Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/TOA3MnPCL5PwT-CIq3drOK9HnPU.roa
File: TOA3MnPCL5PwT-CIq3drOK9HnPU.roa (raw, json)
Hash identifier: iFF4LQ8vQxJKTKXS+aTuopqOXjJKae15xx9AfmNXO44=
Subject key identifier: 4C:E0:37:32:73:C2:2F:93:F0:4F:E0:88:AB:77:6B:38:AF:47:9C:F5
Certificate issuer: /CN=6e84b12393bfcb0e6d6f32cc95c0d71174fc9b30
Certificate serial: 01856F795A378FA0C56227ADE191F359C4C4
Authority key identifier: 6E:84:B1:23:93:BF:CB:0E:6D:6F:32:CC:95:C0:D7:11:74:FC:9B:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/boSxI5O_yw5tbzLMlcDXEXT8mzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/TOA3MnPCL5PwT-CIq3drOK9HnPU.roa
Signing time: Sun 01 Jan 2023 22:35:01 +0000
ROA not before: Sun 01 Jan 2023 22:35:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31554
IP address blocks: 194.42.102.0/23 maxlen: 23
193.200.126.0/23 maxlen: 23
194.9.92.0/23 maxlen: 23
194.116.200.0/23 maxlen: 23
193.239.194.0/23 maxlen: 23
2001:67c:115c::/48 maxlen: 48
2001:67c:1e0::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:79:5a:37:8f:a0:c5:62:27:ad:e1:91:f3:59:c4:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e84b12393bfcb0e6d6f32cc95c0d71174fc9b30
Validity
Not Before: Jan 1 22:35:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4ce0373273c22f93f04fe088ab776b38af479cf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:12:34:ba:88:5f:7f:df:da:79:86:19:c0:5d:
d1:4e:e2:01:a9:65:2f:f3:96:10:65:bb:7a:ae:38:
ce:44:2b:1f:58:7b:a2:59:ed:56:d3:87:28:f4:27:
5e:a0:b5:b0:ec:5e:31:d2:fc:39:7b:b5:ea:ea:05:
bd:16:4c:36:a3:83:73:9f:90:69:fb:d3:5a:7a:39:
b1:54:84:a2:12:d8:8a:dd:ae:5b:87:51:de:e5:43:
5f:4b:21:d9:07:5c:f4:23:bf:57:aa:7b:90:af:77:
26:0f:de:f1:5e:a5:cb:4b:e9:96:49:cc:5c:93:bf:
7e:85:b4:b1:dc:1c:a7:2f:64:d9:85:88:b9:cd:e2:
07:f8:e6:26:33:43:94:48:9d:cc:c3:b3:55:45:53:
2e:8a:04:af:74:b8:b4:8f:a4:0e:68:10:f4:8e:8f:
be:68:94:4e:3d:f1:18:1d:93:9a:11:a6:2b:10:6a:
0c:ec:6d:f4:1c:d5:9e:e1:94:79:53:d8:61:be:89:
f5:cd:cd:fe:02:81:9c:7d:71:11:a7:9b:6e:4b:51:
3e:a6:fb:27:14:5e:8d:91:5b:49:b1:35:6c:20:46:
34:b1:7c:56:4e:2f:8d:01:36:95:88:46:0d:51:f6:
ee:eb:87:76:99:c3:d2:2a:20:55:0a:f4:f3:6c:3c:
68:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:E0:37:32:73:C2:2F:93:F0:4F:E0:88:AB:77:6B:38:AF:47:9C:F5
X509v3 Authority Key Identifier:
keyid:6E:84:B1:23:93:BF:CB:0E:6D:6F:32:CC:95:C0:D7:11:74:FC:9B:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/boSxI5O_yw5tbzLMlcDXEXT8mzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/TOA3MnPCL5PwT-CIq3drOK9HnPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/boSxI5O_yw5tbzLMlcDXEXT8mzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.126.0/23
193.239.194.0/23
194.9.92.0/23
194.42.102.0/23
194.116.200.0/23
IPv6:
2001:67c:1e0::/48
2001:67c:115c::/48
Signature Algorithm: sha256WithRSAEncryption
ba:ed:f2:a2:24:ae:db:ed:38:06:89:10:79:6c:00:06:ca:62:
8f:a6:72:28:6d:58:ab:a2:cf:70:85:eb:b5:45:d0:96:ac:5e:
36:25:58:e1:43:55:b7:f4:04:8a:98:b3:91:f3:30:06:de:26:
7c:76:96:c0:d8:d5:87:b4:95:70:d1:b3:42:b7:a1:83:12:05:
a6:d0:c2:20:ce:4b:5c:79:99:fc:c8:09:08:53:51:0d:2e:3c:
6a:35:03:0a:07:2b:ab:48:02:6e:fe:dd:ee:04:29:24:57:10:
aa:8d:29:2d:a4:81:ae:52:8e:01:89:b0:36:31:e2:64:91:c9:
9d:31:bc:5a:e5:32:ca:d4:6c:8c:40:50:2c:fb:3e:de:13:ee:
11:e9:1f:8c:9a:bc:62:bd:9d:d8:5a:13:17:58:24:7e:59:bc:
66:34:6e:c1:8f:de:80:8f:7f:07:1a:b4:30:65:59:e7:e1:67:
5d:a8:05:d3:1a:69:4a:a7:b1:f1:9b:2a:2a:32:d4:92:f2:80:
ad:8d:c1:d8:ca:d3:a1:3e:87:b9:4b:fe:18:29:c6:93:6c:35:
e1:b9:42:82:8d:92:73:b0:f2:26:b0:cd:86:1d:77:f8:98:fc:
3c:11:da:24:8e:eb:ca:28:b4:90:a6:b5:3b:97:21:19:a3:fb:
2d:61:d5:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:35:54 2024 by rpki-client on console-fra.rpki-client.org