Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/TMTj0LSCPN8egLK8JsRn9t5qDW4.roa
File: TMTj0LSCPN8egLK8JsRn9t5qDW4.roa (raw, json)
Hash identifier: iGDCKJPa0Yyxzx53dp/fxy7GndFh9uR6P4HWC7+1qro=
Subject key identifier: 4C:C4:E3:D0:B4:82:3C:DF:1E:80:B2:BC:26:C4:67:F6:DE:6A:0D:6E
Certificate issuer: /CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Certificate serial: 018DC5D44779098F3BA7E8F46AC647DA8950
Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/TMTj0LSCPN8egLK8JsRn9t5qDW4.roa
Signing time: Tue 20 Feb 2024 09:23:59 +0000
ROA not before: Tue 20 Feb 2024 09:23:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216157
IP address blocks: 2a0a:e2c0::/29 maxlen: 32
2a0e:7780::/29 maxlen: 32
2a0f:e000::/29 maxlen: 32
2a11:3b40::/29 maxlen: 29
2a11:9600::/29 maxlen: 29
2a11:dcc0::/29 maxlen: 29
2a12:6b80::/29 maxlen: 32
2a13:ba00::/29 maxlen: 32
2a13:dac0::/29 maxlen: 32
2a14:7e00::/29 maxlen: 32
Validation: Failed, certificate revoked on Sat 02 Mar 2024 13:04:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c5:d4:47:79:09:8f:3b:a7:e8:f4:6a:c6:47:da:89:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Validity
Not Before: Feb 20 09:23:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4cc4e3d0b4823cdf1e80b2bc26c467f6de6a0d6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b6:c5:21:83:31:fa:02:c4:f2:0c:f2:c3:04:
31:65:ad:e9:82:be:1d:5e:ab:b3:0c:8c:21:fc:b8:
62:93:ae:c7:66:f4:f6:2e:99:d8:6d:10:76:f6:0f:
5a:bf:5f:8f:50:52:d8:2d:fd:0d:3a:f1:c6:30:23:
a9:b7:66:2b:01:eb:3f:25:e3:72:2c:fc:8e:5c:ef:
04:21:6c:7c:8f:31:78:6a:96:59:b8:4e:a9:dc:68:
ee:7c:e2:68:68:51:55:8f:ba:98:4e:8d:9c:e6:ca:
35:d0:17:93:af:6a:a7:9b:c1:50:9b:2a:b6:62:91:
9f:af:32:c4:bf:a7:50:c0:6a:0d:f0:9d:05:ac:1a:
47:88:89:1c:3a:49:56:8c:37:bd:a1:25:13:81:34:
ac:1a:fe:bd:91:41:2f:f4:c1:0e:2b:f9:53:dd:e2:
b7:83:63:c4:a6:5d:46:36:11:7d:95:ea:49:58:7c:
f4:88:9b:68:30:1a:d7:47:05:76:1f:af:41:8f:8a:
d8:93:7b:d5:4c:74:1e:80:f2:3e:70:74:52:f8:cf:
81:a7:92:96:66:21:ab:77:e9:e8:3e:f3:e2:4e:47:
0e:e7:d6:a6:4d:f2:ec:58:7f:8f:82:74:30:ae:83:
40:4f:ed:fd:0d:9a:bc:3b:de:81:b5:fb:6e:26:34:
35:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:C4:E3:D0:B4:82:3C:DF:1E:80:B2:BC:26:C4:67:F6:DE:6A:0D:6E
X509v3 Authority Key Identifier:
keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/TMTj0LSCPN8egLK8JsRn9t5qDW4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:e2c0::/29
2a0e:7780::/29
2a0f:e000::/29
2a11:3b40::/29
2a11:9600::/29
2a11:dcc0::/29
2a12:6b80::/29
2a13:ba00::/29
2a13:dac0::/29
2a14:7e00::/29
Signature Algorithm: sha256WithRSAEncryption
32:c7:9e:86:8e:0c:75:b7:c9:4e:ed:59:8e:92:61:83:cb:9d:
d4:99:e3:07:f2:c2:43:de:8c:14:4b:15:f8:74:f6:67:cf:a4:
58:60:b5:f1:9c:38:fd:16:16:2f:03:6c:76:f9:69:3b:50:59:
3c:c7:31:1b:5f:99:67:db:84:4b:30:6e:dd:4a:fc:5b:70:6e:
80:dd:b2:f3:c8:5a:53:fa:3c:da:49:2b:69:0b:eb:2e:f9:1e:
61:c5:cb:99:e8:b1:78:67:db:64:61:40:85:be:37:6a:59:78:
f1:f7:b6:9c:c3:7f:8b:ad:07:48:f9:38:a9:f4:76:f6:ba:08:
d8:57:d1:c8:e0:b8:2a:b4:42:c6:56:76:23:ca:1c:d5:dd:ab:
5b:c2:f2:0a:cc:a7:1e:09:b2:b1:d7:e4:67:f5:31:7e:27:f6:
7f:6c:8a:4a:aa:bb:de:c6:a8:2a:4b:4f:a4:04:5e:9c:ee:3d:
9c:30:a0:2e:92:41:56:91:a3:2c:b0:3c:4b:1e:ec:78:b6:68:
04:09:35:3d:35:a1:83:d1:38:21:da:6b:c3:eb:69:23:d0:e9:
a2:96:26:50:e6:c6:5c:e0:2a:7b:9d:78:48:78:56:12:af:d1:
42:5d:33:34:08:00:7b:dd:13:70:b3:7d:f6:de:86:01:a1:29:
74:9c:b4:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:38 2024 by rpki-client on console-fra.rpki-client.org