Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/TPPFLGgcVkqcim6ocxIXWuswwR4.roa
File: TPPFLGgcVkqcim6ocxIXWuswwR4.roa (raw, json)
Hash identifier: /e89L/Xlw4yHlXhhNGXKhaYJfpuy1pJvD9nVWVW2xTk=
Subject key identifier: 4C:F3:C5:2C:68:1C:56:4A:9C:8A:6E:A8:73:12:17:5A:EB:30:C1:1E
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0189CA02A5149A7418B3F2EB37A8426C4B07
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/TPPFLGgcVkqcim6ocxIXWuswwR4.roa
Signing time: Sun 06 Aug 2023 08:41:58 +0000
ROA not before: Sun 06 Aug 2023 08:41:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198802
IP address blocks: 193.108.115.0/24 maxlen: 24
195.133.12.0/24 maxlen: 24
195.133.22.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 21 Aug 2023 07:47:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ca:02:a5:14:9a:74:18:b3:f2:eb:37:a8:42:6c:4b:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Aug 6 08:41:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4cf3c52c681c564a9c8a6ea87312175aeb30c11e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3c:b2:b5:47:e8:ae:7b:db:b7:67:db:46:47:
ae:37:5e:2c:29:1e:47:2e:7b:d3:02:28:0e:78:8d:
17:2c:8c:4f:0a:2b:c1:48:b0:9a:a0:fb:76:23:56:
95:e0:7d:90:2f:53:98:ae:23:5f:ef:9a:b1:c1:46:
80:3d:6d:47:db:8e:06:e5:e0:4d:b2:a3:e7:ef:88:
22:76:94:cc:7a:cc:e8:63:63:8c:88:8e:65:42:ce:
a3:3f:19:47:e2:9f:23:a1:10:58:19:72:69:6a:4d:
09:13:aa:29:b0:ea:fe:e8:20:fc:97:06:e3:47:7a:
f5:75:db:f9:40:57:3f:a6:11:ba:be:b2:9c:d3:4b:
af:bf:fd:1b:6f:a5:74:be:2a:96:4e:e8:2a:3a:c0:
61:88:9e:aa:c4:40:2e:43:07:13:17:c8:80:45:b8:
e9:b5:7a:38:fd:72:0b:71:6e:bc:0a:cd:11:e0:1d:
e8:e1:9c:ad:5a:a2:aa:5a:a5:a8:c1:7e:06:86:16:
14:8d:f3:85:6c:cc:aa:54:ec:c6:5a:66:4a:a2:ce:
ac:17:5b:e9:86:09:6a:dd:ce:63:84:76:1f:c0:5d:
72:4f:82:57:92:f2:d6:43:e8:ad:b1:e8:2f:65:34:
ba:2e:e2:93:1e:97:82:99:5a:29:e1:4e:2c:17:a1:
46:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:F3:C5:2C:68:1C:56:4A:9C:8A:6E:A8:73:12:17:5A:EB:30:C1:1E
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/TPPFLGgcVkqcim6ocxIXWuswwR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.115.0/24
195.133.12.0/24
195.133.22.0/24
Signature Algorithm: sha256WithRSAEncryption
29:26:01:89:0e:5a:f9:3f:71:b0:cf:3d:fc:8f:53:4a:0b:b3:
aa:20:42:bf:6a:60:b1:a5:89:21:1a:c5:bc:17:3c:67:46:ca:
e9:23:a7:3e:1d:00:21:c1:46:0d:2b:2f:cb:b6:ad:f0:0d:98:
4b:88:fc:22:5b:6e:fe:e8:2b:6e:27:e3:a6:5d:f5:d3:6c:b4:
9e:97:06:33:11:2f:64:f7:b9:bd:54:81:4d:49:c5:32:54:f0:
cd:34:87:21:41:19:34:f5:7b:cf:25:ab:9b:59:33:71:83:4c:
48:87:12:c1:d1:5b:ae:1f:05:48:88:a8:d2:1f:4e:ad:d2:87:
e9:88:36:2a:be:93:02:16:17:30:fc:bd:a7:b2:57:23:db:29:
1f:6e:6e:f8:de:88:9d:93:7d:cd:0d:9e:95:fa:87:e3:11:a0:
09:5a:ea:b5:96:e8:ef:25:46:05:7c:c0:a0:47:15:78:60:57:
4c:48:a5:0e:54:c2:e6:4a:c8:e8:33:41:e2:e8:b1:a3:de:06:
c5:03:69:d1:28:24:d8:64:ca:b3:51:6e:6f:7b:9b:ec:0f:ce:
9e:53:fd:5a:68:72:0f:ca:45:4c:db:80:bc:9a:2e:c3:6d:2b:
b4:02:1a:94:77:e5:45:6a:20:c0:dd:a9:f2:99:55:e8:96:d0:
0c:c0:c8:1e
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYnKAqUUmnQYs/LrN6hCbEsHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjMwODA2MDg0MTU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Y2YzYzUyYzY4MWM1NjRhOWM4YTZlYTg3MzEyMTc1YWViMzBjMTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDyytUfornvbt2fbRkeuN14sKR5H
LnvTAigOeI0XLIxPCivBSLCaoPt2I1aV4H2QL1OYriNf75qxwUaAPW1H244G5eBN
sqPn74gidpTMeszoY2OMiI5lQs6jPxlH4p8joRBYGXJpak0JE6opsOr+6CD8lwbj
R3r1ddv5QFc/phG6vrKc00uvv/0bb6V0viqWTugqOsBhiJ6qxEAuQwcTF8iARbjp
tXo4/XILcW68Cs0R4B3o4ZytWqKqWqWowX4GhhYUjfOFbMyqVOzGWmZKos6sF1vp
hglq3c5jhHYfwF1yT4JXkvLWQ+itsegvZTS6LuKTHpeCmVop4U4sF6FGFwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFEzzxSxoHFZKnIpuqHMSF1rrMMEeMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvVFBQRkxHZ2NWa3FjaW02b2N4SVhXdXN3d1I0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAwWxzAwQA
w4UMAwQAw4UWMA0GCSqGSIb3DQEBCwUAA4IBAQApJgGJDlr5P3Gwzz38j1NKC7Oq
IEK/amCxpYkhGsW8FzxnRsrpI6c+HQAhwUYNKy/Ltq3wDZhLiPwiW27+6CtuJ+Om
XfXTbLSelwYzES9k97m9VIFNScUyVPDNNIchQRk09XvPJaubWTNxg0xIhxLB0Vuu
HwVIiKjSH06t0ofpiDYqvpMCFhcw/L2nslcj2ykfbm743oidk33NDZ6V+ofjEaAJ
Wuq1lujvJUYFfMCgRxV4YFdMSKUOVMLmSsjoM0Hi6LGj3gbFA2nRKCTYZMqzUW5v
e5vsD86eU/1aaHIPykVM24C8mi7DbSu0AhqUd+VFaiDA3anymVXoltAMwMge
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:17 2024 by rpki-client on console-fra.rpki-client.org