Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/Tql_C_dUSB-U5XOTcFQy3Ndv2tQ.roa
File: Tql_C_dUSB-U5XOTcFQy3Ndv2tQ.roa (raw, json)
Hash identifier: FTXTt7Dk171T6xIWOWztTbaJVaa9ew1gUbwLCsS0tYY=
Subject key identifier: 4E:A9:7F:0B:F7:54:48:1F:94:E5:73:93:70:54:32:DC:D7:6F:DA:D4
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 018E660BAE2F0326748C2EF2A4B3C61AAB86
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/Tql_C_dUSB-U5XOTcFQy3Ndv2tQ.roa
Signing time: Fri 22 Mar 2024 12:03:45 +0000
ROA not before: Fri 22 Mar 2024 12:03:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 93.186.69.0/24 maxlen: 24
109.121.43.0/24 maxlen: 24
185.47.91.0/24 maxlen: 24
188.255.128.0/24 maxlen: 24
188.255.200.0/24 maxlen: 24
212.69.14.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 25 Mar 2024 08:19:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:66:0b:ae:2f:03:26:74:8c:2e:f2:a4:b3:c6:1a:ab:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Mar 22 12:03:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4ea97f0bf754481f94e57393705432dcd76fdad4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:35:92:8e:78:72:bf:48:cb:ee:93:de:82:4c:
ad:59:0c:8b:c8:72:5c:52:9c:d7:d1:6b:36:d3:b3:
a6:54:da:ff:08:19:28:4e:5d:db:96:6e:d5:b5:9b:
fa:c3:4e:78:e2:76:ab:b2:bd:07:0b:e8:e2:8e:53:
2f:d4:0c:dd:d6:43:aa:2e:b3:8b:37:1d:72:68:83:
11:6e:d5:27:90:40:77:cb:da:bf:ec:d7:94:15:ab:
b3:cb:dd:0a:08:11:e1:62:a8:9b:33:70:d1:f7:f2:
eb:a3:3b:ba:27:c8:18:5d:ca:54:5d:2a:e0:b2:ed:
8d:24:a5:7c:bb:bf:05:3f:20:fc:05:40:84:57:c6:
95:61:b9:8a:35:19:40:76:75:02:61:2e:57:4f:e6:
f6:be:ee:d0:af:3b:cf:67:02:32:f5:b2:20:79:cf:
a4:c5:c7:bf:08:67:cb:dc:ed:03:17:d9:ae:33:f9:
0d:ae:ff:44:6c:ee:94:07:ed:88:f8:59:aa:e7:42:
93:5b:05:af:71:b1:4a:b8:07:59:82:cb:e4:6c:79:
f3:1e:b8:c1:b4:03:74:08:c2:a1:61:c6:c5:8e:e4:
b2:cf:ee:73:86:88:cd:76:5a:2d:e7:17:7e:31:05:
a6:1e:cb:d8:07:58:40:e6:38:8d:d6:6c:18:a1:ed:
c3:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:A9:7F:0B:F7:54:48:1F:94:E5:73:93:70:54:32:DC:D7:6F:DA:D4
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/Tql_C_dUSB-U5XOTcFQy3Ndv2tQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.186.69.0/24
109.121.43.0/24
185.47.91.0/24
188.255.128.0/24
188.255.200.0/24
212.69.14.0/24
Signature Algorithm: sha256WithRSAEncryption
22:d9:c5:16:d9:c9:6c:2d:65:1c:7e:ae:de:d4:46:a8:c3:20:
48:27:07:13:c4:2f:42:c4:0e:7f:76:ac:53:d8:49:7f:64:36:
73:af:82:20:8b:22:55:1b:d8:a1:8c:0c:c6:7d:fe:71:73:be:
e2:2f:e5:e8:64:ad:5f:aa:05:f5:5a:32:94:93:10:a6:b4:88:
e9:38:9e:87:65:49:05:12:c7:ce:42:de:bc:6b:ab:40:09:d6:
16:17:96:90:91:d7:c0:f7:ac:a8:52:04:b5:b9:31:3e:9a:75:
6d:db:12:ce:45:84:60:27:6e:83:21:b1:e8:69:45:0d:b7:b3:
1c:3d:cc:27:c6:73:4d:36:db:cf:2e:97:5c:92:07:3a:79:7a:
58:ff:3c:f6:aa:e7:8b:21:44:3f:60:a3:40:eb:cb:4b:23:bd:
00:7f:c8:05:eb:73:f9:97:81:9f:23:4d:76:b1:50:29:fe:be:
5b:f6:42:e3:f5:2f:7e:da:09:0b:35:f0:62:fa:09:7d:c7:6d:
83:c3:13:e1:15:20:7e:ad:20:d1:63:e1:8d:7e:4d:79:87:d8:
0d:aa:a9:87:07:53:c7:4b:11:c3:83:ba:b9:94:bf:40:75:77:
96:a3:e5:1a:b0:e2:67:55:77:35:a0:12:52:a8:36:cf:d7:2f:
d3:87:a7:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 25 12:23:08 2024 by rpki-client on console-fra.rpki-client.org