Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/4be259-be96-40fa-880e-bbd2106f3370/1/TsZbFWpO3Sn4SAhsnommjz3OoK8.roa
File: TsZbFWpO3Sn4SAhsnommjz3OoK8.roa (raw, json)
Hash identifier: Y7nyXXrezVuQWDqwTq/rmq227vYUp5eZPp+suOhILZY=
Subject key identifier: 4E:C6:5B:15:6A:4E:DD:29:F8:48:08:6C:9E:89:A6:8F:3D:CE:A0:AF
Certificate issuer: /CN=437e030d44661a4c201eba03de452b04b8e7d9e5
Certificate serial: 018CC6B8EA70455AF46DE0ADEB64BDADF005
Authority key identifier: 43:7E:03:0D:44:66:1A:4C:20:1E:BA:03:DE:45:2B:04:B8:E7:D9:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q34DDURmGkwgHroD3kUrBLjn2eU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/4be259-be96-40fa-880e-bbd2106f3370/1/TsZbFWpO3Sn4SAhsnommjz3OoK8.roa
Signing time: Mon 01 Jan 2024 20:30:56 +0000
ROA not before: Mon 01 Jan 2024 20:30:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202813
IP address blocks: 185.14.60.0/22 maxlen: 24
185.178.16.0/22 maxlen: 24
185.153.224.0/22 maxlen: 24
2a09:74c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 03 Apr 2024 18:17:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:ea:70:45:5a:f4:6d:e0:ad:eb:64:bd:ad:f0:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=437e030d44661a4c201eba03de452b04b8e7d9e5
Validity
Not Before: Jan 1 20:30:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4ec65b156a4edd29f848086c9e89a68f3dcea0af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:88:02:fc:4a:98:27:f5:9d:5c:fb:f2:88:91:
0e:26:4c:23:74:88:00:18:e4:73:ab:49:54:d9:7d:
c3:b3:94:38:9e:15:e1:3f:7c:ff:73:c7:80:d2:54:
b1:1b:86:be:71:b4:e2:34:c0:d3:15:85:52:de:bf:
56:f0:cb:da:e8:5f:20:27:02:43:0f:60:65:a3:4d:
db:d3:cb:32:74:a9:dc:6f:66:0e:33:15:b4:9a:08:
93:bf:03:d9:31:98:8b:95:22:87:43:62:26:24:17:
33:14:18:4e:ec:b0:73:97:c0:2d:40:c0:5b:b9:c1:
81:34:fe:5e:49:7b:40:e0:39:df:5c:e6:ae:74:e5:
45:ca:d4:02:30:4f:e0:5d:f7:6a:17:2d:0b:27:ed:
15:fa:59:38:bd:09:4f:e0:df:09:cd:62:d7:9d:6d:
26:55:36:e0:54:49:61:64:eb:98:d6:c9:bd:8d:7a:
08:a8:f1:c2:c6:4a:72:16:cf:d4:cb:95:14:a7:c0:
f8:cc:12:62:77:39:87:d3:a8:fd:5c:e0:a1:5a:da:
f5:9a:bc:a1:76:47:d6:ce:b2:c3:6f:9a:e0:14:27:
00:f1:fd:88:76:7c:59:72:03:35:2b:14:da:48:b3:
78:57:49:9c:da:a3:ea:0a:14:d5:1f:8a:99:93:8b:
b1:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:C6:5B:15:6A:4E:DD:29:F8:48:08:6C:9E:89:A6:8F:3D:CE:A0:AF
X509v3 Authority Key Identifier:
keyid:43:7E:03:0D:44:66:1A:4C:20:1E:BA:03:DE:45:2B:04:B8:E7:D9:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q34DDURmGkwgHroD3kUrBLjn2eU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/4be259-be96-40fa-880e-bbd2106f3370/1/TsZbFWpO3Sn4SAhsnommjz3OoK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/4be259-be96-40fa-880e-bbd2106f3370/1/Q34DDURmGkwgHroD3kUrBLjn2eU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.14.60.0/22
185.153.224.0/22
185.178.16.0/22
IPv6:
2a09:74c0::/29
Signature Algorithm: sha256WithRSAEncryption
b9:2e:2c:43:6e:40:37:b6:b9:f0:f7:f6:1f:07:e5:db:34:af:
63:ef:b9:4e:b4:95:4f:3a:98:e4:cb:0b:18:2f:92:98:50:74:
46:c4:7e:4d:de:6d:9e:62:fc:1e:1c:87:43:25:a7:29:a6:44:
24:da:6d:22:ae:8b:82:c6:f0:98:35:2b:8a:e9:36:c0:36:60:
6a:a4:f3:3e:e3:8d:f4:e1:8c:a1:4f:12:61:46:84:f1:81:d1:
c4:d6:c1:a2:2d:fc:d8:bd:c4:2d:80:da:0c:99:9e:c6:e0:44:
ec:de:31:0d:0d:36:af:fe:13:12:c2:e3:28:89:8e:00:52:98:
1d:11:64:29:27:e1:8d:c2:62:78:8b:60:25:2d:6b:fb:38:a8:
cf:ed:b4:56:37:09:1a:d3:a8:6f:61:36:1b:2d:7e:60:74:3b:
ff:f4:02:70:8a:dc:11:6f:93:a8:b1:a4:26:95:9b:6e:38:b5:
81:89:5f:1b:e9:98:c5:d7:c4:73:d7:a6:d5:67:de:7e:dc:ea:
84:8f:e0:14:18:d6:62:7d:a7:9a:c4:96:ea:bb:2d:aa:f5:e3:
eb:20:3b:45:a5:74:4f:f3:4c:56:df:60:67:b8:45:12:1e:af:
91:26:e8:85:9a:68:f9:0d:91:61:e7:e8:0e:6a:9d:81:34:67:
bd:d0:45:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:53 2024 by rpki-client on console-ams.rpki-client.org