Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/TjXZBJ-5qPRe8HkyIZzuH1XXPQ0.roa
File: TjXZBJ-5qPRe8HkyIZzuH1XXPQ0.roa (raw, json)
Hash identifier: bG+YLwlkS5pYsy1Rst0EzQGJQxYCA/LrD+MrhCHY9cg=
Subject key identifier: 4E:35:D9:04:9F:B9:A8:F4:5E:F0:79:32:21:9C:EE:1F:55:D7:3D:0D
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 018CC794D397F3AE37EA3C229AE66D81BF63
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/TjXZBJ-5qPRe8HkyIZzuH1XXPQ0.roa
Signing time: Tue 02 Jan 2024 00:31:08 +0000
ROA not before: Tue 02 Jan 2024 00:31:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8100
IP address blocks: 109.122.42.0/24 maxlen: 24
193.93.55.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 16 Feb 2024 21:34:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:d3:97:f3:ae:37:ea:3c:22:9a:e6:6d:81:bf:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jan 2 00:31:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4e35d9049fb9a8f45ef07932219cee1f55d73d0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f9:15:bc:2f:d6:de:ca:ca:f3:e5:75:08:f8:
0d:02:99:5b:72:f8:82:3a:6a:88:ef:df:a9:52:15:
12:4d:1f:b0:da:d6:62:14:a7:03:46:57:64:ab:c7:
dc:47:e8:0e:ca:fc:a6:3e:3b:3e:e1:4b:7b:06:e6:
24:3c:dd:d7:e5:45:94:d5:da:ea:dd:fb:fd:3a:fb:
3d:d4:f5:a2:e5:a5:92:44:ac:4a:ed:1c:20:c5:c1:
8b:c4:82:6d:a2:c3:bd:88:ee:72:9d:3a:74:16:04:
d3:57:06:dc:4e:20:d5:ab:a4:0f:d5:5e:2d:0f:b0:
99:30:8c:50:44:6a:fb:09:b0:7d:b4:4e:5b:82:13:
61:12:c2:8c:5c:7c:85:08:e3:1b:6e:eb:e7:4d:13:
40:13:f7:7a:74:45:a7:c7:fd:80:49:bf:eb:35:30:
ca:ff:b6:f5:63:2b:c7:fc:ba:3c:6f:99:4e:d2:87:
e8:13:5b:40:8e:70:18:25:9a:d2:e4:45:a1:1a:b8:
e4:46:66:39:60:1a:d0:f4:84:66:21:40:3c:1a:bd:
df:e7:6e:48:38:59:6e:56:24:1f:8f:3f:3a:74:e9:
b8:11:70:0c:28:15:1b:65:2d:9c:52:d1:1c:66:0d:
17:2e:3d:4f:6f:ca:2f:db:e3:d3:b4:0c:1d:2c:6f:
c4:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:35:D9:04:9F:B9:A8:F4:5E:F0:79:32:21:9C:EE:1F:55:D7:3D:0D
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/TjXZBJ-5qPRe8HkyIZzuH1XXPQ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.42.0/24
193.93.55.0/24
Signature Algorithm: sha256WithRSAEncryption
90:59:75:f3:f3:cc:a9:9d:48:b0:8c:91:c7:30:c8:11:35:29:
e9:b4:b1:30:94:15:bc:86:df:f9:32:62:91:43:c4:87:d5:1c:
cb:5c:ef:43:7f:7d:cb:2d:38:b3:14:19:8a:e8:3d:e7:c6:71:
ad:ea:5a:93:d2:ca:3b:a3:d0:a7:a1:dc:ae:74:be:5c:a4:30:
36:e9:51:91:ae:49:80:ca:19:8c:9f:84:db:aa:2d:23:c7:90:
95:e2:b8:4e:a0:b2:50:81:29:c4:4a:16:a0:38:82:a9:d9:85:
b0:cc:d5:dd:ab:73:8c:6c:b9:af:12:ac:37:b9:08:79:0d:84:
39:db:23:3b:7f:70:b9:51:8f:de:6c:0a:36:88:ed:8b:88:d9:
dd:47:4c:55:47:97:73:e8:46:d1:b1:80:49:3d:28:c2:21:2d:
6e:73:61:a2:07:18:82:79:cb:3e:71:da:83:36:16:c5:cf:8c:
68:34:f4:75:9b:2e:00:93:04:d9:c8:b3:57:62:28:aa:44:35:
50:28:67:fd:97:a1:3d:a0:6e:0c:14:a6:83:3a:89:35:c3:a5:
b1:8e:b7:0c:f6:33:1d:b3:f0:3d:4b:39:f3:e3:d2:ce:c6:77:
64:ea:b2:6a:63:e1:2b:ae:26:89:70:f2:8a:b0:9d:a4:7b:45:
d5:36:fa:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:06 2024 by rpki-client on console-ams.rpki-client.org