Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/TblatSemsb17cnS4l0FvU58m0kY.roa
File: TblatSemsb17cnS4l0FvU58m0kY.roa (raw, json)
Hash identifier: 581lG4mp3sX7A7OAr3RQnlhcmVZJcKsMJLchhcl48Js=
Subject key identifier: 4D:B9:5A:B5:27:A6:B1:BD:7B:72:74:B8:97:41:6F:53:9F:26:D2:46
Certificate issuer: /CN=99fee7cbd8e78d1f14a453a04b916f7c1581d204
Certificate serial: 018CC86F50A21A3890C1BA9F1A837AE72715
Authority key identifier: 99:FE:E7:CB:D8:E7:8D:1F:14:A4:53:A0:4B:91:6F:7C:15:81:D2:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/TblatSemsb17cnS4l0FvU58m0kY.roa
Signing time: Tue 02 Jan 2024 04:29:47 +0000
ROA not before: Tue 02 Jan 2024 04:29:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204841
IP address blocks: 2a0e:3247:8011::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 12 Jan 2024 12:52:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:50:a2:1a:38:90:c1:ba:9f:1a:83:7a:e7:27:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99fee7cbd8e78d1f14a453a04b916f7c1581d204
Validity
Not Before: Jan 2 04:29:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4db95ab527a6b1bd7b7274b897416f539f26d246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:33:30:a6:c0:f7:0e:f0:d8:3c:a3:91:bd:b5:
f1:00:b5:1f:68:44:55:51:99:43:43:52:f4:64:ca:
85:0c:f6:3d:85:a5:6a:78:09:67:97:e6:71:85:32:
78:f5:45:4a:e6:3e:8f:cc:d8:37:fe:42:e6:ce:c4:
b3:43:a7:98:a0:b5:ff:ec:f3:9e:40:31:df:58:6e:
1e:38:23:73:eb:31:96:65:0d:35:e6:d1:f7:c8:c1:
79:84:1a:0f:c9:b9:ad:21:ad:d4:dd:4c:0e:17:13:
4e:a2:dc:f1:62:48:85:2c:d9:e8:92:7a:a7:43:ab:
45:a7:10:c8:ee:fc:7e:09:f8:de:12:34:e2:6a:8f:
50:20:a9:cf:0f:2f:2b:52:f2:0b:c4:a3:d0:6e:cd:
64:c3:22:21:63:aa:d0:b1:3d:76:65:d7:0f:e8:bd:
d9:52:40:5e:48:91:04:14:65:41:26:ca:26:44:5a:
71:35:24:6e:98:30:43:a1:9b:f1:d0:49:58:d7:d3:
c5:78:0f:cb:70:5f:06:2c:3e:fb:01:2b:88:db:69:
e9:f8:51:34:e4:5c:76:19:82:b9:5a:e4:ad:c6:7a:
fa:93:82:e9:85:75:1d:b2:bd:21:e8:66:49:4e:8e:
80:58:65:f2:ff:0d:e1:45:af:aa:4d:9b:f8:e1:3f:
61:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:B9:5A:B5:27:A6:B1:BD:7B:72:74:B8:97:41:6F:53:9F:26:D2:46
X509v3 Authority Key Identifier:
keyid:99:FE:E7:CB:D8:E7:8D:1F:14:A4:53:A0:4B:91:6F:7C:15:81:D2:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/TblatSemsb17cnS4l0FvU58m0kY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:3247:8011::/48
Signature Algorithm: sha256WithRSAEncryption
2e:65:f1:65:fa:6c:c2:43:15:80:75:7b:3c:e0:96:11:84:e8:
a1:aa:43:a0:75:fb:a5:bb:37:d2:81:cc:c9:2f:23:ce:40:fd:
89:b9:a8:a0:0a:41:da:4a:49:c6:3a:47:2c:ba:df:5a:ca:4e:
89:82:0b:c6:01:84:50:51:e1:18:26:54:bd:83:da:51:b1:44:
ac:94:16:f3:31:b9:d6:72:3a:13:5a:55:93:1f:6e:5f:fd:d6:
07:55:84:41:8b:88:b1:10:d9:09:50:17:d3:d4:37:e1:33:4d:
90:3e:51:d0:53:98:2e:37:f4:fe:10:75:00:53:69:dd:b0:72:
f9:ad:a1:6d:8b:47:da:2a:5c:b5:ca:5f:43:f9:87:d3:61:bc:
bc:81:3b:1c:23:3b:4c:fb:ac:03:34:e6:3c:a3:cc:ed:59:c0:
7a:29:1e:8c:f5:66:e5:fa:b2:5a:f8:58:e4:40:da:c5:7d:dd:
1b:df:60:89:0c:b9:7d:e4:81:4e:31:84:83:75:47:16:62:4d:
4a:67:7b:ae:47:3d:6f:2d:4e:cb:5a:8e:6e:9c:14:96:11:18:
2c:da:8e:1c:95:6c:c0:83:ae:c3:14:c5:ce:2c:c2:4f:82:b8:
ed:eb:23:d9:88:d0:cd:58:d1:39:4e:02:ab:1d:ef:07:c8:77:
ac:ed:e5:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 12 17:10:08 2024 by rpki-client on console-fra.rpki-client.org