Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/bf1283-8d1b-4b1a-b9d9-0e195ec65b72/1/TnWPANxeg_-hc4pTxEQRXbrMTu8.roa
File: TnWPANxeg_-hc4pTxEQRXbrMTu8.roa (raw, json)
Hash identifier: K1bc8KLrDswojT2vtu40TCe+ZFkmn/SUflAWOhq432Y=
Subject key identifier: 4E:75:8F:00:DC:5E:83:FF:A1:73:8A:53:C4:44:11:5D:BA:CC:4E:EF
Certificate issuer: /CN=b415beef9ea1dd4772c2ee952761d655d9865026
Certificate serial: 018CC9BC2823545670452A45204E44AF1167
Authority key identifier: B4:15:BE:EF:9E:A1:DD:47:72:C2:EE:95:27:61:D6:55:D9:86:50:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tBW-756h3Udywu6VJ2HWVdmGUCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/bf1283-8d1b-4b1a-b9d9-0e195ec65b72/1/TnWPANxeg_-hc4pTxEQRXbrMTu8.roa
Signing time: Tue 02 Jan 2024 10:33:20 +0000
ROA not before: Tue 02 Jan 2024 10:33:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57809
IP address blocks: 185.127.4.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 27 Feb 2024 09:56:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:28:23:54:56:70:45:2a:45:20:4e:44:af:11:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b415beef9ea1dd4772c2ee952761d655d9865026
Validity
Not Before: Jan 2 10:33:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4e758f00dc5e83ffa1738a53c444115dbacc4eef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ff:c0:85:22:8c:f8:2a:13:71:de:39:34:20:
ab:e0:54:72:8f:bd:7b:85:75:50:87:c7:79:aa:6f:
de:30:b9:d1:2a:5c:88:2f:55:d4:73:ad:f4:9e:41:
6d:2f:05:9f:b1:0b:15:09:1c:c9:4a:54:4c:41:0b:
4e:e5:e1:cd:99:60:91:1b:c6:37:d2:68:60:eb:ff:
48:65:c0:23:b5:56:1d:68:57:51:83:bc:2e:e1:c8:
20:d4:1a:c2:3c:ef:33:97:e6:59:ba:2f:83:dc:51:
b1:62:69:dc:a3:2d:8e:71:83:25:95:ce:8f:a8:4a:
b7:8b:20:8c:fc:84:73:ad:6a:77:1a:34:0a:a1:a5:
dc:b7:cf:1d:09:b9:a4:d9:6e:2a:ba:26:3b:8f:4d:
52:80:c6:28:6e:68:38:87:6d:32:59:88:0a:99:54:
dc:28:25:fd:b0:cb:f1:1d:a3:64:65:25:5b:0c:c6:
d0:3e:66:97:85:03:f1:e2:5d:f5:bf:a5:78:69:27:
1f:5d:7f:3e:fd:d9:d9:3e:bf:4e:62:4f:4b:7c:c7:
fd:b3:63:cf:17:ca:9a:10:64:f5:5d:60:16:98:dc:
2a:0c:9d:b1:c0:c5:14:fd:53:06:c5:ab:0c:fe:d4:
da:1e:b8:80:4b:0d:25:9c:d6:40:56:01:f9:8a:a7:
94:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:75:8F:00:DC:5E:83:FF:A1:73:8A:53:C4:44:11:5D:BA:CC:4E:EF
X509v3 Authority Key Identifier:
keyid:B4:15:BE:EF:9E:A1:DD:47:72:C2:EE:95:27:61:D6:55:D9:86:50:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tBW-756h3Udywu6VJ2HWVdmGUCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bf1283-8d1b-4b1a-b9d9-0e195ec65b72/1/TnWPANxeg_-hc4pTxEQRXbrMTu8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bf1283-8d1b-4b1a-b9d9-0e195ec65b72/1/tBW-756h3Udywu6VJ2HWVdmGUCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.127.4.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:6c:9a:a8:cf:5d:62:a6:56:55:88:1d:a1:24:f2:7e:3a:20:
a8:8d:32:c7:4d:b0:a1:60:0b:30:24:d6:c7:da:2c:92:55:72:
b3:88:3e:53:b4:19:bd:c3:02:54:a5:78:23:e5:1b:4a:4d:62:
9d:d5:bd:54:a7:41:4c:da:6c:11:4f:7a:d5:fd:25:8a:35:20:
7e:77:cd:d0:d0:93:a3:ee:47:13:61:09:9f:f3:4d:af:de:cc:
20:1c:4a:73:62:87:8d:39:63:97:1b:cf:4e:66:ba:e8:72:9b:
b2:b5:8a:07:f4:38:aa:5d:dc:20:e9:9f:c8:23:b8:ca:9c:7d:
fd:67:3e:42:02:49:f4:c1:3b:aa:b6:c1:fd:10:e6:c0:37:98:
78:20:e9:28:54:fd:51:53:ed:b8:c7:f2:13:79:10:71:a1:f0:
a4:b0:96:38:ef:c0:4a:7f:0c:13:02:7e:9e:ba:2f:31:63:b6:
10:c2:e2:03:0c:83:39:ac:66:28:12:02:65:c2:96:99:b4:46:
e0:95:0e:56:7d:d4:e5:da:ae:d5:2b:c1:7e:ab:89:91:33:7f:
cb:8f:32:f1:8a:4c:a9:87:d9:84:e9:7b:f6:ed:35:b6:57:c2:
2a:de:c6:e3:ec:da:3c:c2:f5:24:64:a2:d8:34:a9:e0:c3:c3:
ac:a1:e1:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:44 2024 by rpki-client on console-fra.rpki-client.org