Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/tmd-fncAzTegMedEX4iM5bAw_Zw.roa
File: tmd-fncAzTegMedEX4iM5bAw_Zw.roa (raw, json)
Hash identifier: fZqFiCX5SF8l7BC5lOAu6gKTfQjZgroLlwDJmu1Sgxc=
Subject key identifier: B6:67:7E:7E:77:00:CD:37:A0:31:E7:44:5F:88:8C:E5:B0:30:FD:9C
Certificate issuer: /CN=ebb08be800126511cff8d25699d9ac136ed0ec8c
Certificate serial: 018770FE5301A17A010F5CC4FE2F2B602D69
Authority key identifier: EB:B0:8B:E8:00:12:65:11:CF:F8:D2:56:99:D9:AC:13:6E:D0:EC:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67CL6AASZRHP-NJWmdmsE27Q7Iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/tmd-fncAzTegMedEX4iM5bAw_Zw.roa
Signing time: Tue 11 Apr 2023 15:45:28 +0000
ROA not before: Tue 11 Apr 2023 15:45:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 54748
IP address blocks: 134.0.71.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:70:fe:53:01:a1:7a:01:0f:5c:c4:fe:2f:2b:60:2d:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebb08be800126511cff8d25699d9ac136ed0ec8c
Validity
Not Before: Apr 11 15:45:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b6677e7e7700cd37a031e7445f888ce5b030fd9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:eb:b9:69:01:cc:74:35:a2:9d:3e:ca:c4:c4:
0b:96:10:1e:1e:1d:86:d0:ef:bc:3a:22:95:4e:c9:
84:fc:53:eb:84:e5:d0:80:79:26:34:5f:21:4f:17:
48:45:63:86:9d:47:af:ba:d7:d5:e5:be:bb:c3:49:
84:28:d1:50:a9:c0:05:df:9b:e8:01:65:be:ea:3f:
6f:34:45:fa:cd:b5:3b:02:e3:4c:a6:98:a1:79:dd:
c0:4c:97:3e:44:69:1e:24:05:9b:7b:64:04:cd:de:
ca:c9:21:c1:ce:e4:b3:f2:58:04:44:93:34:46:bb:
46:5d:0c:4b:4c:86:85:3a:9f:72:6c:f6:97:4d:81:
5e:3a:8b:54:ab:d7:90:a6:88:9b:61:b5:b4:6e:0c:
23:c7:13:40:a9:79:45:6a:c9:68:8d:ed:6b:7e:92:
93:51:df:50:d1:c7:3d:a8:31:49:7f:b3:d3:5e:ab:
a4:4a:34:cb:86:ea:7d:4c:4d:26:36:82:68:05:64:
0e:c1:7f:e1:bd:3f:c9:84:66:9f:dc:97:59:fc:14:
a1:9d:f2:d3:ad:5a:c7:07:ca:fb:5f:b5:cb:69:db:
3f:74:9c:45:2a:8f:70:6d:88:91:e4:6b:b3:d5:92:
5d:8c:62:4f:76:50:c6:ab:a1:dd:75:fd:6f:18:1f:
d8:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:67:7E:7E:77:00:CD:37:A0:31:E7:44:5F:88:8C:E5:B0:30:FD:9C
X509v3 Authority Key Identifier:
keyid:EB:B0:8B:E8:00:12:65:11:CF:F8:D2:56:99:D9:AC:13:6E:D0:EC:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67CL6AASZRHP-NJWmdmsE27Q7Iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/tmd-fncAzTegMedEX4iM5bAw_Zw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.0.71.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:54:56:2e:02:dd:70:7b:c9:38:e4:df:fc:c8:78:98:12:0d:
8e:b5:32:9f:42:67:3a:f2:98:bd:42:65:36:72:63:ce:06:71:
b7:94:18:fb:81:34:93:63:ee:38:ff:d6:1f:c3:7a:7b:1b:a7:
3f:cf:b0:54:55:67:db:c9:13:eb:70:1f:09:ec:c9:50:5e:82:
22:8c:9e:85:60:dc:0c:c5:fd:f4:5d:4f:ab:fe:e9:fa:a1:c2:
17:e5:af:34:fa:49:9e:d7:7c:fb:d7:53:de:07:56:39:5f:44:
c0:4a:18:d9:c6:1d:43:d0:fb:d4:57:0d:4b:37:19:d7:98:1f:
9e:02:fa:37:0f:e6:e7:68:c6:c5:af:73:89:50:f0:7c:56:31:
5c:8a:a8:41:8d:ea:2d:1d:19:0f:2b:0d:2d:b7:15:87:38:f2:
b3:59:8b:99:1e:70:88:69:d7:f1:ee:e9:43:04:8c:c5:2f:5b:
6d:c1:d1:b2:07:8e:22:51:64:8b:64:01:c4:aa:cf:55:67:9a:
8a:a9:31:f8:40:d8:cb:65:b6:52:7d:e3:78:51:8e:06:54:b8:
e1:f3:ba:b4:48:87:7a:28:fe:c8:ea:23:4d:ff:c5:d3:8d:0c:
07:5b:08:94:f7:ce:62:8c:81:46:04:82:c8:6a:dc:ca:6e:a1:
23:24:dd:7e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYdw/lMBoXoBD1zE/i8rYC1pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViYjA4YmU4MDAxMjY1MTFjZmY4ZDI1Njk5ZDlhYzEzNmVk
MGVjOGMwHhcNMjMwNDExMTU0NTI4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNjY3N2U3ZTc3MDBjZDM3YTAzMWU3NDQ1Zjg4OGNlNWIwMzBmZDljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmeu5aQHMdDWinT7KxMQLlhAeHh2G
0O+8OiKVTsmE/FPrhOXQgHkmNF8hTxdIRWOGnUevutfV5b67w0mEKNFQqcAF35vo
AWW+6j9vNEX6zbU7AuNMppihed3ATJc+RGkeJAWbe2QEzd7KySHBzuSz8lgERJM0
RrtGXQxLTIaFOp9ybPaXTYFeOotUq9eQpoibYbW0bgwjxxNAqXlFasloje1rfpKT
Ud9Q0cc9qDFJf7PTXqukSjTLhup9TE0mNoJoBWQOwX/hvT/JhGaf3JdZ/BShnfLT
rVrHB8r7X7XLads/dJxFKo9wbYiR5Guz1ZJdjGJPdlDGq6Hddf1vGB/YFwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLZnfn53AM03oDHnRF+IjOWwMP2cMB8GA1UdIwQY
MBaAFOuwi+gAEmURz/jSVpnZrBNu0OyMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjdDTDZBQVNaUkhQLU5KV21kbXNFMjdRN0l3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS82YzE0MmEtMmI1ZS00MTZiLTk0ZGUt
YmE5ZDUxZmU5ZTJiLzEvdG1kLWZuY0F6VGVnTWVkRVg0aU01YkF3X1p3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS82YzE0MmEtMmI1ZS00MTZiLTk0ZGUtYmE5ZDUxZmU5ZTJi
LzEvNjdDTDZBQVNaUkhQLU5KV21kbXNFMjdRN0l3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAhgBHMA0G
CSqGSIb3DQEBCwUAA4IBAQCLVFYuAt1we8k45N/8yHiYEg2OtTKfQmc68pi9QmU2
cmPOBnG3lBj7gTSTY+44/9Yfw3p7G6c/z7BUVWfbyRPrcB8J7MlQXoIijJ6FYNwM
xf30XU+r/un6ocIX5a80+kme13z711PeB1Y5X0TAShjZxh1D0PvUVw1LNxnXmB+e
Avo3D+bnaMbFr3OJUPB8VjFciqhBjeotHRkPKw0ttxWHOPKzWYuZHnCIadfx7ulD
BIzFL1ttwdGyB44iUWSLZAHEqs9VZ5qKqTH4QNjLZbZSfeN4UY4GVLjh87q0SId6
KP7I6iNN/8XTjQwHWwiU985ijIFGBILIatzKbqEjJN1+
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:42 2024 by rpki-client on console-fra.rpki-client.org