Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/TtMBcNEJLONzw3HTfh-auDf5PEA.roa
File: TtMBcNEJLONzw3HTfh-auDf5PEA.roa (raw, json)
Hash identifier: 0ID/q5XvIPttDf8cx8gkyr95JC9nzMlcaVuC13YLDas=
Subject key identifier: 4E:D3:01:70:D1:09:2C:E3:73:C3:71:D3:7E:1F:9A:B8:37:F9:3C:40
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01881F684F67F75B385F6BE7EC6D142A45E5
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/TtMBcNEJLONzw3HTfh-auDf5PEA.roa
Signing time: Mon 15 May 2023 12:35:09 +0000
ROA not before: Mon 15 May 2023 12:35:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 397423
IP address blocks: 178.215.224.0/24 maxlen: 24
94.103.127.0/24 maxlen: 24
193.25.216.0/24 maxlen: 24
109.206.238.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:1f:68:4f:67:f7:5b:38:5f:6b:e7:ec:6d:14:2a:45:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 15 12:35:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4ed30170d1092ce373c371d37e1f9ab837f93c40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:dc:b0:c8:9e:b6:81:90:ab:b8:e6:dc:25:0a:
27:89:ad:ca:da:a6:fb:d8:61:6b:3e:7d:0b:c5:13:
01:34:90:c1:cf:2b:a9:0b:17:49:ce:32:d3:c4:94:
7e:0f:fb:2d:79:32:c3:ad:f3:54:5f:5f:c7:73:2d:
7a:1b:7c:99:80:cd:63:1f:cf:41:e9:6d:d8:d0:9f:
61:61:71:a2:6c:c4:5f:e4:61:bd:a2:ac:0f:53:d7:
e2:04:ff:ed:d5:a6:aa:87:ed:13:2e:08:78:a1:63:
d9:0e:b1:ce:08:b4:e2:2f:43:b6:0e:6a:07:e8:c3:
41:24:0d:5d:e4:ea:f7:d3:0f:f7:42:1b:c5:06:8e:
1f:ce:f2:17:c7:e5:fc:cd:e5:d2:57:3a:d3:7c:c7:
2d:f4:35:00:37:e7:73:af:73:c7:62:b0:ea:89:82:
a4:16:97:94:d9:02:0e:f4:c3:0f:a4:43:e0:3b:3d:
2b:dd:9f:ee:d5:58:8a:95:5c:68:b9:e6:f2:d6:4b:
4c:9f:bd:a9:77:53:76:e7:71:e9:3a:37:44:0f:72:
d2:8b:29:dc:8e:1e:ec:8d:66:68:ce:8a:fe:20:9b:
81:b8:0e:3a:d8:cb:6c:da:09:23:c7:e1:79:18:5d:
32:4c:3c:79:1d:9b:e0:63:96:60:ce:0b:65:9d:2a:
11:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:D3:01:70:D1:09:2C:E3:73:C3:71:D3:7E:1F:9A:B8:37:F9:3C:40
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/TtMBcNEJLONzw3HTfh-auDf5PEA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.103.127.0/24
109.206.238.0/24
178.215.224.0/24
193.25.216.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:7f:a7:c8:02:28:c8:fb:e3:fb:23:1e:cd:77:cc:6e:63:1f:
56:fe:63:30:25:76:58:3d:65:83:74:d3:31:c3:f3:52:2e:f8:
29:eb:9b:2b:c6:14:6c:82:3e:dc:44:1f:f4:30:2b:99:31:74:
70:20:0f:9a:e7:a1:92:1d:af:a4:92:18:f4:22:5d:04:c1:a4:
2a:e7:9f:4e:bd:0a:f0:a1:c9:ac:02:6a:a0:c5:dd:8f:a2:87:
2d:0d:b8:20:27:69:19:4c:b6:e4:24:45:f6:12:eb:f1:76:d8:
92:c0:b9:af:3e:8c:f7:d1:7a:b1:80:50:1d:af:69:df:e2:7f:
27:58:a2:1d:6b:34:61:5d:79:96:57:10:22:03:3d:25:d7:49:
b1:61:f5:73:77:b7:94:91:f7:54:cc:9c:70:7e:d8:8a:03:48:
15:2d:a4:2d:81:2a:3a:d1:c7:fa:21:6c:b6:8a:f3:76:97:22:
ed:0e:83:5f:a0:7a:d8:59:7e:bb:36:a6:6c:c8:5f:1e:2d:9c:
6f:c4:8a:de:c5:3c:66:23:ca:cd:5e:18:d5:81:b5:7d:3e:5a:
ba:df:5e:c6:02:9a:63:79:98:41:b6:b4:c4:20:bd:96:f1:23:
45:5c:5d:9c:94:68:84:d8:05:68:71:57:7a:f9:2a:ad:85:5c:
86:4c:72:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:43 2023 by rpki-client on console-fra.rpki-client.org