Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/4dc625-7c1c-4dac-899e-a9a779026f0a/1/Tjx_mWMwVW8r2sY4tvCJgQRdL6s.roa
File: Tjx_mWMwVW8r2sY4tvCJgQRdL6s.roa (raw, json)
Hash identifier: 5iC2pXMbmuDjr2Mo8N8sjNNoGC2SREaC/ZRUcTbBqEk=
Subject key identifier: 4E:3C:7F:99:63:30:55:6F:2B:DA:C6:38:B6:F0:89:81:04:5D:2F:AB
Certificate issuer: /CN=c3fb403a241883e58fced52d39d80eabd52bb36f
Certificate serial: 0185707066365BF7F524488CB0BD54C60A0A
Authority key identifier: C3:FB:40:3A:24:18:83:E5:8F:CE:D5:2D:39:D8:0E:AB:D5:2B:B3:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w_tAOiQYg-WPztUtOdgOq9Urs28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/4dc625-7c1c-4dac-899e-a9a779026f0a/1/Tjx_mWMwVW8r2sY4tvCJgQRdL6s.roa
Signing time: Mon 02 Jan 2023 03:04:52 +0000
ROA not before: Mon 02 Jan 2023 03:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60700
IP address blocks: 194.44.30.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:70:66:36:5b:f7:f5:24:48:8c:b0:bd:54:c6:0a:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3fb403a241883e58fced52d39d80eabd52bb36f
Validity
Not Before: Jan 2 03:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4e3c7f996330556f2bdac638b6f08981045d2fab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:57:89:f4:11:16:61:1c:2a:63:97:66:0c:89:
c9:64:1b:b0:5b:31:5b:34:fa:10:c4:b2:fe:dd:65:
84:ff:c0:1c:0a:24:e6:a1:18:a8:86:d6:58:6a:d4:
82:95:c6:f0:a1:33:2e:56:2c:a3:97:fc:bd:c4:d7:
52:a0:d5:86:5a:8c:cb:2d:64:de:eb:ca:b2:02:7a:
3c:e5:f8:29:5e:c4:78:28:b7:8a:b7:a8:3b:ca:bb:
df:fb:9a:cf:88:6f:34:03:fd:d0:0c:28:8b:5d:32:
63:98:12:35:13:4c:ef:75:96:db:4d:7f:02:c0:a7:
98:0e:50:cf:a2:3a:8b:2f:e8:57:e7:9c:4e:d8:f7:
eb:23:f3:d2:4a:d3:75:0b:38:34:26:18:a1:a0:c0:
ab:24:cf:20:57:f2:90:57:c0:44:a2:2a:d9:d6:1c:
d4:09:a0:ad:db:ce:3c:2f:a5:74:67:af:0b:39:c5:
00:32:62:88:f5:b7:bc:4b:d1:45:bc:7b:23:ff:9b:
d7:a9:9f:c9:bf:2e:89:49:0b:0e:e3:88:f4:81:64:
a0:3c:09:53:95:97:e1:9f:13:b4:05:e1:d1:39:79:
2f:ec:6f:8a:a6:e8:ad:8e:31:f0:75:de:d6:4c:ec:
76:3e:05:60:de:2a:eb:de:29:9b:ce:b3:e3:4d:c8:
a2:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:3C:7F:99:63:30:55:6F:2B:DA:C6:38:B6:F0:89:81:04:5D:2F:AB
X509v3 Authority Key Identifier:
keyid:C3:FB:40:3A:24:18:83:E5:8F:CE:D5:2D:39:D8:0E:AB:D5:2B:B3:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w_tAOiQYg-WPztUtOdgOq9Urs28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/4dc625-7c1c-4dac-899e-a9a779026f0a/1/Tjx_mWMwVW8r2sY4tvCJgQRdL6s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/4dc625-7c1c-4dac-899e-a9a779026f0a/1/w_tAOiQYg-WPztUtOdgOq9Urs28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.44.30.0/24
Signature Algorithm: sha256WithRSAEncryption
44:c5:a4:91:a1:13:1f:ca:0f:e9:94:0d:e6:ea:fa:fe:5d:81:
d1:b1:8e:3c:1d:20:d9:18:b3:0c:d8:1d:ce:89:03:d7:97:19:
36:7c:4c:de:e2:28:c3:a8:e5:7c:fb:5d:a4:bc:4b:e1:23:5a:
9f:49:9b:19:60:1e:ee:9a:7c:cf:8a:ba:d5:eb:a1:90:3a:d5:
b3:c1:8e:0d:10:7f:73:70:30:4b:bb:02:42:27:01:48:d4:fc:
ad:78:bb:8a:a5:1f:1b:2c:c1:01:11:0f:5a:21:41:7b:ac:18:
5a:d6:6a:68:5c:33:9d:1e:17:21:54:cb:a7:9a:e5:cc:49:34:
39:de:d9:13:37:da:62:04:e4:2a:62:0b:0d:59:30:ab:61:03:
a8:19:a6:e4:e1:c4:67:79:0b:09:7d:31:34:e4:ba:7a:7b:a3:
26:47:79:26:bc:0c:c6:27:c9:ca:a5:8c:48:18:f3:6e:6c:95:
b4:27:21:22:83:3d:62:65:ac:94:14:03:74:02:54:81:6b:14:
54:d8:07:ee:d6:45:54:e2:d0:9b:dd:03:d2:f4:ea:96:93:7a:
f5:eb:b5:5d:a0:30:ff:d0:40:52:25:bb:71:f6:a1:18:6b:39:
8f:51:a6:13:1a:80:7e:a9:95:3f:b3:be:a9:be:63:cc:02:20:
62:77:ad:81
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwcGY2W/f1JEiMsL1UxgoKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzZmI0MDNhMjQxODgzZTU4ZmNlZDUyZDM5ZDgwZWFiZDUy
YmIzNmYwHhcNMjMwMTAyMDMwNDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZTNjN2Y5OTYzMzA1NTZmMmJkYWM2MzhiNmYwODk4MTA0NWQyZmFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmleJ9BEWYRwqY5dmDInJZBuwWzFb
NPoQxLL+3WWE/8AcCiTmoRiohtZYatSClcbwoTMuViyjl/y9xNdSoNWGWozLLWTe
68qyAno85fgpXsR4KLeKt6g7yrvf+5rPiG80A/3QDCiLXTJjmBI1E0zvdZbbTX8C
wKeYDlDPojqLL+hX55xO2PfrI/PSStN1Czg0JhihoMCrJM8gV/KQV8BEoirZ1hzU
CaCt2848L6V0Z68LOcUAMmKI9be8S9FFvHsj/5vXqZ/Jvy6JSQsO44j0gWSgPAlT
lZfhnxO0BeHROXkv7G+KpuitjjHwdd7WTOx2PgVg3irr3imbzrPjTcii5wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFE48f5ljMFVvK9rGOLbwiYEEXS+rMB8GA1UdIwQY
MBaAFMP7QDokGIPlj87VLTnYDqvVK7NvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd190QU9pUVlnLVdQenRVdE9kZ09xOVVyczI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC80ZGM2MjUtN2MxYy00ZGFjLTg5OWUt
YTlhNzc5MDI2ZjBhLzEvVGp4X21XTXdWVzhyMnNZNHR2Q0pnUVJkTDZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC80ZGM2MjUtN2MxYy00ZGFjLTg5OWUtYTlhNzc5MDI2ZjBh
LzEvd190QU9pUVlnLVdQenRVdE9kZ09xOVVyczI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwiweMA0G
CSqGSIb3DQEBCwUAA4IBAQBExaSRoRMfyg/plA3m6vr+XYHRsY48HSDZGLMM2B3O
iQPXlxk2fEze4ijDqOV8+12kvEvhI1qfSZsZYB7umnzPirrV66GQOtWzwY4NEH9z
cDBLuwJCJwFI1PyteLuKpR8bLMEBEQ9aIUF7rBha1mpoXDOdHhchVMunmuXMSTQ5
3tkTN9piBOQqYgsNWTCrYQOoGabk4cRneQsJfTE05Lp6e6MmR3kmvAzGJ8nKpYxI
GPNubJW0JyEigz1iZayUFAN0AlSBaxRU2Afu1kVU4tCb3QPS9OqWk3r167VdoDD/
0EBSJbtx9qEYazmPUaYTGoB+qZU/s76pvmPMAiBid62B
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:28 2024 by rpki-client on console-fra.rpki-client.org