Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d582c4-36e3-4a57-8752-e641e713d1fa/1/TmLRfYZRFWejLAYDXTqI1-8DPok.roa
File: TmLRfYZRFWejLAYDXTqI1-8DPok.roa (raw, json)
Hash identifier: cop7I2fwn28206iU7rLg2Ym7vf+j1zM/KuTED652hEY=
Subject key identifier: 4E:62:D1:7D:86:51:15:67:A3:2C:06:03:5D:3A:88:D7:EF:03:3E:89
Certificate issuer: /CN=d0299cf12b38ff12d95ffc0d13ac12c69fe2c1ca
Certificate serial: 018DF446F8B7B7D59333FC057D47CDFD81AF
Authority key identifier: D0:29:9C:F1:2B:38:FF:12:D9:5F:FC:0D:13:AC:12:C6:9F:E2:C1:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Cmc8Ss4_xLZX_wNE6wSxp_iwco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/d582c4-36e3-4a57-8752-e641e713d1fa/1/TmLRfYZRFWejLAYDXTqI1-8DPok.roa
Signing time: Thu 29 Feb 2024 09:51:48 +0000
ROA not before: Thu 29 Feb 2024 09:51:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59956
IP address blocks: 176.117.94.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 29 Apr 2024 08:28:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f4:46:f8:b7:b7:d5:93:33:fc:05:7d:47:cd:fd:81:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0299cf12b38ff12d95ffc0d13ac12c69fe2c1ca
Validity
Not Before: Feb 29 09:51:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4e62d17d86511567a32c06035d3a88d7ef033e89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c7:a5:e2:44:d8:7a:67:fa:bf:61:a7:2f:84:
f0:1d:2e:0a:0a:cf:f3:da:6f:dc:c4:32:0e:4e:e6:
cf:b7:94:b1:e8:83:cf:f6:f9:ed:67:93:0a:03:aa:
c3:06:bb:1a:e8:5a:b8:90:84:a6:4c:62:59:f9:46:
e5:8e:d5:ee:b2:98:d5:54:e9:e3:d6:a2:ec:bd:2d:
97:a2:04:91:83:c6:78:61:b1:0a:06:70:f0:00:25:
0d:8f:8e:85:d7:40:21:cb:64:39:87:dc:a7:d9:88:
aa:3f:dc:5f:3a:15:87:62:9c:53:46:41:ef:19:c9:
26:8b:f8:ae:d3:71:ba:8f:c6:a9:ce:8f:6f:14:e0:
42:ee:6c:a7:b6:75:0b:0b:c5:56:67:11:ae:5f:e6:
86:89:ad:09:fa:20:25:bd:a0:04:dc:f9:51:5a:04:
ac:d6:57:7e:e6:28:59:60:91:33:73:cb:c9:af:5c:
43:0b:62:00:02:6e:ff:fd:12:83:c9:53:a5:e0:d4:
e5:16:b9:8d:fa:e1:38:2a:fe:c2:a4:ba:29:1e:9f:
48:11:57:4d:4f:83:be:e7:72:cc:59:80:31:3d:38:
43:79:bd:69:f7:6c:d4:f6:b2:95:ab:cd:68:36:d1:
c9:ae:ba:e2:a2:7a:44:5f:aa:a7:73:59:71:e4:45:
6d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:62:D1:7D:86:51:15:67:A3:2C:06:03:5D:3A:88:D7:EF:03:3E:89
X509v3 Authority Key Identifier:
keyid:D0:29:9C:F1:2B:38:FF:12:D9:5F:FC:0D:13:AC:12:C6:9F:E2:C1:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Cmc8Ss4_xLZX_wNE6wSxp_iwco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d582c4-36e3-4a57-8752-e641e713d1fa/1/TmLRfYZRFWejLAYDXTqI1-8DPok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d582c4-36e3-4a57-8752-e641e713d1fa/1/0Cmc8Ss4_xLZX_wNE6wSxp_iwco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.117.94.0/24
Signature Algorithm: sha256WithRSAEncryption
14:1e:82:40:79:53:6c:65:15:4b:e1:d0:57:47:b4:77:70:03:
4a:59:c9:03:8d:40:ff:2a:36:6f:b1:93:63:98:e4:a3:0a:66:
62:41:43:97:d3:9d:a4:d6:48:9e:35:be:53:c8:bd:d9:df:c5:
b8:55:2c:a4:16:4d:55:33:36:42:ae:56:ba:23:dc:54:19:d6:
c4:17:df:2e:47:5e:a0:30:12:50:c3:6b:70:61:78:68:4d:03:
5c:65:aa:46:10:a2:3f:78:77:9c:19:33:06:52:f6:fc:63:c8:
df:23:3a:e0:af:a9:42:c2:a2:19:5d:1d:f1:d5:87:75:10:f5:
29:62:21:29:fc:ee:4b:df:c3:60:43:9c:e2:e7:5e:a6:53:20:
eb:a3:fc:0f:e3:09:c2:0b:5a:96:6f:d1:09:c1:27:ef:8c:9f:
f3:5f:13:08:8e:b4:6f:8a:33:2f:91:40:8c:83:44:cb:5e:11:
d9:4e:5d:44:5d:8d:80:ce:af:df:30:85:10:f5:30:97:69:51:
d0:8e:18:bc:d0:7b:e1:3a:b9:a8:8a:b4:fc:89:c8:ca:f1:59:
8e:22:4b:69:76:7b:61:c9:24:0d:7e:5c:f3:cd:35:2d:5c:60:
c2:43:c3:a7:07:84:7a:88:48:5c:bc:32:31:dc:72:00:d1:83:
5f:73:86:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 11:06:50 2024 by rpki-client on console-fra.rpki-client.org