Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/ba6755-4273-48e1-8582-712fa65a25ba/1/TzIZAAUtdxnPY7rUKv7TCM_X72k.roa
File: TzIZAAUtdxnPY7rUKv7TCM_X72k.roa (raw, json)
Hash identifier: ZXnDPDU0GTeuv0NColrD4EH1TyIbp+iNDiBXiBCzKs0=
Subject key identifier: 4F:32:19:00:05:2D:77:19:CF:63:BA:D4:2A:FE:D3:08:CF:D7:EF:69
Certificate issuer: /CN=38ca3f38d8e5a301eaf6924b924fe8f57aac690d
Certificate serial: 0188B0171E345221861DD64A7E7B4A15AE15
Authority key identifier: 38:CA:3F:38:D8:E5:A3:01:EA:F6:92:4B:92:4F:E8:F5:7A:AC:69:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OMo_ONjlowHq9pJLkk_o9XqsaQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/ba6755-4273-48e1-8582-712fa65a25ba/1/TzIZAAUtdxnPY7rUKv7TCM_X72k.roa
Signing time: Mon 12 Jun 2023 14:51:25 +0000
ROA not before: Mon 12 Jun 2023 14:51:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60353
IP address blocks: 193.19.72.0/24 maxlen: 24
193.19.96.0/24 maxlen: 24
193.19.97.0/24 maxlen: 24
2a00:cee6::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b0:17:1e:34:52:21:86:1d:d6:4a:7e:7b:4a:15:ae:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38ca3f38d8e5a301eaf6924b924fe8f57aac690d
Validity
Not Before: Jun 12 14:51:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4f321900052d7719cf63bad42afed308cfd7ef69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a0:bd:40:a3:92:5a:c2:3f:15:ee:e9:70:3f:
ab:43:73:f2:1b:f5:4e:69:ff:0d:f6:3f:b3:fc:97:
60:ab:bc:bc:d2:9d:ac:d1:5a:c6:1b:55:0f:b9:0c:
a7:fd:b7:49:e7:c1:12:1a:a5:aa:37:4e:26:d9:26:
49:1d:ce:e5:9b:17:69:1f:10:91:dd:e2:12:63:1b:
d8:50:19:52:ec:d9:b3:e7:51:13:f1:82:ea:cd:16:
e5:01:b5:37:d6:90:96:0e:b8:4b:29:0a:bb:9c:04:
40:de:3d:de:3a:07:df:a4:26:f2:ca:2d:5d:20:1c:
f0:16:57:cf:26:4c:2e:d0:03:5f:7e:5a:ce:e3:db:
bf:5e:cd:68:31:99:d2:78:54:c5:1a:24:da:20:d4:
88:d1:46:ff:5a:92:e1:fc:f7:ca:be:90:5a:87:dc:
60:46:56:e4:fe:02:60:ae:6e:80:ce:18:f6:12:c2:
db:84:1a:af:34:37:c7:3c:0f:ef:3a:da:65:94:45:
5c:8d:c1:74:25:79:42:cb:f9:72:da:a8:68:02:97:
f3:12:59:7e:de:d5:89:19:ee:14:f2:fc:61:7f:79:
fc:4c:4b:30:66:b6:0a:67:d3:cf:24:78:b0:82:97:
7e:d0:ba:27:5f:5a:f4:1b:6a:22:51:5e:f1:dd:2b:
97:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:32:19:00:05:2D:77:19:CF:63:BA:D4:2A:FE:D3:08:CF:D7:EF:69
X509v3 Authority Key Identifier:
keyid:38:CA:3F:38:D8:E5:A3:01:EA:F6:92:4B:92:4F:E8:F5:7A:AC:69:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OMo_ONjlowHq9pJLkk_o9XqsaQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ba6755-4273-48e1-8582-712fa65a25ba/1/TzIZAAUtdxnPY7rUKv7TCM_X72k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ba6755-4273-48e1-8582-712fa65a25ba/1/OMo_ONjlowHq9pJLkk_o9XqsaQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.19.72.0/24
193.19.96.0/23
IPv6:
2a00:cee6::/32
Signature Algorithm: sha256WithRSAEncryption
0a:e8:b6:8b:62:e0:f2:b4:d1:af:a6:31:cd:22:86:e3:42:1c:
50:bb:45:db:92:06:96:3c:25:64:63:fe:5b:fb:0e:55:34:dc:
4d:56:dc:6f:9d:30:d8:27:cc:7b:5a:e1:81:a2:d2:7a:c2:53:
09:d3:36:c3:53:8f:18:c8:5f:6c:6f:54:6d:a1:e3:f2:6a:d4:
4c:50:99:f6:83:a2:ef:21:29:cf:fc:ca:fb:53:76:12:5c:ae:
f0:1b:4c:d0:5d:01:60:b8:a6:3a:6c:b1:4d:f6:86:bb:99:ec:
5c:e8:43:7c:56:56:92:be:93:6d:46:5d:8f:88:55:6c:b0:1c:
0b:ad:a4:20:6b:e9:8c:2d:3e:52:8d:25:d4:fd:67:1e:59:8c:
93:b9:55:89:52:3b:a0:11:c2:be:f7:5e:79:b7:ff:93:7c:ab:
7f:eb:1f:87:90:e6:87:8e:a2:9e:0a:59:d0:16:2c:bf:e7:c5:
8f:b6:fe:65:9b:6f:27:f5:b5:99:ca:d5:29:99:02:ec:b5:95:
69:36:62:e4:39:99:f3:65:c9:44:83:ae:5f:5d:e7:77:24:2f:
dd:6b:d5:c4:22:3c:a3:ed:73:1b:20:1d:ff:59:88:cd:8a:7e:
ab:8b:19:4e:6f:b1:cc:51:f4:b9:53:40:8d:56:14:75:3b:53:
32:d2:71:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:16:04 2024 by rpki-client on console-ams.rpki-client.org