Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/tFsmtscUI-48iRO4LbV1cCzWkrw.roa
File: tFsmtscUI-48iRO4LbV1cCzWkrw.roa (raw, json)
Hash identifier: Ws+YyI/NB3wTEKx/ueGS+nOY9TQJBoegT5Vrvj4WMqk=
Subject key identifier: B4:5B:26:B6:C7:14:23:EE:3C:89:13:B8:2D:B5:75:70:2C:D6:92:BC
Certificate issuer: /CN=d36bfd928bccb42ad9c468a552ab7393fdd87095
Certificate serial: 018B14189EF5A014F1F2800B125492269FFA
Authority key identifier: D3:6B:FD:92:8B:CC:B4:2A:D9:C4:68:A5:52:AB:73:93:FD:D8:70:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02v9kovMtCrZxGilUqtzk_3YcJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/tFsmtscUI-48iRO4LbV1cCzWkrw.roa
Signing time: Mon 09 Oct 2023 11:00:39 +0000
ROA not before: Mon 09 Oct 2023 11:00:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29063
IP address blocks: 83.138.0.0/21 maxlen: 21
212.25.212.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:14:18:9e:f5:a0:14:f1:f2:80:0b:12:54:92:26:9f:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d36bfd928bccb42ad9c468a552ab7393fdd87095
Validity
Not Before: Oct 9 11:00:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b45b26b6c71423ee3c8913b82db575702cd692bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fb:88:e0:5f:7a:7a:e7:67:7b:00:c5:02:72:
e4:52:d8:d0:cf:96:3f:a6:99:3d:3b:b9:8d:2a:6f:
14:54:37:36:9d:b3:59:a4:37:fd:44:44:9a:29:96:
bc:69:9e:e6:93:2c:48:4e:02:21:37:01:9a:d6:43:
8d:71:d8:1e:08:5f:9f:8d:cf:8f:8a:84:9e:ef:e4:
7b:6f:29:23:c9:41:c0:34:b1:78:7a:f1:d8:b0:4f:
e4:3b:da:20:6a:d9:f3:ca:47:ca:8d:46:4c:73:5f:
6c:15:22:8b:dc:a7:5f:67:e7:e2:de:28:8e:f5:a6:
5a:60:99:3b:1d:cf:91:cf:69:3f:31:2e:ab:a5:6e:
d8:7e:26:cc:2e:9e:5a:01:46:6e:d9:25:0a:a6:4b:
c8:d1:c1:1a:b6:6f:d4:01:be:f7:ae:bb:32:d8:b0:
bb:29:60:9b:4b:fa:da:63:ae:d5:47:b8:7c:a1:41:
af:9a:46:fd:3e:09:22:56:f6:67:77:83:21:82:ae:
e5:e4:a8:88:b5:fd:20:64:cb:7c:87:73:13:00:46:
55:72:6e:b1:3d:c9:96:8a:55:86:ad:2a:3f:f2:f1:
49:6c:40:1f:17:db:50:d3:78:04:07:55:31:00:5a:
0c:4e:83:9e:7d:d3:b3:0e:9b:e3:24:59:ac:04:95:
86:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:5B:26:B6:C7:14:23:EE:3C:89:13:B8:2D:B5:75:70:2C:D6:92:BC
X509v3 Authority Key Identifier:
keyid:D3:6B:FD:92:8B:CC:B4:2A:D9:C4:68:A5:52:AB:73:93:FD:D8:70:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02v9kovMtCrZxGilUqtzk_3YcJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/tFsmtscUI-48iRO4LbV1cCzWkrw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.138.0.0/21
212.25.212.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:70:b1:c1:ce:08:7a:89:5d:00:1b:f5:c4:13:85:a2:ff:cc:
4b:7a:9f:95:48:43:24:90:76:7a:ea:1d:47:d8:40:28:b4:50:
00:e5:04:4b:65:68:ff:a1:1d:0d:5b:71:d5:fa:c3:ae:2a:79:
65:6f:0c:d8:37:96:4e:6c:9a:56:5e:5b:97:cb:9d:ce:e0:bc:
55:eb:c0:90:46:d7:e4:dd:b9:36:dd:ae:6b:9c:93:a4:2a:f6:
1c:f2:ae:55:f5:ea:80:c2:c8:bb:a7:2f:9a:e0:50:9f:18:b3:
a2:b3:35:36:61:fd:4a:b5:d6:7c:0b:14:49:34:7e:25:fb:04:
1e:dd:e2:3b:ab:bf:98:f4:8a:c7:99:04:0c:65:62:98:63:34:
b7:63:4a:9b:29:e3:0b:0e:b9:4a:b4:7e:ed:98:50:71:cd:00:
b9:f2:94:3d:3b:69:69:66:60:85:b2:98:54:36:14:a0:5f:be:
51:ad:3f:49:3b:07:71:18:d9:92:f1:bd:48:f9:63:d2:91:a8:
fb:cf:a2:4f:4b:63:8e:63:bf:1b:c3:72:95:c3:35:e2:53:dc:
e3:9f:b6:25:ca:83:9d:d7:54:fd:cb:b8:db:01:0e:1d:8f:88:
3a:1a:73:87:e7:73:32:21:d6:d2:fb:1b:ac:b2:c4:04:a2:e2:
6f:0f:2b:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 9 14:13:24 2023 by rpki-client on console-fra.rpki-client.org