Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/7TBD-tip_BnQ3-V17gwgLwMhtUQ.roa
File: 7TBD-tip_BnQ3-V17gwgLwMhtUQ.roa (raw, json)
Hash identifier: i3/gldRcVthYz8U2BJVRZ3S+N8wQpV0tYa9WQWne9Gg=
Subject key identifier: ED:30:43:FA:D8:A9:FC:19:D0:DF:E5:75:EE:0C:20:2F:03:21:B5:44
Certificate issuer: /CN=91f5fcedbdb84dd52fc6770d7ccfd3fc6684fa41
Certificate serial: 01936D1A9BA5DB4C201806869BB9C51966D6
Authority key identifier: 91:F5:FC:ED:BD:B8:4D:D5:2F:C6:77:0D:7C:CF:D3:FC:66:84:FA:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kfX87b24TdUvxncNfM_T_GaE-kE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/7TBD-tip_BnQ3-V17gwgLwMhtUQ.roa
Signing time: Wed 27 Nov 2024 10:11:20 +0000
ROA not before: Wed 27 Nov 2024 10:11:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203217
IP address blocks: 45.82.60.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 03:49:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6d:1a:9b:a5:db:4c:20:18:06:86:9b:b9:c5:19:66:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91f5fcedbdb84dd52fc6770d7ccfd3fc6684fa41
Validity
Not Before: Nov 27 10:11:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ed3043fad8a9fc19d0dfe575ee0c202f0321b544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0a:d6:aa:26:61:67:eb:a1:8c:21:18:9c:39:
e2:e3:bc:be:61:a8:df:cf:7e:ca:ce:1f:fb:08:9f:
05:a2:bf:4c:1b:7c:88:1b:6a:87:a2:e1:05:c9:09:
ba:62:ac:1a:c9:da:44:89:4c:5c:e5:ed:13:63:4d:
c1:d7:cf:7c:9b:b3:3c:3b:3a:6e:fd:b3:01:0a:ed:
4c:c4:69:2d:e4:0d:49:62:50:30:bb:ac:64:52:f1:
dc:85:fc:9e:93:33:00:f1:c1:51:2e:8e:a5:02:e1:
1a:9f:cd:68:52:dd:18:e0:65:ce:b3:7e:e2:f1:43:
db:76:54:33:4f:8e:6c:3e:b5:5f:7d:48:ed:ab:0e:
d0:12:aa:0f:f2:b1:8e:98:52:70:6f:03:44:85:ba:
7b:99:e5:49:c3:af:df:28:ff:1a:45:2a:8f:83:a7:
89:cc:ac:51:87:dc:f8:4c:72:f4:a8:c0:18:7e:82:
40:d6:31:39:3c:65:58:98:55:51:29:23:f9:04:fd:
dc:bf:41:f0:b8:cc:c5:ed:d9:2b:5b:e8:e0:bc:ad:
84:4f:50:63:6a:7c:b7:40:01:fa:b6:53:9a:4e:4f:
26:a4:bb:fa:5f:82:9a:d0:a0:2c:9f:54:d5:dc:4f:
81:1d:d0:bd:d8:b8:03:0e:cb:f9:9e:8b:54:92:a4:
c4:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:30:43:FA:D8:A9:FC:19:D0:DF:E5:75:EE:0C:20:2F:03:21:B5:44
X509v3 Authority Key Identifier:
keyid:91:F5:FC:ED:BD:B8:4D:D5:2F:C6:77:0D:7C:CF:D3:FC:66:84:FA:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kfX87b24TdUvxncNfM_T_GaE-kE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/7TBD-tip_BnQ3-V17gwgLwMhtUQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.60.0/24
Signature Algorithm: sha256WithRSAEncryption
21:9b:87:be:24:95:7e:b8:f0:00:b2:4d:bc:88:ec:0b:74:19:
4a:50:eb:3c:d9:b5:74:fc:a0:fa:01:8e:02:49:72:ed:2e:8f:
ac:a7:7d:4f:15:22:0d:8f:d3:df:a9:b2:a6:08:31:3b:a6:ec:
eb:d0:b4:e2:2a:e7:c3:2c:e9:70:2b:6e:a7:ca:bd:6a:75:07:
33:ed:93:7c:87:95:65:86:38:7b:90:b6:c0:24:62:1e:61:fd:
a0:fc:56:2e:26:e8:97:05:1d:8b:91:29:cc:85:68:07:e3:ca:
f7:16:41:7f:23:f2:3c:cc:27:f1:1c:15:73:6d:06:1b:c0:0c:
40:2c:fb:54:5c:bb:f1:08:28:41:c7:80:9f:b7:19:91:13:8a:
0a:18:93:08:dd:55:e1:61:a0:8a:5f:02:62:05:7d:af:db:89:
52:39:c3:e3:16:29:58:fa:d5:b4:c3:74:e0:3b:f3:93:9f:17:
61:c2:b3:86:f0:e8:16:72:8a:67:22:eb:ff:9e:7c:12:1d:14:
56:8a:39:30:fa:e1:29:ad:9e:d3:6b:d0:98:cd:07:64:99:eb:
c8:dd:74:d2:77:41:e3:30:34:5e:a2:5c:47:29:a1:9b:3a:60:
5c:56:d1:b0:2f:84:88:a1:24:ca:d2:3a:d9:f4:ba:0b:58:41:
05:df:6b:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:03:11 2025 by rpki-client