Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/TTdcKCDFmWDKVWvg_kxg63BywsA.roa
File: TTdcKCDFmWDKVWvg_kxg63BywsA.roa (raw, json)
Hash identifier: FdFyjUe0KjAjsTtnTDhJodtOM8qtsBF72Xd4lH7Oneg=
Subject key identifier: 4D:37:5C:28:20:C5:99:60:CA:55:6B:E0:FE:4C:60:EB:70:72:C2:C0
Certificate issuer: /CN=d4c3b12c8d635190ec928437bbd6cb0e8c38f9a9
Certificate serial: 0185708C92BDA7EAB109B839DACF19B1A3A4
Authority key identifier: D4:C3:B1:2C:8D:63:51:90:EC:92:84:37:BB:D6:CB:0E:8C:38:F9:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1MOxLI1jUZDskoQ3u9bLDow4-ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/TTdcKCDFmWDKVWvg_kxg63BywsA.roa
Signing time: Mon 02 Jan 2023 03:35:38 +0000
ROA not before: Mon 02 Jan 2023 03:35:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48918
IP address blocks: 80.66.96.0/20 maxlen: 20
185.198.200.0/22 maxlen: 24
2a02:340::/32 maxlen: 32
2a0a:8ec0::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 24 Oct 2023 06:21:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:92:bd:a7:ea:b1:09:b8:39:da:cf:19:b1:a3:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4c3b12c8d635190ec928437bbd6cb0e8c38f9a9
Validity
Not Before: Jan 2 03:35:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4d375c2820c59960ca556be0fe4c60eb7072c2c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:c6:4b:8c:23:c6:97:36:f7:88:ce:ce:1d:e9:
aa:e0:43:af:aa:f0:3f:82:e8:f5:c7:a2:84:47:9e:
bf:1d:38:54:19:a1:ee:24:8f:9b:56:5e:d4:e6:29:
33:32:b1:92:a2:4e:9c:e8:0c:8f:cd:25:31:fa:bf:
b2:e4:c6:c9:94:b0:9c:79:f3:ae:ae:a5:e8:88:55:
08:95:8a:2b:3c:ac:ec:f5:21:64:ab:98:10:12:a0:
93:dc:6b:a4:95:8c:0a:24:40:8d:29:c9:b8:59:18:
09:c8:21:26:5a:1c:c2:c0:36:b7:a9:de:cc:0f:d8:
b4:9c:d0:06:dd:c4:7d:71:3f:fd:31:25:3d:b5:c6:
97:ee:26:2c:14:d3:74:b6:e1:4a:ef:36:6f:f5:c6:
84:36:2a:2e:f3:d4:21:54:a3:fd:ca:10:e4:bd:b2:
d0:61:8c:26:cd:22:a2:3a:55:ce:63:fe:49:58:85:
f4:4a:1f:62:43:76:f3:3f:8a:be:c0:2a:04:71:8a:
0b:6b:c1:5a:ef:90:41:49:f2:e5:65:d0:04:5b:a6:
32:27:77:b6:95:03:d6:fd:57:ab:11:8f:c4:d5:04:
bb:c8:85:25:df:8f:9c:c9:7a:a7:5c:83:08:1b:af:
5f:78:a1:62:f3:f4:d2:b8:09:8d:f1:2f:99:2a:81:
89:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:37:5C:28:20:C5:99:60:CA:55:6B:E0:FE:4C:60:EB:70:72:C2:C0
X509v3 Authority Key Identifier:
keyid:D4:C3:B1:2C:8D:63:51:90:EC:92:84:37:BB:D6:CB:0E:8C:38:F9:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1MOxLI1jUZDskoQ3u9bLDow4-ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/TTdcKCDFmWDKVWvg_kxg63BywsA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.66.96.0/20
185.198.200.0/22
IPv6:
2a02:340::/32
2a0a:8ec0::/29
Signature Algorithm: sha256WithRSAEncryption
c4:6c:f7:9d:c2:ab:24:6e:22:22:2f:4f:b9:55:2b:6b:71:7d:
36:43:4f:d0:63:17:20:d7:72:7c:23:c1:62:47:ce:99:4d:9e:
a0:11:dc:a6:27:90:ab:94:d0:98:93:a2:b1:62:ce:e0:5a:47:
05:92:d2:b9:d2:46:8e:73:3f:32:97:f2:11:a3:d7:f2:2d:3d:
3d:db:bf:21:8f:81:0d:1d:91:71:bb:77:7d:3c:5e:90:73:38:
81:ed:a9:5c:55:f4:01:b6:96:fa:19:a9:b4:e6:bd:25:8f:a7:
b0:a7:ad:b8:97:c1:40:ef:59:d9:5e:08:cd:b7:2a:49:bd:63:
bd:25:8c:a1:34:9d:c7:38:76:75:1c:64:0a:f7:d4:68:49:cf:
1b:9f:67:6a:80:c9:45:9b:9f:5a:c3:b5:48:c2:6e:d2:b9:9a:
f8:82:03:45:9a:3c:47:e3:e4:ce:f1:83:d5:54:dc:10:da:f6:
49:67:28:80:89:c9:6a:5b:84:4b:9e:f9:4a:f7:15:ec:0d:de:
df:9d:2f:03:86:81:ed:f3:e0:d8:a5:f5:d2:d2:b6:b1:4a:3f:
14:58:ca:61:6d:12:0d:f2:be:76:e8:8a:78:0a:9c:00:37:51:
54:24:94:8b:5d:9f:47:02:cb:74:ec:17:35:98:d1:b3:9b:51:
43:0a:eb:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:07 2024 by rpki-client on console-ams.rpki-client.org