Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/TpHrdcftghHkq3xQOifzpsAE3dw.roa
File: TpHrdcftghHkq3xQOifzpsAE3dw.roa (raw, json)
Hash identifier: yf9o6QqWakntXFQ63QhQJWDNA8OTs8UwXMY/antuzgU=
Subject key identifier: 4E:91:EB:75:C7:ED:82:11:E4:AB:7C:50:3A:27:F3:A6:C0:04:DD:DC
Certificate issuer: /CN=3b3daef89306a75f0b88191440742a720afb3f20
Certificate serial: 01865083627508C391F89791BA232802F5CF
Authority key identifier: 3B:3D:AE:F8:93:06:A7:5F:0B:88:19:14:40:74:2A:72:0A:FB:3F:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oz2u-JMGp18LiBkUQHQqcgr7PyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/TpHrdcftghHkq3xQOifzpsAE3dw.roa
Signing time: Tue 14 Feb 2023 15:20:32 +0000
ROA not before: Tue 14 Feb 2023 15:20:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24796
IP address blocks: 193.201.40.0/24 maxlen: 24
193.24.29.0/24 maxlen: 24
185.33.110.0/24 maxlen: 24
185.33.110.0/23 maxlen: 23
185.33.111.0/24 maxlen: 24
185.33.108.0/23 maxlen: 23
185.33.108.0/24 maxlen: 24
185.33.108.0/22 maxlen: 22
185.33.109.0/24 maxlen: 24
2a0f:80::/32 maxlen: 32
2a0f:80:b::/48 maxlen: 48
2a0f:80:a::/48 maxlen: 48
2a0f:80:3::/48 maxlen: 48
2a0f:80:1::/48 maxlen: 48
2a0f:80:c::/48 maxlen: 48
2a0f:80:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 14 Mar 2023 15:08:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:50:83:62:75:08:c3:91:f8:97:91:ba:23:28:02:f5:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b3daef89306a75f0b88191440742a720afb3f20
Validity
Not Before: Feb 14 15:20:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4e91eb75c7ed8211e4ab7c503a27f3a6c004dddc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:96:75:ec:2b:f1:f6:13:2f:c8:f4:af:0d:89:
25:85:52:55:70:0b:f4:ef:c2:0a:5e:d9:21:a8:59:
9c:78:a3:e2:31:cb:37:da:37:83:58:73:17:35:4e:
a2:c2:62:c6:65:a2:79:de:4f:54:b3:ee:0a:e8:86:
20:4e:ae:ea:6a:2b:1c:e5:d3:b3:70:66:d9:f8:76:
ef:3e:70:98:a8:3f:ca:8c:9e:d7:7f:2c:e8:f2:a4:
f5:a3:41:6c:52:24:dd:1b:c9:10:f2:51:c3:a0:5c:
41:fa:1f:7b:33:4d:95:d7:a7:e6:9f:30:91:be:ac:
73:c9:c0:ae:40:b3:19:0d:8b:dc:3e:b1:48:7c:a4:
38:28:14:95:5e:fe:f3:21:91:03:65:b8:44:e1:64:
a5:94:e2:81:d1:b0:7b:45:06:4f:df:58:3d:4a:0b:
f6:25:1a:23:54:3b:0b:32:ef:22:e4:44:39:08:41:
0a:f9:49:f9:6d:d9:d7:98:ed:a7:73:f0:a4:c7:ff:
f7:c3:8a:d5:25:f8:54:40:85:7a:25:62:d7:0d:b6:
e3:1c:22:30:44:ad:77:b1:e2:d5:63:d2:a6:98:87:
75:bd:bc:66:70:9e:4e:05:94:1d:e1:1b:c6:2e:29:
95:bd:7a:95:4b:a7:17:64:73:f1:16:c3:80:99:f4:
50:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:91:EB:75:C7:ED:82:11:E4:AB:7C:50:3A:27:F3:A6:C0:04:DD:DC
X509v3 Authority Key Identifier:
keyid:3B:3D:AE:F8:93:06:A7:5F:0B:88:19:14:40:74:2A:72:0A:FB:3F:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oz2u-JMGp18LiBkUQHQqcgr7PyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/TpHrdcftghHkq3xQOifzpsAE3dw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.33.108.0/22
193.24.29.0/24
193.201.40.0/24
IPv6:
2a0f:80::/32
Signature Algorithm: sha256WithRSAEncryption
5b:98:5a:27:7f:49:3a:91:6a:fd:dc:dd:d7:ad:36:2a:11:6a:
2c:0d:c4:7d:51:15:7e:6b:60:1c:3d:70:66:d2:5a:4d:a8:6a:
cc:02:53:35:ca:1d:2a:a6:64:a0:b7:0f:74:a2:8d:65:fc:4a:
61:3b:91:6c:71:73:09:60:5b:2b:90:af:08:26:2b:db:da:33:
70:2b:1b:5e:8b:e7:15:e4:ee:64:51:85:cc:e4:64:8b:78:3e:
b0:a7:e1:dc:f2:ab:70:c3:db:0a:c2:c4:44:ba:55:fb:d6:01:
35:56:13:2a:7e:92:b5:d0:71:82:0e:d1:14:f9:4b:68:2e:63:
de:c0:d6:ac:89:3b:d4:57:39:c3:ae:f9:e5:45:c9:bf:48:a0:
f3:19:98:f1:f6:5c:a4:e6:47:7b:82:f8:fc:5c:50:cf:71:f0:
44:4c:39:d8:27:af:65:fb:17:be:b1:38:6c:d2:b9:1b:64:ac:
f2:44:46:b0:54:b2:e8:63:a6:b0:6a:40:9f:ee:c8:b1:fc:a1:
e6:b7:88:21:6e:aa:19:b8:aa:de:d9:78:53:6e:45:79:81:c4:
70:b5:27:e4:90:34:f4:75:a7:17:b4:0a:ea:7e:47:e5:7d:f2:
06:6e:c9:99:96:94:b7:b0:33:0a:7c:6d:2f:bc:33:7c:67:35:
fa:49:a8:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:58 2024 by rpki-client on console-fra.rpki-client.org