Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/TKWoZSec8AvgcahtWY0TesAdteg.roa
File: TKWoZSec8AvgcahtWY0TesAdteg.roa (raw, json)
Hash identifier: IwJl6Swx4tbaj8BMpK4gki8T2pvsOGGMUCEt8rH+yuo=
Subject key identifier: 4C:A5:A8:65:27:9C:F0:0B:E0:71:A8:6D:59:8D:13:7A:C0:1D:B5:E8
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 018B1E49337A12EE2A0732328599A4E69DD8
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/TKWoZSec8AvgcahtWY0TesAdteg.roa
Signing time: Wed 11 Oct 2023 10:29:55 +0000
ROA not before: Wed 11 Oct 2023 10:29:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 109.122.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 16 Oct 2023 19:26:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:1e:49:33:7a:12:ee:2a:07:32:32:85:99:a4:e6:9d:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Oct 11 10:29:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4ca5a865279cf00be071a86d598d137ac01db5e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:cd:74:f1:ba:27:2b:d0:a7:f0:29:3a:b4:b2:
20:ae:de:13:94:e7:25:09:97:ed:88:1f:41:22:bc:
84:9b:75:16:f2:ed:ad:b7:05:58:eb:9d:4c:27:73:
a9:00:02:22:61:24:a5:3d:72:b7:22:c8:4c:70:77:
72:e3:d2:83:75:51:ef:b3:54:73:3b:1d:d8:e2:2d:
14:ff:4a:8f:f3:2f:29:69:21:7a:96:ff:2e:81:7e:
3d:b7:49:eb:07:0a:29:04:e8:05:25:db:d2:e4:3a:
cb:a2:17:7c:59:24:cc:df:d7:65:f1:34:3f:d9:80:
fa:f7:69:af:b6:67:ce:7e:a4:1d:a4:fa:ac:32:51:
45:a1:54:9f:2f:fc:86:f2:95:18:05:55:71:83:b8:
9f:f9:c4:de:25:a9:02:4d:e7:60:31:f5:27:07:c3:
41:67:ec:fb:86:bc:7b:64:dc:c7:43:3f:78:96:5c:
38:1d:66:fd:0b:af:8e:1e:88:bd:81:16:d9:13:f0:
b8:63:0e:86:42:af:68:a8:d2:a6:c2:7c:38:e6:8b:
32:68:71:dd:9a:0d:fa:24:75:94:ec:f4:f8:19:00:
32:c9:1b:aa:ef:3d:a4:b2:dd:ef:1d:30:ee:72:3e:
94:0f:5d:b7:c2:11:8a:79:32:96:5e:48:f0:cb:18:
90:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:A5:A8:65:27:9C:F0:0B:E0:71:A8:6D:59:8D:13:7A:C0:1D:B5:E8
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/TKWoZSec8AvgcahtWY0TesAdteg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.46.0/24
Signature Algorithm: sha256WithRSAEncryption
45:c5:4f:65:21:94:27:90:75:b6:68:50:57:6c:a9:5b:cc:00:
2a:24:39:5f:d3:12:40:0f:1e:eb:6d:46:6d:27:cf:70:64:00:
39:b8:d7:75:fc:50:49:d1:c5:de:10:51:92:f0:f3:74:93:19:
4f:65:3f:36:dd:86:80:9b:7d:83:90:13:39:19:60:14:df:5c:
31:cb:86:13:45:29:d2:32:9f:ec:3f:e0:4e:c0:79:52:eb:98:
3c:ef:25:07:6d:21:2a:5a:b5:52:42:ab:23:71:39:ef:55:72:
25:5b:bd:4f:48:9c:8d:93:ce:a9:59:8f:33:e5:12:40:76:3d:
22:18:05:d0:b2:45:04:de:00:9c:03:39:b7:4a:2b:da:58:b8:
bd:6f:ae:47:30:08:ae:e5:66:7d:cf:a0:10:75:44:1a:2d:27:
91:a4:23:1a:3b:fc:8f:1e:99:a7:66:6d:6a:ec:8d:a2:b3:2f:
ac:71:c6:f8:1e:8f:5d:e1:93:2d:87:64:44:59:1e:5d:73:d2:
07:4a:71:19:00:4c:5b:59:55:ec:81:6c:72:22:23:53:53:d4:
af:d1:1b:c5:1d:72:55:00:76:13:b7:91:f1:2b:6e:d4:ee:b1:
c3:4c:34:7c:6d:51:c3:54:94:43:1f:36:b5:70:ab:8a:dd:c7:
f0:1e:04:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:36 2024 by rpki-client on console-fra.rpki-client.org