Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/3c2956-df9d-4048-b011-d8e98b85aea4/1/TDqH3I_eH-w688l9qyHH2v6fiA4.roa
File: TDqH3I_eH-w688l9qyHH2v6fiA4.roa (raw, json)
Hash identifier: NVjf3zOmvOzCRsxpEfXrml1rKrlid1QdcB6dhTLrYis=
Subject key identifier: 4C:3A:87:DC:8F:DE:1F:EC:3A:F3:C9:7D:AB:21:C7:DA:FE:9F:88:0E
Certificate issuer: /CN=94d161593da815cac58d3479652d048480d26713
Certificate serial: 018571152B2811BC43FF55D728664A2817FE
Authority key identifier: 94:D1:61:59:3D:A8:15:CA:C5:8D:34:79:65:2D:04:84:80:D2:67:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lNFhWT2oFcrFjTR5ZS0EhIDSZxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/3c2956-df9d-4048-b011-d8e98b85aea4/1/TDqH3I_eH-w688l9qyHH2v6fiA4.roa
Signing time: Mon 02 Jan 2023 06:04:50 +0000
ROA not before: Mon 02 Jan 2023 06:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59984
IP address blocks: 185.63.104.0/22 maxlen: 22
2a03:ca0::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:15:2b:28:11:bc:43:ff:55:d7:28:66:4a:28:17:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94d161593da815cac58d3479652d048480d26713
Validity
Not Before: Jan 2 06:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4c3a87dc8fde1fec3af3c97dab21c7dafe9f880e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:2e:5d:5e:a4:4f:61:17:cf:44:30:e2:a2:d0:
86:01:67:3c:9b:70:95:95:00:f2:e8:90:a2:10:9a:
26:5a:e6:76:fe:90:42:a7:54:24:5c:41:5f:19:e1:
28:f0:4c:af:50:8d:d4:fd:55:61:ab:23:4f:0c:ba:
ee:bd:88:3f:9d:12:c6:af:db:bc:b5:e0:21:ff:ea:
86:44:f0:f7:e9:5c:9d:5d:02:ee:14:bd:80:18:56:
5c:4e:3b:49:5f:6d:4a:c7:6f:a1:9a:20:f7:88:f5:
2f:01:d9:6b:bf:c6:37:d7:5b:42:28:ac:7f:fc:fb:
6b:16:64:09:42:eb:dc:4e:1c:21:b0:5e:06:33:f3:
29:13:be:f7:43:be:4c:bb:13:07:57:f6:42:4a:a4:
f3:2c:ca:54:55:19:2e:f2:a9:73:2f:7d:55:e8:db:
55:dd:a7:5f:34:60:3e:b9:ad:a8:01:46:e6:62:da:
59:94:55:8a:96:64:2c:67:68:72:75:1d:59:4f:3a:
72:5f:de:91:ce:02:3c:60:aa:eb:47:8a:ec:a8:41:
5b:a4:f3:4f:36:f9:24:bd:e9:85:f2:97:21:c6:e8:
74:b6:d0:54:29:d2:0b:dc:0f:f5:98:30:da:31:6f:
fe:6d:d9:d6:50:1b:c6:9a:a1:38:a5:a3:c9:cb:c2:
89:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:3A:87:DC:8F:DE:1F:EC:3A:F3:C9:7D:AB:21:C7:DA:FE:9F:88:0E
X509v3 Authority Key Identifier:
keyid:94:D1:61:59:3D:A8:15:CA:C5:8D:34:79:65:2D:04:84:80:D2:67:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lNFhWT2oFcrFjTR5ZS0EhIDSZxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/3c2956-df9d-4048-b011-d8e98b85aea4/1/TDqH3I_eH-w688l9qyHH2v6fiA4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/3c2956-df9d-4048-b011-d8e98b85aea4/1/lNFhWT2oFcrFjTR5ZS0EhIDSZxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.63.104.0/22
IPv6:
2a03:ca0::/32
Signature Algorithm: sha256WithRSAEncryption
6b:00:f6:7f:12:4f:b7:c5:99:02:19:b4:59:76:c3:11:bd:00:
42:35:6f:6e:c5:9b:61:8a:71:6e:8c:a1:38:a9:16:0a:82:8b:
a6:fb:ef:00:2f:4e:22:d3:f5:14:cc:f4:a0:fc:63:13:f3:23:
86:02:f3:77:59:df:18:95:81:c9:e7:09:06:2a:f0:3e:29:47:
58:dd:74:b4:ed:4d:df:dd:c2:09:61:6b:86:63:59:39:8d:25:
4f:94:36:a5:a2:53:39:a4:26:7c:cb:cb:b7:e5:9a:ab:c2:42:
c1:2b:d1:69:26:6b:f2:ee:6d:b9:d8:50:56:21:52:d7:60:0c:
5c:ff:26:08:dc:fe:0c:61:76:ac:27:14:ce:9b:84:f6:8f:5b:
c7:f5:66:35:6a:b4:9c:b0:88:6f:04:e9:87:f1:64:46:6b:e0:
1e:22:f0:5a:ca:32:98:c5:c9:38:2b:7a:58:cc:83:2a:b0:57:
a0:ed:9d:20:23:07:d2:3d:67:2c:cc:19:90:dc:c9:9b:82:92:
2d:59:a7:43:6f:5c:ae:0d:9f:cc:d7:02:b0:2e:72:b8:37:e4:
96:58:5a:af:3d:e5:b0:d8:d1:6c:e6:e8:ec:6b:8d:7c:77:56:
7d:a5:d5:ac:ac:80:93:c1:6a:65:59:86:4c:88:ad:d9:09:94:
54:0f:f9:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:00 2024 by rpki-client on console-fra.rpki-client.org