Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/TmrKNhvYuPd8mJ0_wCZGBGi0aag.roa
File: TmrKNhvYuPd8mJ0_wCZGBGi0aag.roa (raw, json)
Hash identifier: pRCLWtip/iyI2E3M5sGpHO2UeXUgGf/IJVWdYIXLVws=
Subject key identifier: 4E:6A:CA:36:1B:D8:B8:F7:7C:98:9D:3F:C0:26:46:04:68:B4:69:A8
Certificate issuer: /CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Certificate serial: 01856EAA26DD480852FF8107CD134A4CF2A9
Authority key identifier: 28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/TmrKNhvYuPd8mJ0_wCZGBGi0aag.roa
Signing time: Sun 01 Jan 2023 18:48:42 +0000
ROA not before: Sun 01 Jan 2023 18:48:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199366
IP address blocks: 45.139.199.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:aa:26:dd:48:08:52:ff:81:07:cd:13:4a:4c:f2:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Validity
Not Before: Jan 1 18:48:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4e6aca361bd8b8f77c989d3fc026460468b469a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d5:5e:2f:11:ee:ef:59:a5:4b:64:28:da:00:
0e:bc:88:cf:e7:60:e9:c9:75:50:37:ca:97:62:1e:
f4:af:00:3b:04:ea:ee:59:bd:b7:af:4f:57:06:68:
2a:da:f8:2d:a5:7b:2f:db:22:49:04:09:9e:a2:98:
15:fe:99:fa:a8:6c:6e:c6:d4:37:7f:14:f6:ae:08:
c8:3c:b6:a5:f9:de:c4:f5:14:05:83:24:bb:7f:48:
25:7c:c6:1b:cf:7e:2f:d4:46:41:be:e0:03:d3:66:
0c:65:67:83:3e:80:ee:d3:da:b4:99:5a:67:aa:62:
8d:e6:b8:23:5f:f2:05:b0:e0:68:53:12:86:b8:07:
5f:92:f6:ea:60:21:92:6f:29:21:43:08:0a:06:6c:
9c:59:dd:83:bd:23:4c:ee:72:dc:99:d0:89:b2:49:
66:e7:09:66:31:68:76:6b:50:0d:da:62:6f:b3:03:
9a:37:0b:24:97:a6:e8:92:71:7d:f2:be:93:4f:d2:
c9:20:a6:4e:9c:4c:a8:7f:95:ac:49:83:62:8a:9c:
fb:3b:2f:6b:ba:78:ee:c9:86:81:5a:fb:7e:40:a9:
49:9b:32:00:74:6d:4e:f2:fa:8f:4d:34:e3:ae:d0:
d5:f5:36:a5:df:ad:17:c2:87:73:67:83:6c:c0:76:
cf:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:6A:CA:36:1B:D8:B8:F7:7C:98:9D:3F:C0:26:46:04:68:B4:69:A8
X509v3 Authority Key Identifier:
keyid:28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/TmrKNhvYuPd8mJ0_wCZGBGi0aag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.199.0/24
Signature Algorithm: sha256WithRSAEncryption
39:9d:a4:bb:e3:b2:98:5a:5a:90:91:b4:1e:a3:fc:99:51:bd:
eb:71:9e:aa:5c:b7:da:74:6f:a8:ca:09:95:d7:71:6c:4b:c7:
a3:0d:3e:c0:2b:2d:26:b8:a0:60:1e:1e:c3:f2:a4:05:eb:45:
6e:db:20:9d:ad:97:d0:1d:f8:d9:59:43:89:70:ce:0a:b8:95:
ba:54:04:b9:41:6e:70:a5:99:a4:d2:48:17:c4:5f:33:fb:90:
3d:2d:a3:43:74:29:75:58:a9:0b:4a:a2:19:8d:9b:ae:48:df:
8e:c0:36:21:7d:79:44:b5:c0:8d:40:e1:93:d9:74:ba:90:c1:
66:e1:22:31:ab:f6:2b:a3:44:ca:70:cf:24:0f:39:4e:aa:f0:
89:f8:d9:18:b5:9e:c3:10:ba:2b:b0:50:1d:e2:ea:fb:cd:5e:
46:6a:0f:cb:5e:81:eb:1c:79:bf:10:0b:2f:4b:26:43:05:7e:
94:81:ab:35:6b:66:ca:c9:b4:29:8b:c9:2f:91:82:17:dd:78:
84:8c:5d:6f:de:44:54:63:40:72:ff:6a:95:4d:fd:a1:7c:94:
31:80:b7:59:30:e8:d9:91:62:aa:a0:50:f6:e9:be:44:e9:22:
44:b3:f3:cf:5a:22:0f:ee:6e:88:db:e6:25:c8:b6:26:bc:a0:
7f:b3:d5:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:15 2023 by rpki-client on console-ams.rpki-client.org