Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/tvnmnCl9_OjOsOGAUQqIN6a7UiA.roa
File: tvnmnCl9_OjOsOGAUQqIN6a7UiA.roa (raw, json)
Hash identifier: 9t4ee7ZdbXRn5GQFi9RejzNpkdeBQ+ixXEh4bTH8d7o=
Subject key identifier: B6:F9:E6:9C:29:7D:FC:E8:CE:B0:E1:80:51:0A:88:37:A6:BB:52:20
Certificate issuer: /CN=3cde2470c8563949487a3e78743c544c99ec8a64
Certificate serial: 018E2C964813822124E5A6E4062536DC0353
Authority key identifier: 3C:DE:24:70:C8:56:39:49:48:7A:3E:78:74:3C:54:4C:99:EC:8A:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PN4kcMhWOUlIej54dDxUTJnsimQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/tvnmnCl9_OjOsOGAUQqIN6a7UiA.roa
Signing time: Mon 11 Mar 2024 08:17:10 +0000
ROA not before: Mon 11 Mar 2024 08:17:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19905
IP address blocks: 86.111.192.0/24 maxlen: 24
86.111.193.0/24 maxlen: 24
86.111.194.0/24 maxlen: 24
86.111.195.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 11 Mar 2024 11:15:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:2c:96:48:13:82:21:24:e5:a6:e4:06:25:36:dc:03:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cde2470c8563949487a3e78743c544c99ec8a64
Validity
Not Before: Mar 11 08:17:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b6f9e69c297dfce8ceb0e180510a8837a6bb5220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:92:c3:a9:f0:31:c6:ef:eb:3b:19:ae:df:77:
67:c9:f5:63:e8:93:98:83:1c:46:71:e2:b3:17:0a:
44:59:50:9d:ad:2f:59:1b:34:19:39:6e:76:10:28:
b5:90:b8:20:ac:96:c7:75:19:9b:bd:b3:6a:5a:65:
c1:04:67:d3:ba:2c:ea:cd:d7:85:85:28:d8:11:e3:
c0:df:3f:00:13:08:b0:a1:c1:7f:9a:bb:c9:bc:85:
eb:eb:53:a6:f2:65:6e:36:97:3c:5e:17:46:b3:09:
0b:55:8b:5c:f9:5a:34:10:ed:69:13:9b:06:af:d2:
d0:1b:3e:7f:f4:fa:cc:d1:fb:7f:b2:27:12:22:ba:
33:4e:2f:2c:02:8b:1d:86:e2:81:9f:f6:22:72:3c:
e4:96:4e:91:e5:ba:e5:5c:b9:18:3c:6d:8d:10:d9:
23:33:a8:da:ee:14:c7:bd:c9:49:48:6c:a0:89:a7:
80:f7:08:b2:d1:5f:2d:72:62:39:ae:bf:77:cf:6b:
21:b8:3d:34:71:b6:5d:f8:9c:b0:99:62:28:9f:44:
0a:20:d1:2a:15:e5:1b:ea:b2:1f:76:09:9f:aa:e5:
38:bf:be:c6:ee:e0:1d:0b:23:e0:8c:43:ee:5d:f4:
8f:0f:dd:f1:b4:5a:6c:c2:be:b4:6d:04:aa:f4:cc:
39:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:F9:E6:9C:29:7D:FC:E8:CE:B0:E1:80:51:0A:88:37:A6:BB:52:20
X509v3 Authority Key Identifier:
keyid:3C:DE:24:70:C8:56:39:49:48:7A:3E:78:74:3C:54:4C:99:EC:8A:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PN4kcMhWOUlIej54dDxUTJnsimQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/tvnmnCl9_OjOsOGAUQqIN6a7UiA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.111.192.0/22
Signature Algorithm: sha256WithRSAEncryption
44:b9:b4:c5:20:8d:b0:7f:3a:44:6a:6a:70:86:32:39:a1:99:
29:56:46:95:fa:52:77:cf:a2:e9:7a:11:f2:9e:38:1c:e8:20:
03:3f:7c:b6:a9:bb:3a:11:69:20:01:2b:c2:73:db:41:b8:8f:
ee:7b:4e:5e:f2:9a:88:14:f1:1e:e2:5c:e5:31:09:4b:59:42:
c4:28:32:fe:c8:2a:5a:03:e6:2b:ca:64:4f:57:6d:ad:c9:63:
ed:7a:23:31:8c:9a:26:74:92:15:f1:64:6d:d8:1a:ff:d1:60:
44:d8:40:81:86:aa:47:02:85:fc:3a:8e:fd:0e:17:11:2c:ea:
03:1d:59:e7:ad:66:e5:f3:55:81:16:a5:02:55:e3:a2:04:31:
b2:db:40:e6:0a:7b:0e:db:4d:0e:b2:46:85:89:ec:7d:6f:ef:
0f:5b:de:5c:57:9a:b3:4d:f6:2b:09:0b:a5:66:16:c3:03:ff:
71:43:c3:36:c8:c6:84:c2:6c:ec:09:c0:9d:ee:e9:e1:07:9c:
64:40:0c:87:5b:86:33:c0:7d:44:a9:94:9f:db:ee:cb:8b:8b:
ce:75:86:fe:4f:a3:fd:88:16:c4:67:b4:1e:52:1b:06:ee:94:
20:e0:64:bb:37:4f:74:f3:e8:f8:5b:68:ec:4d:75:05:a6:2d:
61:2c:33:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:30 2024 by rpki-client on console-ams.rpki-client.org