Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/TBdj47N7NxWhWEQRtycgtNL7yhM.roa
File: TBdj47N7NxWhWEQRtycgtNL7yhM.roa (raw, json)
Hash identifier: 2u7tvVpPK+Abgq/tTHR4lDq5Zsn2KMlO8euC+qPU1NQ=
Subject key identifier: 4C:17:63:E3:B3:7B:37:15:A1:58:44:11:B7:27:20:B4:D2:FB:CA:13
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 018C717C62452DE10EAAA1E7668002BBCEFC
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/TBdj47N7NxWhWEQRtycgtNL7yhM.roa
Signing time: Sat 16 Dec 2023 07:17:06 +0000
ROA not before: Sat 16 Dec 2023 07:17:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25369
IP address blocks: 109.122.43.0/24 maxlen: 24
91.226.59.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 18 Dec 2023 06:39:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:71:7c:62:45:2d:e1:0e:aa:a1:e7:66:80:02:bb:ce:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Dec 16 07:17:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4c1763e3b37b3715a1584411b72720b4d2fbca13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a1:9e:28:89:c7:22:df:64:fe:18:1b:9a:f5:
2a:2e:67:dc:e3:4a:e3:84:aa:c7:e8:1f:6a:8c:56:
60:f2:d3:06:00:14:a8:0c:36:9e:7e:b0:c7:09:d0:
73:bb:30:fc:22:13:1b:63:26:26:23:e6:c8:2a:e2:
9e:98:dd:38:f3:95:ec:31:0e:c9:2b:d1:e5:0c:c9:
65:98:8d:a4:f9:11:9c:a0:96:5e:84:98:06:e4:33:
33:98:69:84:32:f9:58:9b:51:65:b6:6c:82:03:69:
51:e3:4d:56:bc:a1:e2:40:3d:de:08:bb:18:52:ce:
e3:67:73:3f:c1:5f:b1:92:87:9d:8b:ae:0c:51:2e:
91:3a:b8:a1:12:3d:1f:fc:d9:cf:63:9a:34:bb:0c:
74:f0:61:93:6c:ab:66:15:c3:93:7f:aa:87:3a:ce:
c8:2e:fd:b8:62:97:e3:bf:bc:0b:b6:43:a1:c3:9a:
e2:54:0a:53:90:05:af:99:83:45:8a:5d:48:7d:b8:
1d:ff:0c:f0:af:70:df:38:8d:33:a7:27:50:66:0c:
c1:f2:a6:45:ce:cb:b7:2f:9c:a9:58:d8:88:57:80:
e1:5b:14:5a:c3:12:ac:2b:03:ca:8d:39:3e:3f:df:
ca:c7:61:15:e0:f9:89:15:4a:c4:49:5e:46:05:a6:
94:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:17:63:E3:B3:7B:37:15:A1:58:44:11:B7:27:20:B4:D2:FB:CA:13
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/TBdj47N7NxWhWEQRtycgtNL7yhM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.59.0/24
109.122.43.0/24
Signature Algorithm: sha256WithRSAEncryption
70:ed:64:85:62:12:b4:f2:23:1f:d1:ec:d5:f3:7f:68:0a:0e:
cb:7f:e8:8c:0b:3e:a8:66:62:71:bc:26:d7:27:0a:b3:89:c4:
83:58:c1:f5:7b:c4:7d:2a:a5:21:cc:a5:a0:3a:b7:11:04:41:
42:58:e9:f2:8e:8f:7f:db:19:15:e6:88:16:48:fd:61:33:d6:
e9:88:77:2c:4f:a4:fc:92:2f:b9:e0:ec:22:bb:f1:07:f9:b8:
b4:c0:16:a2:84:a7:ed:7a:65:17:c6:64:c3:5b:6c:23:e4:c9:
14:fb:82:27:06:e3:05:dd:9b:0c:2d:55:1b:29:48:12:56:92:
66:ef:eb:e6:29:b1:89:6b:de:61:cb:ea:92:c9:5b:c6:e1:1f:
f8:c6:4f:c5:e5:4b:c1:7b:5f:59:64:3a:13:e4:ab:17:bc:bd:
e5:e7:26:1f:6e:58:39:bd:21:80:d5:5b:5d:92:c8:7d:9b:dd:
0b:43:9b:40:8b:31:1b:eb:96:0e:56:e1:7f:72:28:4b:44:aa:
51:9d:ed:d4:4d:39:8a:35:fc:4c:00:05:62:cd:26:65:aa:e5:
12:85:8f:a6:74:67:01:b4:ab:f8:fa:0e:98:62:15:f0:32:b5:
fc:f4:f1:e7:e8:49:54:15:90:7e:cb:61:95:cf:da:9f:64:20:
4f:08:9a:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:36 2024 by rpki-client on console-fra.rpki-client.org