Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/TPSJZeJ_Lelx7m4rsErjqRVbavk.roa
File: TPSJZeJ_Lelx7m4rsErjqRVbavk.roa (raw, json)
Hash identifier: FvpcfuxbwTkkIvA2iujn6+z1pHyCKO2pD1it1OSL23U=
Subject key identifier: 4C:F4:89:65:E2:7F:2D:E9:71:EE:6E:2B:B0:4A:E3:A9:15:5B:6A:F9
Certificate issuer: /CN=45b9854b044594e6cf0846fb41de7b0908fb5f72
Certificate serial: 01890C5E5AD574407DEFA98124C8C218A8F5
Authority key identifier: 45:B9:85:4B:04:45:94:E6:CF:08:46:FB:41:DE:7B:09:08:FB:5F:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RbmFSwRFlObPCEb7Qd57CQj7X3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/TPSJZeJ_Lelx7m4rsErjqRVbavk.roa
Signing time: Fri 30 Jun 2023 12:54:17 +0000
ROA not before: Fri 30 Jun 2023 12:54:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24679
IP address blocks: 217.175.224.0/19 maxlen: 24
195.47.229.0/24 maxlen: 24
193.201.52.0/22 maxlen: 24
81.3.0.0/18 maxlen: 24
83.246.0.0/17 maxlen: 24
193.238.228.0/22 maxlen: 24
217.195.32.0/20 maxlen: 24
2a02:790::/32 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:0c:5e:5a:d5:74:40:7d:ef:a9:81:24:c8:c2:18:a8:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45b9854b044594e6cf0846fb41de7b0908fb5f72
Validity
Not Before: Jun 30 12:54:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4cf48965e27f2de971ee6e2bb04ae3a9155b6af9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d8:44:e9:82:51:14:98:d1:78:3f:21:03:b0:
1f:05:e8:31:04:2b:f7:a8:2a:a2:ff:e3:68:f7:f6:
08:17:94:d5:c3:63:63:9f:32:d5:d8:e0:50:ec:bf:
5a:c2:7b:8c:fc:42:f8:c9:0f:c4:d9:ac:69:f3:a3:
a2:df:51:36:49:f6:44:d2:7d:a4:af:4a:9b:8e:95:
ea:72:02:0a:3a:ed:37:7d:f6:1b:5a:62:7a:a7:86:
49:9c:c1:a5:a5:99:06:82:c3:bb:81:97:46:52:18:
d8:f5:3c:84:94:26:60:32:95:af:7f:ed:ad:33:18:
4c:63:5b:88:c2:28:96:a6:34:19:bd:a7:fa:3a:5f:
b3:67:7d:a4:0a:aa:11:5f:37:91:a2:b5:ae:47:41:
89:15:9d:63:f2:a9:38:5e:62:1b:d5:20:e3:63:bd:
ed:d6:76:96:56:17:62:47:6c:d9:e6:e0:51:b8:e7:
76:2c:59:2f:7d:20:21:c1:40:9b:86:43:4c:79:30:
cf:f5:f4:01:58:96:d1:a7:3c:3f:4a:3f:28:e8:92:
94:47:33:2f:b2:6a:08:fd:09:f2:c2:b7:87:c9:db:
d7:08:b3:56:8f:f4:68:2e:b8:2d:3f:df:0d:d8:b2:
f0:fc:63:27:15:44:33:e7:50:32:54:fa:40:ab:bf:
ab:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:F4:89:65:E2:7F:2D:E9:71:EE:6E:2B:B0:4A:E3:A9:15:5B:6A:F9
X509v3 Authority Key Identifier:
keyid:45:B9:85:4B:04:45:94:E6:CF:08:46:FB:41:DE:7B:09:08:FB:5F:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RbmFSwRFlObPCEb7Qd57CQj7X3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/TPSJZeJ_Lelx7m4rsErjqRVbavk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.3.0.0/18
83.246.0.0/17
193.201.52.0/22
193.238.228.0/22
195.47.229.0/24
217.175.224.0/19
217.195.32.0/20
IPv6:
2a02:790::/32
Signature Algorithm: sha256WithRSAEncryption
52:d1:5e:81:a2:67:ad:0d:e8:15:c1:65:9a:0b:2a:fb:31:cd:
96:f2:51:28:73:b1:84:66:8d:f2:aa:aa:0c:63:86:fd:75:5c:
10:be:e1:57:15:5c:10:ea:20:ed:d2:66:9c:c4:60:6d:28:ba:
6e:bf:04:a5:ae:86:b0:d5:b4:64:18:36:60:07:16:71:ad:36:
1f:2c:66:77:f2:42:35:53:5c:e0:d2:b6:3b:a7:11:c9:ab:4b:
2f:14:e5:6f:42:1b:31:8e:36:e0:e9:97:08:b4:b4:83:2d:57:
e6:f5:29:9d:5c:2f:81:7b:06:56:4f:50:f8:37:46:f6:42:4c:
8c:b2:56:ed:e8:2f:73:0a:78:8d:de:1f:af:d5:5c:0c:5c:db:
ef:1b:45:43:d8:25:0a:2f:ca:43:52:23:5f:18:a6:b0:aa:10:
c7:4f:26:f3:1d:61:6f:d8:ee:6b:f4:92:81:c3:58:41:69:97:
71:2e:85:af:96:c2:33:f6:33:00:ec:88:c1:86:5d:c1:e4:23:
d5:a7:ca:34:62:29:40:93:30:36:a2:9e:de:d6:ff:9b:88:3d:
1a:4b:6c:cd:96:ef:e4:cb:4f:e3:07:a9:0d:05:79:73:e3:d5:
b3:4f:1b:a6:7c:02:8a:b9:26:63:f4:80:8b:7f:33:d1:74:7f:
43:49:b9:4a
-----BEGIN CERTIFICATE-----
MIIFMDCCBBigAwIBAgISAYkMXlrVdEB976mBJMjCGKj1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1Yjk4NTRiMDQ0NTk0ZTZjZjA4NDZmYjQxZGU3YjA5MDhm
YjVmNzIwHhcNMjMwNjMwMTI1NDE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Y2Y0ODk2NWUyN2YyZGU5NzFlZTZlMmJiMDRhZTNhOTE1NWI2YWY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNhE6YJRFJjReD8hA7AfBegxBCv3
qCqi/+No9/YIF5TVw2NjnzLV2OBQ7L9awnuM/EL4yQ/E2axp86Oi31E2SfZE0n2k
r0qbjpXqcgIKOu03ffYbWmJ6p4ZJnMGlpZkGgsO7gZdGUhjY9TyElCZgMpWvf+2t
MxhMY1uIwiiWpjQZvaf6Ol+zZ32kCqoRXzeRorWuR0GJFZ1j8qk4XmIb1SDjY73t
1naWVhdiR2zZ5uBRuOd2LFkvfSAhwUCbhkNMeTDP9fQBWJbRpzw/Sj8o6JKURzMv
smoI/QnywreHydvXCLNWj/RoLrgtP98N2LLw/GMnFUQz51AyVPpAq7+rcQIDAQAB
o4ICPDCCAjgwHQYDVR0OBBYEFEz0iWXify3pce5uK7BK46kVW2r5MB8GA1UdIwQY
MBaAFEW5hUsERZTmzwhG+0HeewkI+19yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmJtRlN3UkZsT2JQQ0ViN1FkNTdDUWo3WDNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi81ZTYxMTYtNTZlNi00YzFkLTk2ODMt
NGIyMmZjNTE4NGEyLzEvVFBTSlplSl9MZWx4N200cnNFcmpxUlZiYXZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi81ZTYxMTYtNTZlNi00YzFkLTk2ODMtNGIyMmZjNTE4NGEy
LzEvUmJtRlN3UkZsT2JQQ0ViN1FkNTdDUWo3WDNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFIGCCsGAQUFBwEHAQH/BEMwQTAwBAIAATAqAwQGUQMAAwQH
U/YAAwQCwck0AwQCwe7kAwQAwy/lAwQF2a/gAwQE2cMgMA0EAgACMAcDBQAqAgeQ
MA0GCSqGSIb3DQEBCwUAA4IBAQBS0V6BometDegVwWWaCyr7Mc2W8lEoc7GEZo3y
qqoMY4b9dVwQvuFXFVwQ6iDt0macxGBtKLpuvwSlroaw1bRkGDZgBxZxrTYfLGZ3
8kI1U1zg0rY7pxHJq0svFOVvQhsxjjbg6ZcItLSDLVfm9SmdXC+BewZWT1D4N0b2
QkyMslbt6C9zCniN3h+v1VwMXNvvG0VD2CUKL8pDUiNfGKawqhDHTybzHWFv2O5r
9JKBw1hBaZdxLoWvlsIz9jMA7IjBhl3B5CPVp8o0YilAkzA2op7e1v+biD0aS2zN
lu/ky0/jB6kNBXlz49WzTxumfAKKuSZj9ICLfzPRdH9DSblK
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:14 2024 by rpki-client on console-ams.rpki-client.org