Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/e5e379-656d-4622-a7bc-ea26e746a0ad/1/TPIlIMW3u72q5sS0nOsLi4CPksI.roa
File: TPIlIMW3u72q5sS0nOsLi4CPksI.roa (raw, json)
Hash identifier: DVl7Nr49C94PJj+Z6EiE+aT+AAyedhpvD6/4CZypdEo=
Subject key identifier: 4C:F2:25:20:C5:B7:BB:BD:AA:E6:C4:B4:9C:EB:0B:8B:80:8F:92:C2
Certificate issuer: /CN=0146b429f8c49611fcfea1efa1a51b9c0eddb6e7
Certificate serial: 0185728C8EE96FE04E176074E0DB72008DE8
Authority key identifier: 01:46:B4:29:F8:C4:96:11:FC:FE:A1:EF:A1:A5:1B:9C:0E:DD:B6:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AUa0KfjElhH8_qHvoaUbnA7dtuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/e5e379-656d-4622-a7bc-ea26e746a0ad/1/TPIlIMW3u72q5sS0nOsLi4CPksI.roa
Signing time: Mon 02 Jan 2023 12:54:52 +0000
ROA not before: Mon 02 Jan 2023 12:54:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44739
IP address blocks: 89.47.92.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:8c:8e:e9:6f:e0:4e:17:60:74:e0:db:72:00:8d:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0146b429f8c49611fcfea1efa1a51b9c0eddb6e7
Validity
Not Before: Jan 2 12:54:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4cf22520c5b7bbbdaae6c4b49ceb0b8b808f92c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:60:fb:00:7f:a0:6e:74:24:30:de:8f:b8:e7:
6f:b8:a5:64:ff:cd:b3:15:0f:64:b3:26:4c:1c:51:
9c:c8:7c:c8:9e:1b:eb:24:ea:79:30:66:e6:88:47:
b0:65:90:68:1b:a8:c6:82:56:59:e2:c0:08:06:e6:
81:22:05:9e:9e:4d:25:5f:91:48:16:38:a5:be:73:
3a:03:9a:ae:bd:e8:ca:08:7c:e5:5e:c9:4f:9b:29:
91:f6:46:2f:8a:7f:b5:8f:33:df:2c:0c:ed:33:9c:
c9:77:c8:72:e0:57:e0:a1:21:c1:63:5e:36:f0:5e:
96:69:66:c1:1a:94:ab:26:22:0d:3d:6e:75:04:74:
fa:5d:d2:e2:4a:bd:5a:a6:e8:fb:84:c7:84:28:28:
36:9b:7c:d5:95:4b:cd:f9:1a:62:7f:c6:5d:e1:b9:
37:7e:f0:30:7d:a1:d9:e6:c6:9c:d8:05:c1:c9:2b:
63:04:6f:43:60:54:ad:2a:a1:a3:53:aa:5a:ce:e9:
59:eb:21:6f:2d:df:25:50:bd:0a:2d:84:32:24:5b:
83:ff:3d:d7:cd:9f:d2:27:a3:f7:ff:6f:7b:17:90:
05:6b:b9:b4:cd:fd:0a:9b:13:bc:7a:cf:ad:12:2f:
41:f0:3b:1e:2b:15:9d:1b:8e:cb:88:fd:92:bf:fa:
36:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:F2:25:20:C5:B7:BB:BD:AA:E6:C4:B4:9C:EB:0B:8B:80:8F:92:C2
X509v3 Authority Key Identifier:
keyid:01:46:B4:29:F8:C4:96:11:FC:FE:A1:EF:A1:A5:1B:9C:0E:DD:B6:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AUa0KfjElhH8_qHvoaUbnA7dtuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/e5e379-656d-4622-a7bc-ea26e746a0ad/1/TPIlIMW3u72q5sS0nOsLi4CPksI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/e5e379-656d-4622-a7bc-ea26e746a0ad/1/AUa0KfjElhH8_qHvoaUbnA7dtuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.47.92.0/23
Signature Algorithm: sha256WithRSAEncryption
4d:2c:c3:ed:6b:63:4a:0d:41:f9:aa:5e:5f:41:e6:72:34:32:
21:83:38:df:e6:5d:4f:6a:c6:94:8e:52:79:87:a4:d9:d6:46:
a2:b0:e5:44:c5:e3:cf:1e:1d:9d:d4:ed:a0:ba:03:79:17:ad:
cf:82:d6:6f:90:0f:db:3e:d2:99:00:c5:7e:77:4e:6b:a5:6e:
4a:db:e4:18:78:40:75:55:9a:ad:1f:18:d8:98:51:50:2c:38:
64:ec:49:cb:e7:d1:53:c4:a1:19:d1:eb:b8:68:2e:d3:03:c1:
9c:b2:86:eb:24:5c:74:4a:ad:d8:62:72:99:2e:ae:02:7a:5e:
1f:83:97:fd:6b:9d:be:79:8f:05:44:23:f4:0a:97:ea:6b:6c:
8d:0f:87:81:94:71:26:3b:2e:e8:a3:2c:f5:e2:91:8b:ee:ee:
70:9e:52:ab:02:bb:be:e9:ff:9b:47:77:3b:e4:d9:d7:6d:83:
de:02:49:40:08:36:cc:0c:8d:4d:e3:92:e8:f9:12:83:15:4c:
1d:00:94:c1:d6:f4:6c:01:3c:50:ec:fc:b3:12:0a:ec:34:ac:
3d:a9:2a:b2:86:1e:14:dd:22:69:82:7c:07:8f:0f:14:5a:c4:
36:38:01:d6:7c:10:5b:da:04:6f:fa:a2:ac:6f:c5:ae:9f:5f:
b8:08:ce:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:19:41 2024 by rpki-client on console-ams.rpki-client.org