Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/TBlpvKuVSIPsyEgq2BOWAYibuA0.roa
File: TBlpvKuVSIPsyEgq2BOWAYibuA0.roa (raw, json)
Hash identifier: KbYVk8NZAYaUy+xxzWU6RVtV/OEbK98Ub+vy+h2S4II=
Subject key identifier: 4C:19:69:BC:AB:95:48:83:EC:C8:48:2A:D8:13:96:01:88:9B:B8:0D
Certificate issuer: /CN=9145ead8d3f1284402b6f75614a87257503ce1bc
Certificate serial: 018570152338691F311809ADCAE4D41499DE
Authority key identifier: 91:45:EA:D8:D3:F1:28:44:02:B6:F7:56:14:A8:72:57:50:3C:E1:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUXq2NPxKEQCtvdWFKhyV1A84bw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/TBlpvKuVSIPsyEgq2BOWAYibuA0.roa
Signing time: Mon 02 Jan 2023 01:25:11 +0000
ROA not before: Mon 02 Jan 2023 01:25:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60233
IP address blocks: 94.177.80.0/21 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:15:23:38:69:1f:31:18:09:ad:ca:e4:d4:14:99:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9145ead8d3f1284402b6f75614a87257503ce1bc
Validity
Not Before: Jan 2 01:25:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4c1969bcab954883ecc8482ad8139601889bb80d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f7:9c:2c:98:6b:57:6a:05:a1:53:6d:2f:cd:
cc:9a:c8:f7:84:9d:69:cf:ca:f0:40:d5:90:06:43:
18:84:bf:ef:ac:6d:54:a0:bb:b9:36:cb:6f:82:45:
91:9a:c0:4f:b5:4f:e2:67:d6:ea:93:0d:e8:f5:ba:
df:97:2e:87:b6:33:a0:cc:e9:bf:5a:29:eb:4b:ea:
42:a6:c2:b4:35:25:58:1f:45:9d:3a:78:72:a0:bb:
33:da:0f:b4:07:d8:11:5e:f5:9f:d5:86:69:42:88:
35:f4:34:7b:b9:0f:c0:ed:97:c7:7b:76:be:ef:05:
e6:82:64:21:e9:a6:f8:c5:b2:b9:8e:5f:f5:c5:90:
5d:07:0f:82:40:0c:21:ed:4f:c4:a7:d4:84:34:8e:
40:f1:11:ea:d6:56:56:d1:c8:e9:25:98:c3:9a:2b:
e4:93:36:a4:9b:e8:e7:b0:96:ae:ed:45:1c:8e:b1:
f5:4a:77:70:4d:3a:e0:93:ec:fc:b1:ae:95:29:2b:
c6:f4:85:db:b6:ea:64:43:48:19:08:b2:f5:44:c1:
99:aa:ec:b5:4a:9c:b1:88:b7:9c:1b:eb:44:9c:de:
c5:60:55:26:e5:6e:1c:32:92:e0:31:17:3e:bb:52:
99:0f:43:06:bf:2a:a1:25:a9:fc:c3:41:7b:05:b0:
31:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:19:69:BC:AB:95:48:83:EC:C8:48:2A:D8:13:96:01:88:9B:B8:0D
X509v3 Authority Key Identifier:
keyid:91:45:EA:D8:D3:F1:28:44:02:B6:F7:56:14:A8:72:57:50:3C:E1:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUXq2NPxKEQCtvdWFKhyV1A84bw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/TBlpvKuVSIPsyEgq2BOWAYibuA0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/kUXq2NPxKEQCtvdWFKhyV1A84bw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.177.80.0/21
Signature Algorithm: sha256WithRSAEncryption
94:9d:eb:e4:20:dd:81:4a:f3:50:a5:be:ba:fa:7e:36:20:4a:
24:ae:f0:36:85:1f:16:1a:ae:c2:75:4f:5e:a4:f5:27:a1:35:
7f:6e:e8:c8:9d:a2:27:eb:7d:28:06:9b:d0:ce:af:87:94:10:
f3:4e:15:35:92:24:ae:bf:af:e6:59:82:2e:ca:83:f4:8d:8a:
9b:ce:2d:21:ac:8a:eb:65:f6:a8:5d:a0:bd:b4:0f:30:80:7f:
81:fd:93:13:04:3e:2b:cf:81:b3:3b:86:6e:cd:9f:6f:cc:ba:
b5:f4:84:e5:bb:c9:37:91:84:b2:fa:f3:f1:f4:3a:f4:c4:41:
6c:e2:1d:9f:89:da:01:8d:ac:9f:e0:25:da:cd:f2:e5:2a:68:
54:9b:ee:fc:27:a7:d7:09:31:72:e1:5e:a8:9e:4a:db:cb:0f:
40:7c:da:b8:2a:8b:e9:8e:53:c1:14:1a:13:58:3a:6b:51:52:
a8:1b:27:26:74:c3:2a:33:53:c7:6d:9f:3d:78:f4:de:af:bb:
04:f7:df:12:3d:8b:76:fe:97:45:11:6c:c8:86:3a:5b:8e:6d:
72:83:c6:07:90:00:6b:09:54:db:80:c5:cc:fa:5b:34:be:e3:
9f:14:4b:7e:f8:cd:7d:af:91:f6:96:5e:42:e8:ed:34:f1:b5:
95:de:f0:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:04 2024 by rpki-client on console-ams.rpki-client.org