Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/tHL_4nxc_m3lt-3TIFhKSXs_qvU.roa
File: tHL_4nxc_m3lt-3TIFhKSXs_qvU.roa (raw, json)
Hash identifier: pX8/fGZFhIHKPiGMmwtFOxDUInF+pODXMrMByNWfqkQ=
Subject key identifier: B4:72:FF:E2:7C:5C:FE:6D:E5:B7:ED:D3:20:58:4A:49:7B:3F:AA:F5
Certificate issuer: /CN=9d210f2259093aaf45285922a588e9a661aba9fa
Certificate serial: 01856D81A251572D688FA9D69FA660FC6E35
Authority key identifier: 9D:21:0F:22:59:09:3A:AF:45:28:59:22:A5:88:E9:A6:61:AB:A9:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/tHL_4nxc_m3lt-3TIFhKSXs_qvU.roa
Signing time: Sun 01 Jan 2023 13:24:50 +0000
ROA not before: Sun 01 Jan 2023 13:24:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43994
IP address blocks: 217.196.16.0/20 maxlen: 20
77.245.96.0/20 maxlen: 20
93.185.64.0/20 maxlen: 20
95.141.128.0/20 maxlen: 20
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:81:a2:51:57:2d:68:8f:a9:d6:9f:a6:60:fc:6e:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d210f2259093aaf45285922a588e9a661aba9fa
Validity
Not Before: Jan 1 13:24:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b472ffe27c5cfe6de5b7edd320584a497b3faaf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:cb:71:cd:7b:81:a0:ab:2c:29:27:60:93:a8:
7f:4e:48:83:97:dc:fc:ad:85:49:0b:f3:f7:7c:f5:
27:dd:0f:12:08:59:2e:72:fd:83:c1:42:df:4d:89:
f2:d2:dc:c0:95:dc:e1:c1:6a:94:a5:59:a7:17:fd:
04:80:61:de:c4:85:36:9c:3e:92:4e:fe:ab:86:b3:
63:ed:9b:2a:50:97:11:a0:70:b7:1b:95:11:a7:bc:
4b:50:ac:f0:47:c0:16:d8:95:46:20:6b:3d:ab:8b:
2e:25:d3:20:cd:b4:d4:bd:c4:66:ba:69:bd:35:1a:
7d:18:07:85:90:52:6b:f2:4b:4f:89:80:4c:ec:80:
e2:ee:7b:1d:4c:3f:b6:67:11:ec:44:48:ab:b9:e7:
7f:25:13:7e:5e:04:1e:4b:5a:6a:6d:8a:c6:7b:90:
da:16:16:b4:22:2f:aa:e6:a4:71:20:24:3f:73:12:
98:bb:3a:e4:63:d1:05:a8:5d:99:59:cd:6e:d2:d3:
53:83:81:80:82:ac:30:e9:d2:f5:49:0b:3c:52:c8:
39:61:a2:18:52:95:e4:ee:b1:29:de:8c:41:c4:c7:
90:d0:e5:c0:68:c0:1c:61:50:1d:58:b6:07:e6:01:
3e:74:3d:1f:19:b8:7a:c2:e2:e4:62:9e:c9:10:1c:
49:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:72:FF:E2:7C:5C:FE:6D:E5:B7:ED:D3:20:58:4A:49:7B:3F:AA:F5
X509v3 Authority Key Identifier:
keyid:9D:21:0F:22:59:09:3A:AF:45:28:59:22:A5:88:E9:A6:61:AB:A9:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/tHL_4nxc_m3lt-3TIFhKSXs_qvU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.245.96.0/20
93.185.64.0/20
95.141.128.0/20
217.196.16.0/20
Signature Algorithm: sha256WithRSAEncryption
1f:d1:3c:d9:64:2f:20:bf:cb:ec:fa:15:5d:24:2c:2d:48:a8:
e9:9a:4f:59:75:c9:73:a9:ce:71:58:66:be:5e:1d:8b:d7:15:
80:de:b3:50:82:88:50:15:1e:a4:29:5f:03:84:e4:bd:29:4d:
39:40:5d:c8:67:4e:28:a3:2c:c1:81:5b:4f:89:65:1d:bc:77:
4e:66:69:9c:e6:64:5c:ac:7b:5a:98:cd:aa:e4:1f:6d:2b:20:
9f:20:da:03:24:41:3b:6a:a6:65:85:37:62:22:7c:84:c9:f8:
e5:85:1e:94:dd:df:c1:7d:20:90:6b:88:cb:e8:32:da:dc:f5:
b5:d9:3c:ab:0f:d2:a0:5a:d5:63:d0:f6:be:74:ad:e0:7c:ad:
6e:40:cd:e7:15:42:87:82:f2:e8:ed:cc:c4:06:dc:c5:8a:72:
b4:4a:42:10:41:bc:56:97:26:3e:9e:76:e4:17:62:9a:70:2b:
12:d5:d5:2f:2b:c2:8b:cd:d4:4e:79:1a:79:be:7b:20:9b:61:
c8:ae:6a:11:66:89:8f:fb:54:f2:2d:7e:47:f6:31:c6:8d:7d:
b0:5d:b2:7b:f8:a3:70:8e:ab:cd:6b:bf:bb:dc:2e:13:a3:cc:
0e:7c:a4:17:25:00:27:ee:c9:4f:b0:bd:38:a8:bf:bb:29:67:
a4:f7:1d:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:56:39 2024 by rpki-client on console-ams.rpki-client.org