Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/tnPTsl8ZyhMsOn-vGWPBemIjnl0.roa
File: tnPTsl8ZyhMsOn-vGWPBemIjnl0.roa (raw, json)
Hash identifier: 9p5lfegPEZYM4dpf70OgefH9AVWvcWNqABE4QIuW3Fw=
Subject key identifier: B6:73:D3:B2:5F:19:CA:13:2C:3A:7F:AF:19:63:C1:7A:62:23:9E:5D
Certificate issuer: /CN=59dd542781851c0bce5a3ea5cc387650ffc8277e
Certificate serial: 01856EB8F266DA95119C90D72AF0AEC79F6D
Authority key identifier: 59:DD:54:27:81:85:1C:0B:CE:5A:3E:A5:CC:38:76:50:FF:C8:27:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/tnPTsl8ZyhMsOn-vGWPBemIjnl0.roa
Signing time: Sun 01 Jan 2023 19:04:52 +0000
ROA not before: Sun 01 Jan 2023 19:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201387
IP address blocks: 185.89.240.0/22 maxlen: 22
84.47.146.0/24 maxlen: 24
84.47.167.0/24 maxlen: 24
84.47.166.0/23 maxlen: 24
85.91.124.0/22 maxlen: 23
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:34:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:b8:f2:66:da:95:11:9c:90:d7:2a:f0:ae:c7:9f:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59dd542781851c0bce5a3ea5cc387650ffc8277e
Validity
Not Before: Jan 1 19:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b673d3b25f19ca132c3a7faf1963c17a62239e5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c8:51:97:11:3a:df:87:07:31:f0:0d:86:e1:
3b:8d:fe:9e:da:58:d4:dc:6d:9e:f5:92:76:4c:fc:
53:47:e9:08:9e:02:3c:5d:de:f6:a3:32:62:81:ec:
0c:77:b4:43:f1:e2:e2:9b:aa:df:05:fc:d4:18:93:
fa:77:a3:c6:a3:4e:27:b2:39:a0:20:1b:72:be:f0:
9c:10:db:ae:ae:21:c3:ee:6f:99:b9:26:72:91:9a:
d6:d0:1b:50:bf:1c:1b:7c:9b:a4:dd:66:24:2b:a9:
72:31:5b:92:03:c0:99:75:df:07:1e:36:44:a8:05:
c6:26:6f:7e:78:e4:2f:90:fa:46:89:8d:9f:0a:f4:
73:ce:78:e2:32:9d:6a:03:bd:20:11:c0:d6:e8:eb:
3e:c0:ef:23:a9:7f:e5:a0:32:a8:3c:c6:b6:9e:ac:
02:23:b6:69:76:09:94:0b:94:20:8d:ec:d6:b5:3d:
48:ac:1f:cf:46:c3:88:ea:f5:97:1c:8e:3d:0d:bc:
e4:02:ad:0d:0f:ed:8c:18:bc:05:6d:36:70:20:c4:
ac:8e:47:80:d1:1b:2e:dc:46:7b:c1:6c:e8:42:ac:
ac:47:95:cf:dd:fd:ca:d2:ed:35:c8:4c:94:42:fe:
2d:41:98:1a:b5:08:da:b0:d3:c6:5c:fe:c0:ca:f6:
4f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:73:D3:B2:5F:19:CA:13:2C:3A:7F:AF:19:63:C1:7A:62:23:9E:5D
X509v3 Authority Key Identifier:
keyid:59:DD:54:27:81:85:1C:0B:CE:5A:3E:A5:CC:38:76:50:FF:C8:27:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/tnPTsl8ZyhMsOn-vGWPBemIjnl0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.47.146.0/24
84.47.166.0/23
85.91.124.0/22
185.89.240.0/22
Signature Algorithm: sha256WithRSAEncryption
44:ac:1e:23:53:0f:bf:55:a2:ff:05:d0:5c:83:06:cc:41:29:
6e:ec:0e:e6:e4:88:72:ec:c0:4d:98:d0:7c:cd:5d:c5:41:83:
d0:f0:64:66:b1:3d:c1:2c:34:26:78:54:de:14:90:4e:5c:e6:
66:dc:b1:15:00:50:48:50:26:7d:9d:87:c6:05:5b:71:36:d2:
75:2c:90:76:02:cd:cb:58:f9:be:81:1f:b1:85:ef:9a:c0:64:
7b:ec:67:22:d5:12:93:30:12:39:d9:c8:b3:d8:b3:ec:b6:d7:
5a:14:4c:a6:bb:92:d5:18:51:ac:de:3e:5c:1e:03:00:60:21:
22:d6:f2:2f:c0:bd:7e:40:12:66:59:6e:bb:bb:d2:4a:30:f3:
90:fa:c6:18:15:94:3e:aa:68:2b:4d:2f:e2:e1:bd:a9:78:bf:
ca:c9:74:69:43:1c:01:60:50:3e:8e:36:0b:3e:ef:30:77:29:
ff:19:30:bd:5d:1e:5b:1f:cb:1c:98:8f:81:dc:91:74:95:58:
be:4a:68:91:f0:5a:79:1b:1f:0f:fc:aa:45:77:de:2b:c4:de:
d7:d2:e7:af:59:a7:ea:25:6d:f0:74:bb:de:1f:5c:5c:50:a3:
0e:55:66:c7:00:2f:72:22:4a:cf:f5:38:c8:f7:db:92:f8:5b:
08:9f:75:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:21 2024 by rpki-client on console-ams.rpki-client.org