Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/TQFWwN2XUMGDi4m1TI2mNG1JXEs.roa
File: TQFWwN2XUMGDi4m1TI2mNG1JXEs.roa (raw, json)
Hash identifier: av2rM1moy6UT39q96Qalxj3nSg2QfzUwOwKhBZsG6Y0=
Subject key identifier: 4D:01:56:C0:DD:97:50:C1:83:8B:89:B5:4C:8D:A6:34:6D:49:5C:4B
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018B60650A6757E3F3333BA8628A5D799523
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/TQFWwN2XUMGDi4m1TI2mNG1JXEs.roa
Signing time: Tue 24 Oct 2023 06:35:16 +0000
ROA not before: Tue 24 Oct 2023 06:35:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 87.120.68.0/23 maxlen: 24
164.40.185.0/24 maxlen: 24
93.123.74.0/23 maxlen: 23
93.123.74.0/24 maxlen: 24
93.123.75.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:60:65:0a:67:57:e3:f3:33:3b:a8:62:8a:5d:79:95:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 24 06:35:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4d0156c0dd9750c1838b89b54c8da6346d495c4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:64:d2:e2:d3:8c:93:9f:f5:6a:ef:68:33:6d:
90:f1:1d:46:be:82:68:41:ab:6f:bd:97:2d:b4:ab:
40:6e:6b:a8:64:a1:69:f7:2e:af:2a:7c:20:b2:a4:
1a:39:8c:29:a2:ea:70:0b:a6:39:9b:f3:75:b4:28:
1a:a0:f2:25:86:53:f7:53:f8:b4:9e:e7:1e:8a:63:
4f:ee:af:b4:61:24:92:8f:43:12:68:0c:99:6b:84:
67:98:36:e1:de:74:1a:8b:bf:8d:f1:92:0c:85:38:
f2:ef:52:5e:f0:ea:e2:78:20:d5:67:c7:f8:3c:38:
71:68:42:b5:47:27:e9:3f:af:a5:90:ae:ce:76:30:
35:8e:1d:c5:b2:43:f4:52:86:2a:bf:be:9a:4c:00:
3d:63:3d:47:d1:b9:0f:fe:31:12:2f:8f:5c:85:a9:
1c:02:20:f0:77:2c:46:ec:25:75:18:d0:73:e4:0c:
a2:2b:73:cb:78:c1:05:0a:35:85:82:64:0c:da:da:
51:a4:6c:9e:85:b1:c8:f5:92:79:a3:a6:4d:9f:45:
97:a0:af:9a:c9:16:04:83:f8:b9:49:da:d2:c2:a3:
ca:7c:a6:97:53:0b:f9:c6:c6:7c:71:38:ea:42:be:
c7:ca:e1:ce:a3:ff:32:68:98:92:89:b5:58:87:b8:
a0:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:01:56:C0:DD:97:50:C1:83:8B:89:B5:4C:8D:A6:34:6D:49:5C:4B
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/TQFWwN2XUMGDi4m1TI2mNG1JXEs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.68.0/23
93.123.74.0/23
164.40.185.0/24
Signature Algorithm: sha256WithRSAEncryption
58:4f:df:c3:32:ed:8a:a8:e2:52:ee:76:08:4f:2c:d3:8d:c2:
7c:84:6a:f8:3e:60:60:20:9a:6c:3e:32:78:3e:dd:8c:45:30:
49:47:35:a8:e3:73:67:56:c3:91:7c:f7:ba:cc:20:8d:bf:76:
6b:42:d4:98:da:19:80:1d:71:c4:46:cd:a4:99:bb:12:67:69:
72:84:c1:98:08:f5:e1:81:89:46:a8:c9:f3:16:6b:04:c7:0b:
aa:97:c0:3e:08:a5:58:9c:21:13:ce:9c:4f:bc:6d:b1:10:5b:
19:71:26:4e:33:3a:52:5d:e2:30:0f:be:3a:92:91:94:19:08:
16:24:e2:7e:7c:11:eb:8b:03:10:f0:a0:57:82:2c:44:cc:d4:
ab:43:36:f5:0e:0e:4b:1d:1d:7b:8b:cd:77:ae:28:3e:85:12:
9f:e8:02:9a:05:35:71:cd:53:4d:16:b1:b0:b0:1f:cd:3f:e3:
04:59:87:b1:42:2a:fb:4e:f8:15:05:80:5d:1d:df:11:ef:09:
13:59:7b:40:62:1c:fe:24:78:62:4a:22:04:a9:e1:26:f2:ba:
64:4f:40:f4:78:13:61:44:2c:9c:83:ef:bc:d9:3a:89:53:81:
f2:56:e5:02:3a:35:3f:20:9c:d3:5f:38:4d:7d:c2:7a:d7:d1:
9b:53:4b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 14 12:54:27 2023 by rpki-client on console-ams.rpki-client.org