Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/Tg9n7jEQKdSyTT7ToqKm73Pmamo.roa
File: Tg9n7jEQKdSyTT7ToqKm73Pmamo.roa (raw, json)
Hash identifier: UH8+44aOj7o+I+yYFrY8Y33IaI47FZSySbGj7zQJTs8=
Subject key identifier: 4E:0F:67:EE:31:10:29:D4:B2:4D:3E:D3:A2:A2:A6:EF:73:E6:6A:6A
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 01856CE60FC2138DFECA0F37129B33AC7DB5
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/Tg9n7jEQKdSyTT7ToqKm73Pmamo.roa
Signing time: Sun 01 Jan 2023 10:34:54 +0000
ROA not before: Sun 01 Jan 2023 10:34:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 26636
IP address blocks: 212.87.212.0/22 maxlen: 22
2.58.196.0/22 maxlen: 22
2.56.246.0/23 maxlen: 23
147.78.124.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 11 May 2023 08:32:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:e6:0f:c2:13:8d:fe:ca:0f:37:12:9b:33:ac:7d:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 1 10:34:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4e0f67ee311029d4b24d3ed3a2a2a6ef73e66a6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1d:9e:34:c5:4c:77:0d:ea:aa:ea:77:f0:03:
97:bf:e2:d3:5a:b9:d0:eb:0f:93:e0:77:aa:a7:b6:
0b:aa:6d:d1:5b:01:3d:9d:91:c2:58:ab:f8:42:18:
91:c4:8e:d4:45:0d:09:a5:08:01:5e:80:20:5c:0e:
30:22:e1:56:52:50:2e:63:09:45:2a:05:4e:16:d7:
5b:72:41:cd:df:34:0a:42:61:4f:73:9a:f6:30:b9:
74:ee:50:69:24:ec:92:70:a7:50:a5:41:7e:2b:13:
f2:b2:af:84:41:5d:23:fa:b3:ff:a3:a0:b0:fc:da:
3e:73:de:5f:82:0d:09:df:a7:44:30:05:45:0a:a8:
76:e9:a3:49:f2:d3:40:0e:d2:4d:c2:f8:15:41:73:
77:b6:a6:c5:9e:02:e1:6f:c6:50:31:77:67:6c:2a:
a6:9f:66:53:85:8a:75:90:0a:97:84:86:ca:5b:d7:
88:e2:cd:3e:a4:f5:92:7c:58:71:26:2b:1c:dc:9d:
bb:e4:63:58:bd:81:66:74:de:fe:9a:d0:da:11:6f:
b9:4f:24:f0:a9:23:78:d6:15:b6:7b:f8:5e:35:a6:
dd:bd:d5:7f:ac:1f:94:2d:51:4f:41:35:bb:5a:5e:
3e:f7:f1:0b:fc:66:ca:34:c7:c1:a4:04:85:33:1f:
de:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:0F:67:EE:31:10:29:D4:B2:4D:3E:D3:A2:A2:A6:EF:73:E6:6A:6A
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/Tg9n7jEQKdSyTT7ToqKm73Pmamo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.246.0/23
2.58.196.0/22
147.78.124.0/22
212.87.212.0/22
Signature Algorithm: sha256WithRSAEncryption
56:b0:8e:0e:b5:5e:4e:d9:e6:e0:41:ca:a6:85:48:35:1b:a0:
2e:02:d3:97:6b:a0:8f:8b:e6:0a:ba:bb:dc:1d:ad:87:78:8a:
d0:c2:a5:36:ba:b4:30:97:86:c9:93:99:c8:3b:36:d9:05:cf:
71:e8:a9:a5:59:e3:26:83:26:69:13:a7:64:a1:68:e9:e5:05:
91:51:5a:54:4b:d1:76:1b:d4:24:7e:7f:a2:7a:09:de:55:24:
41:d9:8e:be:3f:09:7e:2e:27:13:4d:74:19:b1:59:be:1c:d6:
89:bc:bf:cb:d8:6c:57:f7:0c:94:fc:c0:35:a8:7c:dc:c0:65:
ed:d7:97:15:bc:6f:00:4f:b6:f9:67:c7:cc:ff:1b:28:7e:95:
e5:6c:5d:93:e0:d4:dd:a0:bd:6e:89:4e:e4:b2:95:23:a8:5b:
71:5c:4e:ef:c4:35:f3:d2:ff:05:06:62:18:8a:9f:c2:56:e9:
f3:b6:26:07:8f:aa:3c:c8:0f:c5:2e:91:0b:ca:cd:7b:17:f1:
af:df:8b:dd:76:c3:2e:73:30:91:8d:04:a1:a7:4f:9e:f7:75:
15:6e:a7:b3:aa:9d:b4:75:c9:f5:9a:84:70:66:54:a6:e2:44:
13:aa:a1:bd:45:49:ef:16:54:36:f4:b4:ae:a0:f3:95:1e:88:
1b:6a:82:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:28 2024 by rpki-client on console-fra.rpki-client.org