Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/TL-F8azI_tQTPBlLoanHLs4IKB4.roa
File: TL-F8azI_tQTPBlLoanHLs4IKB4.roa (raw, json)
Hash identifier: gRR9HOrqeci2EVh7ijWUIC3K//QhySDh9l/rFeXpRzQ=
Subject key identifier: 4C:BF:85:F1:AC:C8:FE:D4:13:3C:19:4B:A1:A9:C7:2E:CE:08:28:1E
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 01856F023F81C199422A40414E723A1559E1
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/TL-F8azI_tQTPBlLoanHLs4IKB4.roa
Signing time: Sun 01 Jan 2023 20:24:56 +0000
ROA not before: Sun 01 Jan 2023 20:24:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35484
IP address blocks: 85.254.150.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:02:3f:81:c1:99:42:2a:40:41:4e:72:3a:15:59:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jan 1 20:24:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4cbf85f1acc8fed4133c194ba1a9c72ece08281e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f0:62:1f:10:f4:93:ff:02:d9:fd:db:ac:4c:
95:55:48:ef:32:86:ea:59:f2:e3:03:6d:d2:32:fd:
6e:bf:cf:c6:d3:e8:8d:45:e9:82:28:9a:63:7a:9c:
35:a2:ab:b5:29:56:9c:14:4d:9f:9f:d1:5c:af:33:
fc:19:b2:2d:49:97:ff:59:4b:3f:44:ab:84:71:fe:
88:5c:4c:d2:42:ba:d8:80:c3:ea:2f:e9:f8:ef:e7:
cf:03:b2:7e:36:36:6c:30:9d:a2:a3:dd:7d:c8:0b:
f3:79:cb:c9:4b:7f:b0:dc:38:96:be:32:e8:e1:a4:
35:47:e8:36:07:40:1a:bd:97:0d:cd:74:23:0b:7b:
b5:9f:f7:68:41:21:68:3f:76:07:7d:b0:12:07:b0:
16:9f:0f:53:bc:dd:6e:0b:96:37:64:86:fa:8b:71:
d0:7f:f8:ba:d8:ac:11:f9:2d:bb:b3:b5:61:bd:2e:
91:fb:8c:10:64:48:a2:8b:5b:aa:8e:47:15:ef:15:
fb:53:dd:d4:3d:95:16:ee:6e:1b:0e:57:d1:35:c9:
38:80:03:21:b5:19:60:2c:ba:85:c7:e4:72:57:3e:
7a:86:f3:87:ac:18:3e:67:1f:53:4f:1e:8b:67:9e:
6f:30:9b:28:ea:55:9d:85:16:c4:d7:66:88:e1:c1:
fa:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:BF:85:F1:AC:C8:FE:D4:13:3C:19:4B:A1:A9:C7:2E:CE:08:28:1E
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/TL-F8azI_tQTPBlLoanHLs4IKB4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.254.150.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:a7:8e:92:22:90:9a:36:0a:26:1e:8a:33:56:d5:b9:a7:95:
7b:11:2a:36:29:8a:a2:6e:7e:eb:59:0a:62:05:c1:45:af:d7:
44:a7:4c:7f:04:c1:fb:c2:e7:ab:8b:b5:52:8b:c4:9c:69:d7:
bb:5a:2a:28:39:2c:6d:e8:ae:92:94:11:b3:1e:99:0c:e7:c0:
95:79:71:51:3b:2f:a2:62:18:be:a6:d3:d6:67:74:b1:68:a7:
96:a6:ab:6f:75:b6:14:e7:e5:57:ae:c9:9e:13:dc:25:bd:5c:
f1:65:35:f8:86:6f:53:c9:2c:af:fc:60:f9:d1:68:a2:e2:57:
4f:e7:97:4d:1d:42:32:15:cd:1d:d7:a4:66:57:d9:9b:0f:9c:
ed:03:6d:9c:60:6f:9e:5e:2d:25:2c:8d:38:b2:a0:9f:99:6b:
5b:74:cc:29:27:c4:8d:c7:74:bb:ab:60:4d:00:ac:4c:c5:10:
71:fa:3e:9c:9f:a4:10:cd:5e:48:fa:b3:e1:57:4d:b5:99:38:
66:d3:55:be:b4:51:52:f5:91:47:e1:5a:8c:db:e6:f6:0d:9d:
bd:57:a2:ee:3b:01:38:d3:0c:36:92:57:4d:66:38:d9:a8:28:
c5:83:d3:34:69:58:ed:34:40:c6:f3:a5:0e:79:4f:0d:62:59:
10:3d:13:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:49:38 2024 by rpki-client on console-fra.rpki-client.org