Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/TYClZM_wTd00WjysbqWXXr-LWX4.roa
File: TYClZM_wTd00WjysbqWXXr-LWX4.roa (raw, json)
Hash identifier: En4K77VQu/feKljAsst6Xe/d7r5zM6cLykdxNJUVXcw=
Subject key identifier: 4D:80:A5:64:CF:F0:4D:DD:34:5A:3C:AC:6E:A5:97:5E:BF:8B:59:7E
Certificate issuer: /CN=d50697943676399ac5cac6a3e476545af0df49dd
Certificate serial: 0189F88CDDF048B240E3F35F734B9FA724F6
Authority key identifier: D5:06:97:94:36:76:39:9A:C5:CA:C6:A3:E4:76:54:5A:F0:DF:49:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QaXlDZ2OZrFysaj5HZUWvDfSd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/TYClZM_wTd00WjysbqWXXr-LWX4.roa
Signing time: Tue 15 Aug 2023 09:35:28 +0000
ROA not before: Tue 15 Aug 2023 09:35:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 375
IP address blocks: 192.49.173.0/24 maxlen: 24
192.49.174.0/23 maxlen: 23
192.49.176.0/20 maxlen: 20
192.49.192.0/18 maxlen: 18
192.49.20.0/24 maxlen: 24
192.49.19.0/24 maxlen: 24
192.49.22.0/24 maxlen: 24
192.49.36.0/22 maxlen: 22
192.49.40.0/23 maxlen: 23
192.49.52.0/23 maxlen: 23
192.49.56.0/21 maxlen: 21
192.49.55.0/24 maxlen: 24
192.49.64.0/22 maxlen: 22
192.49.0.0/21 maxlen: 21
192.49.9.0/24 maxlen: 24
192.49.10.0/24 maxlen: 24
192.49.124.0/23 maxlen: 23
192.49.119.0/24 maxlen: 24
192.49.120.0/22 maxlen: 22
192.49.126.0/24 maxlen: 24
192.49.131.0/24 maxlen: 24
192.49.134.0/24 maxlen: 24
192.49.136.0/23 maxlen: 23
192.49.139.0/24 maxlen: 24
192.49.140.0/23 maxlen: 23
192.49.144.0/24 maxlen: 24
192.49.152.0/21 maxlen: 21
192.49.146.0/24 maxlen: 24
192.49.148.0/22 maxlen: 22
192.49.160.0/23 maxlen: 23
192.49.164.0/22 maxlen: 22
192.49.163.0/24 maxlen: 24
192.49.168.0/23 maxlen: 23
192.49.170.0/24 maxlen: 24
192.49.68.0/24 maxlen: 24
192.49.70.0/23 maxlen: 23
192.49.72.0/23 maxlen: 23
192.49.86.0/23 maxlen: 23
192.49.91.0/24 maxlen: 24
192.49.90.0/24 maxlen: 24
192.49.96.0/24 maxlen: 24
192.49.98.0/23 maxlen: 23
192.49.92.0/22 maxlen: 22
192.49.100.0/23 maxlen: 23
192.49.103.0/24 maxlen: 24
192.49.104.0/24 maxlen: 24
192.49.106.0/23 maxlen: 23
192.49.108.0/22 maxlen: 22
192.49.112.0/23 maxlen: 23
192.49.114.0/23 maxlen: 23
131.207.0.0/17 maxlen: 17
2a03:9b80::/34 maxlen: 34
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f8:8c:dd:f0:48:b2:40:e3:f3:5f:73:4b:9f:a7:24:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d50697943676399ac5cac6a3e476545af0df49dd
Validity
Not Before: Aug 15 09:35:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4d80a564cff04ddd345a3cac6ea5975ebf8b597e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:b0:43:45:17:a1:63:3d:9b:24:2d:f1:06:d9:
6f:43:ed:c2:68:40:4c:12:2e:e7:51:f1:cd:90:be:
84:5d:3e:3c:35:3e:42:8b:f7:8f:77:22:4b:ec:8a:
58:99:6f:7a:89:08:97:40:97:74:fb:8b:7e:f7:cb:
2b:22:9c:8f:b6:15:bc:a0:7e:5d:be:a9:c5:ec:db:
f1:d9:5f:b5:0a:f6:33:46:8e:5d:45:6d:57:0d:37:
f7:25:64:b1:cf:e8:be:9b:40:9c:f3:92:ff:0e:07:
42:43:ee:e9:93:61:4f:e6:af:5e:85:91:af:cf:85:
55:06:9f:61:71:25:cd:e9:e5:91:5d:90:60:e4:52:
1d:6f:30:7b:ca:c7:4b:5a:02:5c:f2:4b:2c:8d:ba:
53:72:39:ec:f3:64:e5:d7:1d:b2:a7:20:06:93:47:
35:fc:22:b0:fa:d5:4d:47:22:e0:3c:1a:6a:80:25:
3a:7f:57:df:dd:f0:7a:6f:57:e0:5e:83:54:ba:a7:
fa:ce:4b:0c:bc:01:53:3a:62:58:46:d2:01:23:0c:
99:0c:fd:05:5f:8d:3f:03:87:a8:aa:76:58:73:31:
db:48:38:ca:83:9d:02:8c:2e:11:2f:24:0d:74:c9:
5f:58:3f:60:0c:d1:eb:53:12:fb:e8:5e:c7:d8:a7:
c1:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:80:A5:64:CF:F0:4D:DD:34:5A:3C:AC:6E:A5:97:5E:BF:8B:59:7E
X509v3 Authority Key Identifier:
keyid:D5:06:97:94:36:76:39:9A:C5:CA:C6:A3:E4:76:54:5A:F0:DF:49:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QaXlDZ2OZrFysaj5HZUWvDfSd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/TYClZM_wTd00WjysbqWXXr-LWX4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.207.0.0/17
192.49.0.0/21
192.49.9.0-192.49.10.255
192.49.19.0-192.49.20.255
192.49.22.0/24
192.49.36.0-192.49.41.255
192.49.52.0/23
192.49.55.0-192.49.68.255
192.49.70.0-192.49.73.255
192.49.86.0/23
192.49.90.0-192.49.96.255
192.49.98.0-192.49.101.255
192.49.103.0-192.49.104.255
192.49.106.0-192.49.115.255
192.49.119.0-192.49.126.255
192.49.131.0/24
192.49.134.0/24
192.49.136.0/23
192.49.139.0-192.49.141.255
192.49.144.0/24
192.49.146.0/24
192.49.148.0-192.49.161.255
192.49.163.0-192.49.170.255
192.49.173.0-192.49.255.255
IPv6:
2a03:9b80::/34
Signature Algorithm: sha256WithRSAEncryption
00:e8:be:91:c1:2c:f5:5b:cb:b2:15:a9:79:0f:72:08:3d:09:
b2:eb:2b:66:b8:38:ae:8d:32:e1:7e:6b:ca:ad:c1:a5:b7:4c:
8e:ad:05:31:21:e9:81:8f:5e:05:c6:14:b1:ca:b8:6f:87:27:
f9:d2:0f:b4:dd:d9:77:34:eb:2d:fc:93:31:f0:23:32:27:79:
9c:9a:b1:4c:fa:b2:82:96:f3:3d:a5:cd:b4:f6:03:fe:73:b1:
9a:1d:8f:66:b7:07:42:a3:5a:b4:f5:d2:71:e8:4c:35:02:22:
44:c2:0a:09:0b:e3:ef:16:c2:f1:6e:ed:e3:9e:7a:04:f7:ab:
ed:74:b8:4c:85:88:ff:cd:df:4d:4f:af:94:60:2e:99:5c:dd:
e2:a5:62:10:6f:81:69:00:ce:5e:f4:c9:5e:9e:8f:fd:99:21:
aa:5b:b6:9c:a7:fd:79:a2:80:e1:bb:91:dc:c8:ce:37:cc:a3:
49:4e:cd:14:bf:b0:0d:b5:32:c9:d9:d0:9e:e5:26:82:83:a7:
e5:62:69:75:df:0e:1d:4b:d2:c2:4a:9a:06:a9:b3:32:af:00:
a4:d2:10:ea:83:57:a1:f5:67:31:07:f4:e7:eb:0b:c3:ec:72:
5c:e8:1f:89:fc:a6:b6:42:30:dd:6b:0e:93:a0:bd:18:3b:6d:
c2:85:f4:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:13:58 2024 by rpki-client on console-ams.rpki-client.org