Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/TLH_NcXwmSgA5zFETqqWNQn_eqk.roa
File: TLH_NcXwmSgA5zFETqqWNQn_eqk.roa (raw, json)
Hash identifier: 2ELYcb30d9S3c9YyndNwqgtuN7eQh3Go/txkbRC5PvM=
Subject key identifier: 4C:B1:FF:35:C5:F0:99:28:00:E7:31:44:4E:AA:96:35:09:FF:7A:A9
Certificate issuer: /CN=994efc4ce36fc443dc5816274eac1d7693029081
Certificate serial: 0185718C1FCE6266ED8D7C066FEE99C7EE9A
Authority key identifier: 99:4E:FC:4C:E3:6F:C4:43:DC:58:16:27:4E:AC:1D:76:93:02:90:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mU78TONvxEPcWBYnTqwddpMCkIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/TLH_NcXwmSgA5zFETqqWNQn_eqk.roa
Signing time: Mon 02 Jan 2023 08:14:46 +0000
ROA not before: Mon 02 Jan 2023 08:14:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49142
IP address blocks: 185.139.216.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:8c:1f:ce:62:66:ed:8d:7c:06:6f:ee:99:c7:ee:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=994efc4ce36fc443dc5816274eac1d7693029081
Validity
Not Before: Jan 2 08:14:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4cb1ff35c5f0992800e731444eaa963509ff7aa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:9d:c5:84:22:0c:37:3f:15:60:14:3e:2b:78:
f1:18:3f:1f:16:e4:29:b8:e8:e4:a5:fb:fd:eb:8b:
92:e4:17:c2:3b:d5:0b:8f:3d:52:74:6a:b4:29:1e:
00:c5:62:18:14:97:53:11:41:45:f6:c8:43:7c:c6:
98:31:13:4c:67:f6:13:51:09:cc:2f:79:0c:dd:22:
75:83:be:f6:6e:6a:4b:cc:76:14:c1:72:53:50:f5:
0e:3b:fd:a7:e0:f9:75:5a:98:06:d6:e1:f6:c6:16:
65:2c:1c:1b:05:1d:81:e7:eb:0f:ce:4e:f3:24:5b:
95:70:3a:ec:57:c0:62:0f:dc:46:99:b6:cf:bd:a6:
87:37:24:bc:e6:7c:34:e9:70:3b:3b:7e:24:f9:93:
62:aa:12:90:49:87:54:d4:09:2e:dc:24:ce:f6:48:
00:d4:09:01:06:b5:66:b4:80:18:a3:24:f6:e3:a9:
42:20:6a:55:74:4b:ba:1f:6f:e8:28:c5:97:1f:b9:
9c:fc:d8:7f:03:68:55:c6:ed:02:33:66:f3:8b:19:
6d:65:b5:58:c1:a2:a7:f5:cb:12:6f:9f:82:c2:30:
78:77:50:9f:f0:4c:74:91:05:54:13:71:df:8c:44:
d5:4f:13:e0:23:4d:a5:fe:57:29:b1:34:59:b4:bc:
b0:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:B1:FF:35:C5:F0:99:28:00:E7:31:44:4E:AA:96:35:09:FF:7A:A9
X509v3 Authority Key Identifier:
keyid:99:4E:FC:4C:E3:6F:C4:43:DC:58:16:27:4E:AC:1D:76:93:02:90:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mU78TONvxEPcWBYnTqwddpMCkIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/TLH_NcXwmSgA5zFETqqWNQn_eqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/mU78TONvxEPcWBYnTqwddpMCkIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.139.216.0/23
Signature Algorithm: sha256WithRSAEncryption
54:7a:d7:03:6b:1a:56:51:4e:ac:34:06:7f:c9:0f:3e:1f:e2:
5f:3f:4c:2b:06:ad:19:5b:6a:c8:df:6b:58:9e:24:af:fd:11:
49:02:d5:01:7f:9c:8f:d9:f5:f4:c1:5a:e6:f6:b9:86:56:6b:
a2:4e:a0:e3:b9:bd:7e:14:b6:21:be:62:01:84:79:84:da:11:
55:8f:dd:29:38:f9:8d:93:c2:20:e6:d5:89:f3:19:a4:d8:33:
70:74:c1:b9:3e:de:48:d4:35:12:80:b8:22:b2:56:88:88:6c:
60:ed:7e:bc:63:2e:b5:0c:f7:60:93:32:0a:96:3b:47:1b:c8:
7d:c7:6f:a2:86:93:5c:77:13:f6:8e:57:8b:bf:ca:69:b5:6a:
a6:79:20:5d:d4:51:e2:28:fb:4d:1b:45:83:a0:d8:c6:56:1c:
d5:6c:65:33:01:c0:ed:97:0f:13:6a:99:fb:97:e6:ee:93:da:
3d:9b:2b:f8:74:4d:5e:1c:77:94:4f:fc:e6:08:62:99:80:b5:
4a:88:a9:f4:22:4e:0f:47:20:d5:eb:b8:71:05:4e:63:c3:b5:
2f:c9:57:eb:84:4c:8f:db:1e:1e:c9:aa:46:8f:20:f4:e3:20:
c1:8a:86:8d:f5:35:55:3b:09:bc:a5:83:67:f9:bc:c3:a1:43:
e3:58:22:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:35 2024 by rpki-client on console-ams.rpki-client.org