Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/TeaWbzsg2w9T1dl0kCak2TSISf0.roa
File: TeaWbzsg2w9T1dl0kCak2TSISf0.roa (raw, json)
Hash identifier: KgozOWoDYN7ASXyaZ8GGvoXoSuR3Q0CVVN5+ctylnBE=
Subject key identifier: 4D:E6:96:6F:3B:20:DB:0F:53:D5:D9:74:90:26:A4:D9:34:88:49:FD
Certificate issuer: /CN=52cd9a6512dbf25a5f19b827d7a2c7e22a2ee8dd
Certificate serial: 018D30ED908105EEA2AD40C119A43C45AB89
Authority key identifier: 52:CD:9A:65:12:DB:F2:5A:5F:19:B8:27:D7:A2:C7:E2:2A:2E:E8:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/TeaWbzsg2w9T1dl0kCak2TSISf0.roa
Signing time: Mon 22 Jan 2024 11:28:11 +0000
ROA not before: Mon 22 Jan 2024 11:28:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51713
IP address blocks: 77.95.113.0/24 maxlen: 24
192.250.224.0/24 maxlen: 24
192.250.234.0/24 maxlen: 24
192.250.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 19 Jun 2024 08:56:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:30:ed:90:81:05:ee:a2:ad:40:c1:19:a4:3c:45:ab:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52cd9a6512dbf25a5f19b827d7a2c7e22a2ee8dd
Validity
Not Before: Jan 22 11:28:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4de6966f3b20db0f53d5d9749026a4d9348849fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:6b:2e:50:7e:88:a2:05:c1:f2:cf:22:86:b3:
82:a9:d6:33:0f:11:07:23:66:31:96:70:b6:4a:39:
16:e6:e5:3a:2d:55:c2:a9:44:88:99:13:13:64:7f:
68:ed:64:a7:83:2c:23:51:3d:17:e5:fc:d5:cd:ab:
6c:a2:67:bf:41:ad:94:bd:d2:dc:a7:1d:bc:88:33:
62:9e:f0:e6:27:74:84:3d:1a:1b:7c:54:7b:5d:75:
69:c6:da:ef:5d:c4:03:73:d7:c3:9d:74:50:16:15:
28:66:53:83:30:65:61:da:dd:52:eb:68:52:e5:f5:
9d:50:94:24:19:85:cc:71:6c:34:7b:6b:c4:c7:c2:
31:01:f8:68:b2:65:ac:dd:4e:f6:fa:56:4a:56:21:
05:2b:45:fd:22:06:cd:a2:d7:35:8c:27:14:da:07:
9f:e4:67:e4:5a:83:a0:06:8e:63:5e:ea:bf:d0:47:
71:07:fa:ef:f9:d5:fd:7c:52:51:74:c3:e3:be:ff:
3d:9c:83:82:0a:93:39:ac:a7:d8:be:de:b8:45:9b:
fa:1c:2a:eb:fe:d3:f2:77:c1:30:d5:73:04:49:15:
7b:85:17:94:25:ee:58:bd:3c:38:ba:15:53:8c:39:
b5:9e:49:5b:a6:78:03:73:be:a8:52:96:b9:14:a2:
0f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:E6:96:6F:3B:20:DB:0F:53:D5:D9:74:90:26:A4:D9:34:88:49:FD
X509v3 Authority Key Identifier:
keyid:52:CD:9A:65:12:DB:F2:5A:5F:19:B8:27:D7:A2:C7:E2:2A:2E:E8:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/TeaWbzsg2w9T1dl0kCak2TSISf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.95.113.0/24
192.250.224.0/24
192.250.234.0/24
192.250.239.0/24
Signature Algorithm: sha256WithRSAEncryption
46:2c:32:7a:4b:df:76:32:fe:f3:f8:fc:bc:c7:2e:59:1f:ba:
48:89:45:cd:43:6a:86:8c:43:6c:9d:dd:9a:7d:73:37:92:28:
de:1d:14:ac:7c:19:5e:9b:42:ae:ec:3b:58:e3:1a:c6:28:53:
a0:d4:cd:8c:f8:25:a7:37:f7:d4:5a:38:17:d7:19:12:2b:62:
fc:a4:61:30:35:a9:60:89:46:0f:55:45:41:cc:b2:d9:b3:31:
7a:ac:6b:a7:56:16:a1:04:be:d1:34:0b:d1:6f:33:c4:a8:7c:
9d:24:03:e7:34:f1:cd:bd:5a:0d:4f:43:a2:f5:88:0c:f7:ea:
3a:37:67:66:e2:e4:0b:dd:72:30:eb:61:92:19:1f:39:d0:12:
e2:99:c9:d9:14:20:d9:d3:d9:a9:12:6e:92:87:63:70:12:60:
2c:fd:0b:46:2c:65:1f:fa:c3:44:04:be:d2:82:a3:87:0d:5c:
2e:f1:13:4e:0a:60:61:fc:32:f5:6d:56:10:d5:a7:46:20:fa:
77:ae:16:64:ea:e1:4a:4a:a4:f8:d5:7c:dd:49:87:b3:2a:ef:
16:c3:4e:98:6a:67:87:ba:3a:1e:3e:9a:94:42:11:57:b9:66:
a6:cd:34:26:55:fd:ed:8f:b4:23:1c:10:8c:0c:d8:a4:22:28:
2a:9e:58:13
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAY0w7ZCBBe6irUDBGaQ8RauJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyY2Q5YTY1MTJkYmYyNWE1ZjE5YjgyN2Q3YTJjN2UyMmEy
ZWU4ZGQwHhcNMjQwMTIyMTEyODExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZGU2OTY2ZjNiMjBkYjBmNTNkNWQ5NzQ5MDI2YTRkOTM0ODg0OWZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWsuUH6IogXB8s8ihrOCqdYzDxEH
I2YxlnC2SjkW5uU6LVXCqUSImRMTZH9o7WSngywjUT0X5fzVzatsome/Qa2UvdLc
px28iDNinvDmJ3SEPRobfFR7XXVpxtrvXcQDc9fDnXRQFhUoZlODMGVh2t1S62hS
5fWdUJQkGYXMcWw0e2vEx8IxAfhosmWs3U72+lZKViEFK0X9IgbNotc1jCcU2gef
5GfkWoOgBo5jXuq/0EdxB/rv+dX9fFJRdMPjvv89nIOCCpM5rKfYvt64RZv6HCrr
/tPyd8Ew1XMESRV7hReUJe5YvTw4uhVTjDm1nklbpngDc76oUpa5FKIPrwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFE3mlm87INsPU9XZdJAmpNk0iEn9MB8GA1UdIwQY
MBaAFFLNmmUS2/JaXxm4J9eix+IqLujdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXMyYVpSTGI4bHBmR2JnbjE2TEg0aW91Nk4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8yMjIzY2EtY2UzOC00OWJiLWIxMjUt
Y2NhMzc2MDZiZjE4LzEvVGVhV2J6c2cydzlUMWRsMGtDYWsyVFNJU2YwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi8yMjIzY2EtY2UzOC00OWJiLWIxMjUtY2NhMzc2MDZiZjE4
LzEvVXMyYVpSTGI4bHBmR2JnbjE2TEg0aW91Nk4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQATV9xAwQA
wPrgAwQAwPrqAwQAwPrvMA0GCSqGSIb3DQEBCwUAA4IBAQBGLDJ6S992Mv7z+Py8
xy5ZH7pIiUXNQ2qGjENsnd2afXM3kijeHRSsfBlem0Ku7DtY4xrGKFOg1M2M+CWn
N/fUWjgX1xkSK2L8pGEwNalgiUYPVUVBzLLZszF6rGunVhahBL7RNAvRbzPEqHyd
JAPnNPHNvVoNT0Oi9YgM9+o6N2dm4uQL3XIw62GSGR850BLimcnZFCDZ09mpEm6S
h2NwEmAs/QtGLGUf+sNEBL7SgqOHDVwu8RNOCmBh/DL1bVYQ1adGIPp3rhZk6uFK
SqT41XzdSYezKu8Ww06YameHujoePpqUQhFXuWamzTQmVf3tj7QjHBCMDNikIigq
nlgT
-----END CERTIFICATE-----
Generated at Wed Jun 19 13:09:06 2024 by rpki-client on console-ams.rpki-client.org