Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/Tmz-Tz0S5AgohCaO0kBm6i0bUhI.roa
File: Tmz-Tz0S5AgohCaO0kBm6i0bUhI.roa (raw, json)
Hash identifier: CUISH7liDAEPsbSLX7qufBCqmWphJJhgY6Fl6qfAbQQ=
Subject key identifier: 4E:6C:FE:4F:3D:12:E4:08:28:84:26:8E:D2:40:66:EA:2D:1B:52:12
Certificate issuer: /CN=ebe324c4fff07240eeb1f00e63e635f7cb902f98
Certificate serial: 018D3A51BC706B4624BA4744BFBD4F835948
Authority key identifier: EB:E3:24:C4:FF:F0:72:40:EE:B1:F0:0E:63:E6:35:F7:CB:90:2F:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-MkxP_wckDusfAOY-Y198uQL5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/Tmz-Tz0S5AgohCaO0kBm6i0bUhI.roa
Signing time: Wed 24 Jan 2024 07:14:11 +0000
ROA not before: Wed 24 Jan 2024 07:14:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60764
IP address blocks: 86.62.12.0/24 maxlen: 32
86.62.13.0/24 maxlen: 32
86.62.14.0/24 maxlen: 32
86.62.15.0/24 maxlen: 32
185.174.192.0/24 maxlen: 32
185.174.193.0/24 maxlen: 32
185.174.194.0/24 maxlen: 32
185.174.195.0/24 maxlen: 32
2a09:3300::/32 maxlen: 32
2a0b:b500::/30 maxlen: 30
2a0b:b500::/31 maxlen: 31
2a0b:b500:1::/48 maxlen: 48
2a0b:b500:f800::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 24 Jan 2024 08:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:3a:51:bc:70:6b:46:24:ba:47:44:bf:bd:4f:83:59:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebe324c4fff07240eeb1f00e63e635f7cb902f98
Validity
Not Before: Jan 24 07:14:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4e6cfe4f3d12e4082884268ed24066ea2d1b5212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ea:ae:b6:74:ae:8a:22:84:30:17:91:a5:99:
de:58:c8:d5:e6:d9:75:85:94:5b:13:16:06:58:c9:
34:4e:75:e9:ca:54:23:df:b2:71:bd:f1:ab:c3:03:
53:f9:92:68:7f:4f:a1:37:b3:5d:3f:fd:b8:de:39:
8f:16:fa:f7:0d:9e:61:c6:af:93:b1:7c:db:87:be:
49:5a:b7:ea:93:93:2f:4d:65:6f:c7:ae:5b:f0:0c:
6a:02:0d:cc:76:19:43:90:29:0a:dc:6c:15:58:a1:
fe:bf:b8:dd:89:62:26:f6:bf:c5:12:79:59:20:91:
5f:6a:84:03:50:10:5d:fa:28:2f:97:bb:45:8f:7b:
6d:c2:2d:e2:c9:53:c2:9c:67:65:23:03:c9:d4:e3:
ca:de:fd:d9:86:ab:56:79:a9:0e:e8:ee:fe:a1:ee:
72:dc:87:e2:85:e7:79:66:84:44:b8:b9:82:12:e1:
8e:c5:05:0b:5c:2c:af:53:e1:35:a3:d1:43:07:15:
2a:a3:bb:2b:f4:21:3e:d8:34:d7:fe:48:8b:23:81:
38:c8:84:e1:73:98:34:97:90:71:65:48:9f:de:06:
2b:03:e0:82:5c:90:f8:a9:ce:cc:45:61:04:46:60:
45:cf:bc:35:64:94:fa:fa:f4:29:d7:32:9d:e4:9f:
b0:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:6C:FE:4F:3D:12:E4:08:28:84:26:8E:D2:40:66:EA:2D:1B:52:12
X509v3 Authority Key Identifier:
keyid:EB:E3:24:C4:FF:F0:72:40:EE:B1:F0:0E:63:E6:35:F7:CB:90:2F:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-MkxP_wckDusfAOY-Y198uQL5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/Tmz-Tz0S5AgohCaO0kBm6i0bUhI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/eafefe-787d-4b2d-b530-8af05ae3192c/1/6-MkxP_wckDusfAOY-Y198uQL5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.62.12.0/22
185.174.192.0/22
IPv6:
2a09:3300::/32
2a0b:b500::/30
Signature Algorithm: sha256WithRSAEncryption
d6:89:89:ec:bc:fa:02:60:bb:77:dc:10:da:67:4a:e6:c0:3b:
ad:ba:09:50:0b:b5:5b:07:6f:b1:b0:d5:27:7b:d4:7f:f7:ae:
73:1d:50:d6:3e:70:8c:3a:d2:14:3b:41:35:18:98:77:b7:66:
71:5c:38:a0:92:f0:a3:e5:30:32:40:11:30:0d:3f:8d:72:f1:
0d:2a:ea:ae:b4:3a:57:e5:2d:eb:93:98:57:72:57:b1:94:32:
19:13:90:94:14:c9:39:b7:a8:6c:83:2b:6d:82:0b:b3:7f:fa:
37:9e:4a:fe:fc:4e:67:a0:10:2f:d7:ca:d3:9f:64:d6:f6:1b:
0a:e6:d1:29:c4:73:d7:6e:3a:79:f4:6f:39:4a:e8:5e:32:69:
03:1a:d8:57:57:4d:6a:fe:2d:15:54:04:20:97:50:97:ab:69:
25:9d:81:c3:0d:be:e9:f7:15:1d:ff:79:e8:12:b9:89:e8:14:
37:9f:23:f7:db:22:b0:6b:e6:9f:67:e7:93:9c:66:46:98:d0:
7d:f5:ff:7d:e6:88:e7:e3:9b:0f:b2:49:0a:d7:6f:d2:13:d8:
62:d8:a9:7e:d8:0c:db:db:a5:bf:a2:dd:5a:a7:54:8f:a4:42:
70:c5:a3:65:6c:20:1b:97:1d:8c:bc:b8:25:57:49:c2:22:6e:
32:54:f1:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:23 2024 by rpki-client on console-fra.rpki-client.org