:
61:94:69:40:27:65:9a:10:c4:ac:c2:57:d7:c9:d7:
65:03:94:66:d4:38:5f:2f:77:0c:6a:db:5c:4f:69:
06:ea:5c:b3:52:0a:32:3e:ee:f8:bd:0b:37:e3:9d:
9e:77:f1:40:54:02:b8:03:9e:92:2b:31:0b:7c:f0:
97:83:89:ca:7b:ee:db:96:7b:7f:9b:1e:bf:9e:53:
11:af:53:01:3c:05:f3:81:93:dc:aa:d1:a4:d0:3a:
4b:21:f6:5c:bf:b1:90:e5:10:27:94:3f:bf:07:3f:
9b:2a:cb:bd:a4:61:ab:f5:a4:30:d5:e9:5c:49:67:
f0:14:e4:17:90:71:bd:cd:b5:55:20:13:b9:07:99:
36:7f:de:a1:f0:05:58:5e:6a:39:22:03:21:29:1e:
a3:45:79:ff:59:00:0e:9b:e8:55:ca:61:1e:62:17:
ed:7e:07:91:01:9c:53:e2:9e:f8:76:cf:db:5b:9f:
b0:54:ea:2b:62:6c:23:f2:8f:32:91:16:99:44:ce:
3b:1f:1d:01:01:00:3c:6f:5c:48:e0:ae:6f:78:ef:
02:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:FA:CE:45:9A:CE:95:7A:A7:F0:7A:36:4D:98:E4:7F:B5:CC:8D:64
X509v3 Authority Key Identifier:
keyid:5D:DE:4B:3B:82:F2:09:B7:01:AE:34:0C:F5:3B:97:40:78:F1:6A:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xd5LO4LyCbcBrjQM9TuXQHjxap8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/TvrORZrOlXqn8Ho2TZjkf7XMjWQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.143.242.0/24
185.200.245.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:c9:b9:7e:9f:51:12:64:3c:04:40:c4:55:05:bf:a6:67:3d:
3a:ba:dc:b5:32:61:16:14:70:87:2e:c4:52:c2:d7:1d:4f:0a:
89:a7:41:c8:6a:0b:79:fe:82:74:b2:7f:f7:9f:bc:9e:85:90:
45:c4:cc:f1:2e:6f:5f:d0:e9:3a:3b:b4:ec:d5:a9:bf:21:7a:
eb:e0:ee:81:c8:ec:38:01:20:4a:00:91:30:56:cb:ad:2e:ab:
60:52:3b:38:01:d7:c8:11:3f:bb:69:51:e1:73:e3:9b:67:bf:
31:32:2e:d6:b1:e5:99:60:da:6c:9b:30:dd:76:43:af:d9:c0:
74:5c:43:3f:50:0b:e6:e8:b0:8e:3f:7b:e6:05:95:37:10:02:
27:1c:89:3b:6d:a8:a1:9f:7c:dc:d4:b9:a2:13:71:8e:24:aa:
3f:07:78:37:1d:c5:eb:85:9e:ab:3d:72:df:32:fe:b9:b5:63:
07:41:e4:a3:40:33:ca:a4:40:72:90:5a:74:44:bc:90:da:dc:
3d:2a:99:fd:bd:89:58:fc:c3:41:29:5f:ca:4a:c9:e1:5e:e4:
11:6b:b5:4e:85:d6:8a:3d:22:22:4f:cb:75:e3:7f:2b:85:85:
bf:5d:57:ee:f6:ed:e6:9e:0f:1d:fc:cf:28:ec:90:c4:37:55:
ef:75:ba:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:07 2024 by rpki-client on console-fra.rpki-client.org