Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/TTRz3bBwZjKk-Z1r1i6Mf0yZ3Q0.roa
File: TTRz3bBwZjKk-Z1r1i6Mf0yZ3Q0.roa (raw, json)
Hash identifier: 9sn61AOkLETS+MScz/1GtTjsYApIRISWrlgypFIaSQM=
Subject key identifier: 4D:34:73:DD:B0:70:66:32:A4:F9:9D:6B:D6:2E:8C:7F:4C:99:DD:0D
Certificate issuer: /CN=44fc887c977393575de6257e75fa99cde2037c6c
Certificate serial: 018E93A84FEFDE3C9DB36F04062CA38C1CED
Authority key identifier: 44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/TTRz3bBwZjKk-Z1r1i6Mf0yZ3Q0.roa
Signing time: Sun 31 Mar 2024 08:37:44 +0000
ROA not before: Sun 31 Mar 2024 08:37:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.85.15.0/24 maxlen: 24
193.43.138.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 19 Apr 2024 21:44:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:93:a8:4f:ef:de:3c:9d:b3:6f:04:06:2c:a3:8c:1c:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44fc887c977393575de6257e75fa99cde2037c6c
Validity
Not Before: Mar 31 08:37:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4d3473ddb0706632a4f99d6bd62e8c7f4c99dd0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e9:1c:6b:1f:5d:af:8c:c4:87:35:ff:ed:0c:
3c:47:ad:1d:27:5c:f0:a3:04:5c:db:06:4c:c4:44:
26:eb:59:7b:5d:e8:1b:1e:66:40:f3:bc:a0:de:81:
80:bc:17:45:d4:27:28:b5:ba:54:4f:12:63:39:78:
b4:c9:7d:18:0d:e8:28:d5:ba:de:d0:08:b8:93:85:
7d:ba:be:90:b1:b6:dc:d5:a8:0e:10:54:90:54:f6:
ed:f9:ff:ff:85:4b:de:3e:2e:9d:9a:05:b9:03:71:
52:2c:b9:bc:60:33:9e:26:98:47:51:86:26:de:27:
3e:75:c8:d7:d6:b2:66:e4:ef:50:1d:20:55:0f:bc:
54:f9:3e:60:30:df:86:40:3e:dd:b6:09:9b:90:5d:
6e:6e:53:82:3d:e0:65:0f:7a:21:61:c8:e3:b0:1d:
aa:15:28:2a:63:7c:22:2a:83:14:9e:8a:d7:4c:87:
f5:08:6c:4d:07:eb:3d:fe:4d:31:1d:5a:f4:37:29:
26:34:bb:bc:23:e1:41:0e:0b:be:a4:3f:a1:89:ad:
2b:69:3a:47:21:09:4c:7a:d3:74:3f:7d:47:51:61:
f9:89:ef:de:1c:17:fb:0a:e9:9b:d0:50:82:4c:ed:
12:96:6c:29:07:56:2f:cd:09:fb:ac:f2:6b:50:99:
9c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:34:73:DD:B0:70:66:32:A4:F9:9D:6B:D6:2E:8C:7F:4C:99:DD:0D
X509v3 Authority Key Identifier:
keyid:44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/TTRz3bBwZjKk-Z1r1i6Mf0yZ3Q0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.15.0/24
193.43.138.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:d6:5a:32:cf:ef:70:d1:5b:23:28:02:30:e4:09:75:f8:78:
ea:af:b1:71:8c:dc:e0:59:4e:f4:0d:41:4e:b1:58:cb:1f:1e:
28:a3:3e:f6:14:aa:68:5a:b8:50:6e:9c:d3:2b:be:ce:94:ce:
09:a3:d7:13:da:2d:47:af:70:05:03:35:13:f3:a9:82:b6:02:
e0:d3:7c:b4:cd:c9:cc:08:44:90:32:dc:01:b6:62:4e:b9:10:
a5:07:9e:9b:6d:fe:86:cc:08:c1:fc:c4:20:0e:a0:3f:16:21:
49:0b:dc:9e:07:5f:6a:40:6b:f3:a5:e7:73:33:e6:96:cc:9d:
d4:16:eb:89:f8:c8:e2:27:84:f1:5e:c9:d1:7e:f4:b6:e9:e8:
68:ef:23:eb:82:f8:dd:37:07:c3:5c:16:fb:65:d7:6c:fe:0d:
f3:81:bd:73:8a:3a:ab:30:ea:54:3e:b2:59:d1:97:76:f6:30:
2f:76:cf:f5:a5:40:97:35:11:77:d8:92:3f:16:55:46:12:68:
0c:07:91:91:52:84:9e:09:8d:ca:db:02:e8:34:a1:43:46:02:
6a:56:4a:6a:37:06:19:3b:f6:df:fa:0e:8d:de:25:28:73:2b:
3c:b1:8d:92:27:2f:41:70:04:fd:ce:42:54:b6:89:31:d6:ce:
35:9c:71:72
-----BEGIN CERTIFICATE-----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Generated at Sat Apr 20 01:53:00 2024 by rpki-client on console-ams.rpki-client.org