Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/tkysIblXES6T1uZFrnCOwNI4QZc.roa
File: tkysIblXES6T1uZFrnCOwNI4QZc.roa (raw, json)
Hash identifier: TO8Mmcv5k3DPQY/KOW+fYtPKif5vUprZEgUrkcH1T2Y=
Subject key identifier: B6:4C:AC:21:B9:57:11:2E:93:D6:E6:45:AE:70:8E:C0:D2:38:41:97
Certificate issuer: /CN=c68c65e699b576ab113a79be8828948f1e6cc260
Certificate serial: 0186472BA61E376AF55AD344146C3A17419C
Authority key identifier: C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/tkysIblXES6T1uZFrnCOwNI4QZc.roa
Signing time: Sun 12 Feb 2023 19:48:08 +0000
ROA not before: Sun 12 Feb 2023 19:48:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 45.140.208.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 12 Sep 2023 08:04:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:47:2b:a6:1e:37:6a:f5:5a:d3:44:14:6c:3a:17:41:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c68c65e699b576ab113a79be8828948f1e6cc260
Validity
Not Before: Feb 12 19:48:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b64cac21b957112e93d6e645ae708ec0d2384197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8d:23:d3:6a:46:2a:e6:5a:b0:c1:ef:b2:34:
c8:e2:c0:47:10:34:fa:c5:4a:c9:7a:14:4e:43:c8:
c7:26:9b:d2:a0:69:13:2d:15:14:42:d4:a2:1f:b5:
7b:0e:3d:d4:6f:ed:9a:1a:c9:be:6d:d1:de:19:64:
a1:7d:47:03:41:52:50:ae:b8:7a:1b:90:d7:f8:68:
3a:b5:a5:8e:88:c1:87:6d:df:fb:45:8c:29:c1:60:
ea:ef:02:19:a5:10:ce:0c:f7:15:fe:a2:d8:0d:8f:
d7:9f:9e:09:f6:0e:b9:56:ce:10:34:1a:b4:80:f6:
02:1b:01:2f:e4:0a:24:89:2b:e3:97:d4:46:f1:88:
a6:0c:04:af:ca:ea:88:64:a5:17:79:0d:30:42:56:
ac:31:d9:ba:3d:43:47:dc:7c:d7:f5:cf:5d:24:51:
c2:ba:68:67:4b:b1:09:92:87:e8:54:6a:85:d7:83:
9a:29:45:b6:d6:c0:77:b3:cf:d7:fd:9d:36:fd:f0:
ea:29:be:55:e0:6c:ea:17:78:0e:25:38:67:de:8a:
d9:06:b8:55:13:e5:46:81:89:70:31:aa:4d:fd:6f:
56:86:e6:75:4e:31:7c:9e:ab:b3:41:73:8d:e2:6c:
7c:70:96:a7:16:5c:02:55:c4:db:36:f3:41:fc:2c:
67:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:4C:AC:21:B9:57:11:2E:93:D6:E6:45:AE:70:8E:C0:D2:38:41:97
X509v3 Authority Key Identifier:
keyid:C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/tkysIblXES6T1uZFrnCOwNI4QZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.208.0/24
Signature Algorithm: sha256WithRSAEncryption
15:a9:30:d3:15:93:0f:4c:8f:23:a5:4f:81:d4:7d:82:a3:66:
25:5a:ab:be:75:f2:fe:41:a1:29:07:b6:4a:a7:c0:6f:63:5d:
49:6f:b1:e5:c2:5c:b7:cc:6f:8e:d7:12:bc:e4:28:b7:8d:9b:
35:54:a1:fc:11:8c:f6:cc:f1:b1:ba:b9:a1:2a:b6:fe:d9:42:
76:03:f8:16:da:b6:bd:26:7d:d3:6d:c7:58:2d:ea:ea:dd:82:
d8:fe:4a:c7:27:37:cc:d5:0e:f0:56:47:12:72:7d:dd:de:49:
cd:1f:33:4e:be:21:d1:7b:69:01:fd:f5:e2:91:2d:15:f6:b0:
a5:a9:da:9c:d5:4b:73:da:b4:c7:c0:eb:c4:c0:52:74:db:66:
52:b5:45:07:bb:42:5a:50:37:2f:15:a9:9c:47:b4:7d:5e:c2:
7f:e2:2d:09:a3:4b:5a:e9:88:2f:2d:05:a6:0b:69:68:43:d6:
3d:1c:a3:8d:f5:0d:3f:53:7e:a2:f3:c1:42:26:4e:26:54:88:
37:81:07:06:81:c5:7d:8d:54:9f:c4:35:50:82:00:01:52:e1:
88:43:76:74:4f:e4:e6:67:71:82:ba:b2:2e:57:e8:9c:1b:d7:
da:42:2f:62:28:48:e0:72:08:f6:65:c9:2a:d7:09:db:ca:a4:
d1:ab:b4:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:57 2024 by rpki-client on console-ams.rpki-client.org