Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/TnewXYskqrc37PANCz3e6m5MC0g.roa
File: TnewXYskqrc37PANCz3e6m5MC0g.roa (raw, json)
Hash identifier: 7ONazm+DskNVDyJF2AfoeFx5HK9KebFrNJCbsgbD3kY=
Subject key identifier: 4E:77:B0:5D:8B:24:AA:B7:37:EC:F0:0D:0B:3D:DE:EA:6E:4C:0B:48
Certificate issuer: /CN=de456cdb4d140345c3dcaebfc7634d4e7cdcb913
Certificate serial: 01856F02513B6FB69AA8A5697ECE0AE8F043
Authority key identifier: DE:45:6C:DB:4D:14:03:45:C3:DC:AE:BF:C7:63:4D:4E:7C:DC:B9:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3kVs200UA0XD3K6_x2NNTnzcuRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/TnewXYskqrc37PANCz3e6m5MC0g.roa
Signing time: Sun 01 Jan 2023 20:25:00 +0000
ROA not before: Sun 01 Jan 2023 20:25:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47555
IP address blocks: 128.127.181.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:02:51:3b:6f:b6:9a:a8:a5:69:7e:ce:0a:e8:f0:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de456cdb4d140345c3dcaebfc7634d4e7cdcb913
Validity
Not Before: Jan 1 20:25:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4e77b05d8b24aab737ecf00d0b3ddeea6e4c0b48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:65:53:11:d3:db:c9:2c:5a:b5:d0:c3:43:be:
6d:c6:81:8e:c3:7a:c9:37:32:ef:3c:cc:68:07:50:
14:ed:4b:12:a5:b8:34:ee:c0:a6:f7:71:e1:bb:4d:
9c:07:fe:31:b3:07:d7:42:40:81:91:ab:9e:eb:95:
ae:32:d1:30:27:9f:5e:28:10:6c:5a:88:f1:94:49:
cd:1b:43:50:f9:de:54:45:c0:52:93:ba:ca:e8:05:
38:9d:4d:3f:74:5a:50:0f:40:da:5f:bd:86:3c:0f:
f1:92:4e:f8:94:20:e6:84:5c:3b:e3:8b:e3:f4:2a:
f6:63:be:7f:c9:76:5a:8b:99:39:8d:20:62:91:91:
99:c6:b2:e6:5a:b9:b1:4e:92:04:bb:6d:7e:3b:6e:
b3:bb:ca:43:41:b8:b5:da:ef:8e:db:93:6b:ba:fc:
14:8c:dc:91:fc:75:b5:5c:f6:9c:33:f9:17:06:ee:
c1:36:33:7f:a2:b1:fe:39:f6:b3:66:37:26:da:5e:
30:f6:0e:f8:95:15:ce:c8:ad:1b:31:a5:27:b0:51:
33:db:2c:ab:d2:f7:35:9c:76:84:14:59:72:a8:81:
fc:bb:67:eb:e7:7e:64:83:88:76:9b:5b:ff:20:49:
a8:d9:39:2e:5f:b6:e8:b3:65:8e:c2:c0:a7:2d:27:
68:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:77:B0:5D:8B:24:AA:B7:37:EC:F0:0D:0B:3D:DE:EA:6E:4C:0B:48
X509v3 Authority Key Identifier:
keyid:DE:45:6C:DB:4D:14:03:45:C3:DC:AE:BF:C7:63:4D:4E:7C:DC:B9:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3kVs200UA0XD3K6_x2NNTnzcuRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/TnewXYskqrc37PANCz3e6m5MC0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/3kVs200UA0XD3K6_x2NNTnzcuRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.127.181.0/24
Signature Algorithm: sha256WithRSAEncryption
17:9c:cb:69:d4:7b:29:ac:d6:d3:2e:e7:70:14:37:3f:c0:1c:
63:18:2b:5d:e3:1b:78:87:de:68:d2:cc:07:f3:1e:fd:bc:e7:
ee:c8:c5:eb:50:9a:6f:13:7e:2b:1f:c7:1a:10:6f:65:58:0e:
8b:b4:1f:c3:f9:a6:5f:a4:86:3d:fe:1d:72:83:06:40:8e:2c:
10:66:58:fe:39:6f:2a:fd:5f:f0:6a:d5:18:dc:b9:a5:bd:f5:
00:ac:7b:fb:db:7f:7b:cb:2d:55:f0:99:e2:d4:c8:c8:c8:7d:
b4:d5:1e:3f:05:a4:89:72:06:8d:f9:44:c1:94:e8:eb:b3:d3:
02:8a:b8:07:27:20:e2:7c:6b:f6:e0:4b:c2:78:13:20:5d:71:
8c:ae:45:c0:cc:21:ae:ba:fa:2a:0f:2b:c3:25:a6:ed:bd:03:
05:33:dd:87:25:32:a6:83:59:2a:04:22:ba:30:66:d8:56:46:
1a:d2:04:47:19:20:11:d4:78:91:cc:97:ef:57:3e:04:75:39:
e8:52:77:65:ec:3a:9f:86:85:9d:d4:29:ef:e1:65:bf:c6:ad:
7a:77:fa:e5:a7:36:6b:72:58:2d:29:5d:8b:82:4c:a5:55:5a:
fb:a1:2e:7c:99:a5:e6:c7:6e:07:3f:f8:30:53:4a:21:18:78:
e4:73:dd:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:17 2024 by rpki-client on console-fra.rpki-client.org