Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/TUaxqLCgu8A-sJNjSeQRm7rVkwI.roa
File: TUaxqLCgu8A-sJNjSeQRm7rVkwI.roa (raw, json)
Hash identifier: OWPPe8J7kGq8crCqrH7bjqWIrf23AdyJ8uyS5k9r+Aw=
Subject key identifier: 4D:46:B1:A8:B0:A0:BB:C0:3E:B0:93:63:49:E4:11:9B:BA:D5:93:02
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 01870F7917BA172C0702317568E6EAB23B98
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/TUaxqLCgu8A-sJNjSeQRm7rVkwI.roa
Signing time: Thu 23 Mar 2023 17:16:46 +0000
ROA not before: Thu 23 Mar 2023 17:16:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213296
IP address blocks: 194.28.158.0/24 maxlen: 24
194.28.156.0/24 maxlen: 24
194.104.4.0/24 maxlen: 24
194.104.6.0/24 maxlen: 24
194.104.5.0/24 maxlen: 24
212.69.132.0/24 maxlen: 24
212.69.134.0/24 maxlen: 24
212.69.133.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:0f:79:17:ba:17:2c:07:02:31:75:68:e6:ea:b2:3b:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Mar 23 17:16:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4d46b1a8b0a0bbc03eb0936349e4119bbad59302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:40:bb:f5:b0:8e:62:f2:89:aa:13:b6:be:8a:
f8:d9:1a:b8:4a:4c:eb:15:ad:79:8e:2a:83:36:51:
cb:a0:c9:f3:d0:92:cc:0b:8e:83:7f:6a:ff:59:f6:
78:5e:da:d2:da:82:26:ac:ad:ae:f1:a7:26:b4:bc:
f2:96:be:56:86:b6:a6:4f:20:9c:fd:b5:e7:c9:1c:
7c:19:19:df:c6:fe:f8:6a:19:aa:cb:81:4f:ad:5c:
0d:d2:8a:c8:9e:d0:1e:4b:dd:ba:9c:33:24:c0:54:
6b:59:2e:25:ca:5f:6f:d7:da:07:d6:e6:ce:72:51:
6a:dd:58:90:1c:ad:73:95:3e:ed:31:ff:d6:6d:19:
99:38:6e:e0:3b:e0:82:ba:cb:a0:91:fe:5e:57:e6:
b5:4d:29:00:ab:f7:c7:18:4a:72:a5:3d:7c:12:88:
93:17:f0:fc:fd:ef:e6:2d:e8:69:0d:0a:d0:ba:95:
57:99:80:d4:a7:d8:eb:f8:76:16:e2:cb:f3:8e:b6:
cf:05:97:a8:b5:a4:d4:9f:fe:ad:8a:ad:7e:82:69:
67:f1:56:05:fe:21:d2:2b:9f:cb:ed:fa:12:b5:70:
64:b4:e6:95:8c:14:fe:a4:8d:88:6d:2e:51:df:79:
b5:c0:08:c9:29:e6:c4:92:62:a2:22:d6:78:65:a0:
81:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:46:B1:A8:B0:A0:BB:C0:3E:B0:93:63:49:E4:11:9B:BA:D5:93:02
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/TUaxqLCgu8A-sJNjSeQRm7rVkwI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.28.156.0/24
194.28.158.0/24
194.104.4.0-194.104.6.255
212.69.132.0-212.69.134.255
Signature Algorithm: sha256WithRSAEncryption
ae:2c:bc:d5:0d:e0:32:83:85:51:a8:27:52:b8:14:b9:3e:48:
1e:d5:82:b3:60:6e:a7:02:50:ee:eb:9c:d3:02:1d:44:98:c5:
de:3e:68:9e:56:50:43:14:60:ea:e8:68:64:86:d2:b9:52:7c:
9e:a6:a7:35:ef:04:25:6d:88:d5:82:9b:70:d5:68:0a:48:6f:
b8:d6:af:de:f4:e8:fd:b8:6e:98:70:8a:5a:2b:45:1f:7a:f9:
89:d1:c2:1a:f1:8e:0c:51:07:0f:d7:85:f1:c3:d6:c2:ac:70:
a0:fd:d5:46:5f:83:d1:f5:dc:20:8d:b3:a7:f9:fa:f1:f7:c6:
ea:30:52:73:13:9c:7b:67:a0:e3:c7:d6:32:46:51:9a:03:8e:
1f:d9:0d:e1:53:d7:9a:c0:d3:62:b9:db:e9:05:7c:ad:b6:65:
2c:4e:4e:de:46:54:cd:33:b6:24:34:ce:1f:e6:ab:a2:60:4a:
42:87:bb:00:d7:f9:03:75:34:df:7d:c3:f0:c3:b4:b5:c9:dc:
f2:2d:3b:ee:7a:da:67:4b:0d:8d:01:b9:38:1f:c2:76:27:8f:
72:a4:a2:39:8e:87:8a:93:aa:e0:10:1a:95:54:04:6b:e3:b0:
a6:ac:3a:54:da:ae:f6:b7:43:31:9a:5e:4f:cd:fc:21:83:5b:
17:1d:43:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:24 2023 by rpki-client on console-ams.rpki-client.org