Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tdhMQ43T62jrZd1ZVPdnmaaRiOs.roa
File: tdhMQ43T62jrZd1ZVPdnmaaRiOs.roa (raw, json)
Hash identifier: F2NUgB5eOZJ1Jzd//raRYUXxfabbxhc8v7P/AX44hug=
Subject key identifier: B5:D8:4C:43:8D:D3:EB:68:EB:65:DD:59:54:F7:67:99:A6:91:88:EB
Certificate issuer: /CN=b4b0bbd6445578edbc7ba6b5bf7ca9368d2417bf
Certificate serial: 0193F3351ECE66D0800B149CBBF43C8AC8E5
Authority key identifier: B4:B0:BB:D6:44:55:78:ED:BC:7B:A6:B5:BF:7C:A9:36:8D:24:17:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tLC71kRVeO28e6a1v3ypNo0kF78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tdhMQ43T62jrZd1ZVPdnmaaRiOs.roa
Signing time: Mon 23 Dec 2024 11:09:24 +0000
ROA not before: Mon 23 Dec 2024 11:09:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12731
IP address blocks: 194.113.42.0/23 maxlen: 23
2a0f:f640::/47 maxlen: 47
Validation: Failed, certificate revoked on Thu 02 Jan 2025 11:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f3:35:1e:ce:66:d0:80:0b:14:9c:bb:f4:3c:8a:c8:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4b0bbd6445578edbc7ba6b5bf7ca9368d2417bf
Validity
Not Before: Dec 23 11:09:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b5d84c438dd3eb68eb65dd5954f76799a69188eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d7:a8:c0:02:0a:d6:38:8b:94:4c:22:7b:ad:
ea:4a:01:8a:c4:e3:20:cf:04:92:ec:73:2f:90:31:
a6:3d:02:c3:f1:d7:6e:05:e6:d9:13:19:1d:23:0f:
42:4f:c7:4e:48:a4:f5:99:37:17:0c:a6:90:4e:00:
05:9d:c0:a6:c4:d8:8e:63:59:c2:1d:38:19:23:1d:
a4:96:41:00:3d:0e:76:e5:7e:9f:62:fc:b8:97:89:
4e:13:b4:2a:de:b5:5d:32:f1:38:35:d7:37:00:b1:
3b:60:26:e3:f5:f6:8e:3b:6f:18:fb:55:0c:ab:5d:
a0:55:76:5e:83:f7:15:00:a3:cd:13:c6:45:90:71:
d5:6a:89:eb:17:fd:39:99:e0:de:77:a7:86:5a:d3:
c7:b0:05:36:14:3f:70:89:8c:4a:83:e6:9c:2d:25:
03:12:e9:05:01:b7:00:4c:11:98:fa:c3:9e:f2:e9:
85:04:9a:ba:12:a9:f6:bd:6b:8b:11:cd:82:70:76:
90:16:55:24:9f:52:be:48:39:64:a5:63:4a:be:bd:
dd:17:eb:8c:f7:3b:b7:16:ee:e7:8f:47:eb:7f:55:
e4:6c:56:85:4c:83:42:d9:ce:52:30:f0:d1:03:b7:
64:78:9a:46:ad:cb:8e:88:e2:f7:8a:a1:df:a7:f1:
bb:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:D8:4C:43:8D:D3:EB:68:EB:65:DD:59:54:F7:67:99:A6:91:88:EB
X509v3 Authority Key Identifier:
keyid:B4:B0:BB:D6:44:55:78:ED:BC:7B:A6:B5:BF:7C:A9:36:8D:24:17:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tLC71kRVeO28e6a1v3ypNo0kF78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tdhMQ43T62jrZd1ZVPdnmaaRiOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.113.42.0/23
IPv6:
2a0f:f640::/47
Signature Algorithm: sha256WithRSAEncryption
9a:54:b1:88:07:0a:a7:e2:31:cc:fd:38:e5:cd:81:9e:5c:d8:
7b:7e:d0:ed:5f:7f:72:79:82:59:21:ca:e4:47:92:dd:47:fc:
b9:98:02:96:6f:06:d7:ba:c1:ec:dc:0e:b4:77:43:6b:29:70:
7e:3e:5f:a3:af:76:87:32:9b:12:21:ff:2d:e1:39:47:32:7e:
27:3a:b0:0d:f6:62:25:38:b8:01:6e:e1:4a:e8:51:1f:41:8c:
84:cd:48:1a:f0:3a:ad:5a:66:97:8a:bd:d7:fe:24:1e:b3:e0:
34:2d:48:0a:4d:65:ad:45:0c:1e:3e:5f:1c:48:86:ab:84:08:
84:f4:12:27:b6:fc:d0:1b:de:18:d8:ab:54:32:44:9e:85:22:
2c:cd:13:c4:50:cd:37:65:9d:18:09:ec:27:59:57:0a:57:e9:
6f:8a:94:52:d2:ec:72:ad:ef:b0:d5:13:0b:ae:01:19:70:0e:
ac:87:38:20:1d:18:ed:76:ba:63:7e:10:28:1d:b3:25:1a:ed:
43:2d:fb:7a:98:d2:d0:96:50:b6:73:66:71:23:bf:bc:cf:e3:
d7:8b:39:46:3a:e3:2b:22:9e:db:2f:9a:21:da:be:35:8c:76:
fe:15:a8:c3:4d:45:dd:4a:ff:c6:b9:14:40:80:6c:39:7e:de:
45:c2:ad:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 01:53:41 2025 by rpki-client