Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/TQgd7gGFelZcPOtZIFD5kE1M2a0.roa
File: TQgd7gGFelZcPOtZIFD5kE1M2a0.roa (raw, json)
Hash identifier: UUy30lQdYjeyk+3UvIyuQfd7mb1rQdZxQF85hukQNyA=
Subject key identifier: 4D:08:1D:EE:01:85:7A:56:5C:3C:EB:59:20:50:F9:90:4D:4C:D9:AD
Certificate issuer: /CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Certificate serial: 018CC794CCA05746CA401F51B2500A75F3EF
Authority key identifier: D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/TQgd7gGFelZcPOtZIFD5kE1M2a0.roa
Signing time: Tue 02 Jan 2024 00:31:06 +0000
ROA not before: Tue 02 Jan 2024 00:31:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14315
IP address blocks: 45.140.247.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 Apr 2024 12:57:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:cc:a0:57:46:ca:40:1f:51:b2:50:0a:75:f3:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Validity
Not Before: Jan 2 00:31:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4d081dee01857a565c3ceb592050f9904d4cd9ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:7b:7c:be:8d:ca:7a:0f:05:5d:f7:2f:69:e5:
fd:a5:2a:d8:8e:da:5f:a9:e7:f0:4b:9e:d3:da:62:
9a:2a:9e:0a:78:05:2a:50:56:c1:15:4a:f8:3d:ea:
96:44:df:25:59:59:68:3b:e8:47:a2:ac:08:f9:42:
66:0d:32:0f:3e:97:92:2a:98:57:71:11:59:56:9b:
47:25:29:13:5d:e2:26:e6:27:d1:3b:7b:98:91:68:
1d:8f:95:03:1a:4d:13:91:9e:40:43:04:bd:fe:e1:
15:94:7d:53:c2:48:c5:6c:dd:58:2d:bd:0e:8e:bd:
05:2e:bb:0b:8f:bb:8b:77:77:68:1e:53:a6:d0:1b:
92:45:63:b9:2a:5f:eb:e7:5e:f9:45:20:a1:47:10:
da:79:65:0a:f9:82:dc:d0:51:45:6a:44:89:ff:fd:
c3:26:22:4d:37:46:4e:51:3a:fe:2a:c2:8e:c4:91:
de:ba:03:b4:42:7a:e7:8a:ac:e8:9d:73:2e:2d:0c:
f8:9c:5a:df:fb:a3:55:74:41:62:0c:aa:cd:39:ea:
61:f7:e6:2b:52:4e:5b:66:17:cf:92:78:ea:02:73:
56:c6:23:f3:42:7b:2e:20:92:ac:4b:48:b6:64:8c:
db:ae:1c:3d:4e:38:56:2b:1b:d4:68:3e:2e:31:57:
55:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:08:1D:EE:01:85:7A:56:5C:3C:EB:59:20:50:F9:90:4D:4C:D9:AD
X509v3 Authority Key Identifier:
keyid:D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/TQgd7gGFelZcPOtZIFD5kE1M2a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.247.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:f2:90:db:de:82:a5:4b:3e:f6:f4:53:55:1f:3a:5f:3f:4b:
56:3c:a5:44:3a:87:fa:9c:a6:ab:ab:65:49:cb:58:bc:e1:db:
4b:7b:43:9c:71:9b:07:86:95:41:c5:ee:df:83:fa:87:c0:c5:
f4:4b:87:70:af:14:04:e5:1e:5c:80:d6:e7:8a:ce:29:14:b2:
3a:bc:c4:49:15:c2:53:ed:cc:fe:87:9e:d2:de:66:6e:07:e4:
42:10:f2:4a:3b:e9:ad:26:de:1a:ae:b0:c3:a1:67:03:c8:29:
34:aa:b9:b8:0d:8a:b1:fc:c9:e8:b7:69:10:38:f6:a5:74:8f:
c1:bb:7d:9b:37:b9:17:29:39:b8:5e:66:72:70:f4:74:53:d6:
e0:a6:fa:1a:c2:10:1e:77:9f:c7:6a:74:13:9d:01:07:58:bc:
86:d5:20:9a:58:63:a8:4d:1a:05:21:27:36:64:77:20:a5:ac:
0b:cb:3d:a0:35:c9:8b:0b:5c:68:ab:92:46:13:74:d3:a6:5f:
50:7a:ae:ab:13:da:21:f4:3a:1c:a0:35:b6:83:b4:68:29:59:
ae:86:f7:d5:f5:8a:6e:71:52:72:cb:30:1a:ab:66:63:dc:f8:
a4:a4:51:98:75:b6:a2:db:e8:a6:df:c4:fb:49:cb:d5:f3:f9:
d3:19:ec:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:03 2024 by rpki-client on console-fra.rpki-client.org