Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/TM5UHiUzIcBnDgISLv1zvXnItLg.roa
File: TM5UHiUzIcBnDgISLv1zvXnItLg.roa (raw, json)
Hash identifier: 1/3r1pbhLvxvw5cXZjoPujSqlPwa5kSbYl+8usPhRHo=
Subject key identifier: 4C:CE:54:1E:25:33:21:C0:67:0E:02:12:2E:FD:73:BD:79:C8:B4:B8
Certificate issuer: /CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Certificate serial: 018572BA854A4D042EE477C534F01B01FC74
Authority key identifier: 68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/TM5UHiUzIcBnDgISLv1zvXnItLg.roa
Signing time: Mon 02 Jan 2023 13:45:04 +0000
ROA not before: Mon 02 Jan 2023 13:45:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199453
IP address blocks: 213.189.39.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:35:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:ba:85:4a:4d:04:2e:e4:77:c5:34:f0:1b:01:fc:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Validity
Not Before: Jan 2 13:45:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4cce541e253321c0670e02122efd73bd79c8b4b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6c:a4:8d:c8:93:8a:d9:35:c4:dd:74:9c:3d:
74:84:42:1e:b6:3d:79:46:53:60:89:1a:d1:b5:18:
55:b8:73:fb:96:82:28:92:a2:fd:89:5b:7a:03:a5:
73:63:fc:38:f4:7d:8a:93:10:44:07:9d:e3:be:87:
15:bc:10:4f:fb:ea:e9:67:32:3f:d8:ba:45:eb:63:
5f:a7:c3:66:a6:26:f9:ef:d0:dc:e8:7e:ac:29:03:
ca:a0:f1:33:25:c6:a2:17:6f:6a:50:e3:24:aa:78:
16:6d:1b:b4:f7:f6:c2:9d:bb:bf:1d:b3:c5:d3:87:
19:1e:24:b0:6d:d6:73:d9:2d:e0:58:7b:d1:5b:17:
01:ba:89:69:32:8a:b1:16:8b:ea:16:2c:6c:73:03:
1e:d2:99:ad:ad:31:38:22:01:06:da:6b:09:cf:af:
10:5f:8c:33:cd:97:16:a9:6a:97:c2:72:84:32:5b:
4c:ac:f8:67:50:4f:bd:8f:f8:2a:91:25:a9:7d:14:
43:64:61:a0:2e:72:39:cb:ed:cd:94:90:ed:a1:79:
75:c5:65:7d:b4:69:61:f2:76:46:fa:e1:a0:4c:fd:
c6:b5:ae:9a:4d:67:07:a8:1b:ce:4d:d4:23:64:98:
54:44:59:d8:45:d5:92:b1:fe:1c:82:f2:76:81:33:
99:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:CE:54:1E:25:33:21:C0:67:0E:02:12:2E:FD:73:BD:79:C8:B4:B8
X509v3 Authority Key Identifier:
keyid:68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/TM5UHiUzIcBnDgISLv1zvXnItLg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.189.39.0/24
Signature Algorithm: sha256WithRSAEncryption
86:ce:97:01:33:e6:53:be:b9:ae:17:8e:7c:09:fb:f8:e0:77:
3b:4b:bc:d8:5b:a4:62:63:1a:08:f4:74:a4:3d:6f:fa:91:a1:
e9:2c:42:50:23:02:1c:c2:98:02:58:a4:96:d3:c1:1d:59:59:
c1:11:3d:4d:8a:6a:7e:41:21:74:62:53:a0:2a:7d:6a:01:46:
9a:cd:d8:ed:b6:16:9a:9f:ec:e6:54:eb:13:df:09:04:2f:d9:
db:0b:49:bd:ec:6b:fd:46:e3:a6:e3:1b:55:d4:ac:1e:9a:c7:
1b:63:a1:5f:78:2b:5b:3d:e8:d6:d8:73:c8:0d:11:28:4b:79:
31:6c:fa:e1:1a:bc:8c:1f:ee:3b:90:56:0c:78:fb:43:eb:a0:
3a:73:81:fd:54:5b:37:1f:cd:18:36:30:0c:2b:68:1a:68:ba:
44:76:a9:eb:e3:96:1b:b6:b6:19:a1:47:46:61:68:54:d2:70:
e6:73:af:b3:4b:fb:f1:33:d7:67:e1:5d:45:ff:0a:40:98:cd:
cf:90:59:7d:73:94:10:1b:ca:5f:1c:49:bd:33:94:17:c2:74:
83:a4:6e:b0:60:ac:3c:6b:92:42:ce:a5:45:f3:49:8d:a1:9e:
91:7c:de:8c:cf:f2:a6:23:63:5c:73:e7:7c:79:ac:19:dd:00:
1b:bf:3d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:57 2024 by rpki-client on console-fra.rpki-client.org