Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/TuUHD2FwccCbbihru0qif28dXz4.roa
File: TuUHD2FwccCbbihru0qif28dXz4.roa (raw, json)
Hash identifier: /xovsaGkqrmEIrrZTe1tsw9BMO2H8yEKz9oJaL42twg=
Subject key identifier: 4E:E5:07:0F:61:70:71:C0:9B:6E:28:6B:BB:4A:A2:7F:6F:1D:5F:3E
Certificate issuer: /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Certificate serial: 018F3128CE2E57915DA61D37734EA4383611
Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/TuUHD2FwccCbbihru0qif28dXz4.roa
Signing time: Tue 30 Apr 2024 22:38:28 +0000
ROA not before: Tue 30 Apr 2024 22:38:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216164
IP address blocks: 2a05:4142::/32 maxlen: 32
2a05:4143::/32 maxlen: 32
2a05:4144::/32 maxlen: 32
2a11:e100::/32 maxlen: 48
Validation: Failed, certificate revoked on Sat 11 May 2024 18:33:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:31:28:ce:2e:57:91:5d:a6:1d:37:73:4e:a4:38:36:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Validity
Not Before: Apr 30 22:38:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4ee5070f617071c09b6e286bbb4aa27f6f1d5f3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:59:35:84:3a:83:bd:dc:74:81:ee:50:81:6f:
b7:ff:6b:a2:23:e4:0e:7b:bc:b2:96:c2:56:07:1b:
12:9b:a0:2e:0b:de:93:b5:40:0b:e6:37:c0:6d:0d:
24:b6:0f:d1:f3:f9:d0:11:4c:51:48:91:af:d1:6e:
c6:dd:b9:62:20:47:8f:94:2f:53:72:e5:3a:10:c0:
dd:4d:1d:3e:ce:c0:03:22:13:ae:b2:1f:35:03:8f:
3c:7a:18:1a:2e:3e:48:68:65:ae:e5:d6:b0:5a:0e:
fa:ae:b5:95:ec:d4:87:c9:e5:26:bb:ec:da:2c:98:
b7:19:a1:35:44:86:75:fe:62:88:5e:17:e2:dc:eb:
17:94:05:23:95:b8:f5:ba:d9:f2:17:2c:ea:37:c4:
4e:92:62:84:30:25:66:32:27:e3:fc:37:48:a5:dd:
e0:22:61:75:f4:77:ea:40:63:2d:66:6b:fc:49:2b:
6a:84:68:96:d4:34:42:6b:47:e3:48:90:9c:71:33:
22:76:46:71:5d:43:d4:1a:ea:d5:e7:35:ad:9b:c7:
f7:cb:df:66:a8:07:a1:a6:15:9b:14:e3:56:fc:1b:
29:07:8e:07:27:55:2e:c6:6a:59:2c:77:5d:28:59:
de:20:78:b1:65:5f:1f:95:41:79:5f:da:c8:4a:8c:
a2:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:E5:07:0F:61:70:71:C0:9B:6E:28:6B:BB:4A:A2:7F:6F:1D:5F:3E
X509v3 Authority Key Identifier:
keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/TuUHD2FwccCbbihru0qif28dXz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:4142::-2a05:4144:ffff:ffff:ffff:ffff:ffff:ffff
2a11:e100::/32
Signature Algorithm: sha256WithRSAEncryption
5a:aa:b6:de:d7:56:83:7c:7d:1a:97:1c:25:7e:c4:3b:95:f4:
03:50:77:00:cc:1b:cc:e2:5e:a0:47:35:48:1a:32:62:85:49:
9d:13:a2:09:d8:38:3a:0a:ea:38:dc:f0:c6:38:e1:e1:f1:cc:
d1:f9:95:48:4e:bd:fb:d1:bc:b5:19:91:b4:5c:37:20:27:22:
b9:89:a9:f7:4b:7d:14:59:16:ae:78:57:0e:b4:7a:3d:a0:8a:
c4:89:4e:9e:bf:e2:fc:fa:a6:01:41:29:42:75:0d:29:1e:6a:
b0:44:35:c9:3f:ba:23:4c:7f:4e:4b:d6:2d:21:c0:a9:3f:5f:
42:43:14:d4:c7:cb:18:b3:57:fa:83:2a:3e:4e:11:c6:cd:53:
de:aa:41:dc:1b:8d:e9:ff:f6:00:b0:73:ee:d2:23:00:80:1a:
d7:6d:95:f5:c4:a1:33:23:e5:e6:98:c1:e1:3e:06:34:7f:39:
2e:4a:ab:d1:7e:4d:61:7d:ca:84:c2:65:22:c5:da:25:c7:7d:
39:87:5e:2b:af:29:66:52:0e:3a:32:87:43:34:80:07:da:d7:
15:13:8b:c7:29:f6:fe:06:df:2e:c6:75:05:64:da:26:66:2d:
0c:b5:09:34:15:a1:15:1f:c8:19:fc:6c:c7:e7:8e:2f:15:4e:
22:e6:e4:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 21:14:50 2024 by rpki-client on console-fra.rpki-client.org