Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/TkqIXJ3uCAz-ieTJbj4Sx-TClOw.roa
File: TkqIXJ3uCAz-ieTJbj4Sx-TClOw.roa (raw, json)
Hash identifier: oQvlvQRPUMC6E1L/pcc2W4wd4SPbL3ePBTIaSGVzjVU=
Subject key identifier: 4E:4A:88:5C:9D:EE:08:0C:FE:89:E4:C9:6E:3E:12:C7:E4:C2:94:EC
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01862571550C91B540560E4F531EEAB2ABF9
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/TkqIXJ3uCAz-ieTJbj4Sx-TClOw.roa
Signing time: Mon 06 Feb 2023 06:37:09 +0000
ROA not before: Mon 06 Feb 2023 06:37:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61138
IP address blocks: 84.32.57.0/24 maxlen: 24
88.216.104.0/24 maxlen: 24
84.32.110.0/24 maxlen: 24
84.32.111.0/24 maxlen: 24
88.216.130.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 13 Feb 2023 06:22:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:25:71:55:0c:91:b5:40:56:0e:4f:53:1e:ea:b2:ab:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Feb 6 06:37:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4e4a885c9dee080cfe89e4c96e3e12c7e4c294ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:81:33:aa:6e:0a:c1:29:f2:12:bd:f0:17:e8:
99:d2:04:e4:06:e4:a9:5f:3f:cc:06:17:e6:52:dd:
7f:94:d3:d6:a0:42:0e:b0:62:f9:e7:df:1f:84:6e:
64:77:8a:74:18:2b:0e:cf:4a:64:ac:a1:7b:b3:6e:
ff:2c:3f:44:c9:e1:26:8c:af:2a:48:27:51:e7:a7:
61:bf:eb:3a:9d:ae:f4:53:dc:55:bd:9f:cb:f5:d0:
b9:ad:cc:33:7d:5d:e9:e6:c8:2e:e1:77:75:36:8a:
37:81:1f:09:da:a0:12:9c:85:2d:1c:f5:19:99:c9:
98:64:08:2e:8e:6d:a6:81:0e:8c:be:34:46:57:40:
19:8d:e1:30:c2:e6:69:7a:df:49:a7:6f:8a:cb:08:
cf:a6:53:e0:0f:c9:37:0d:26:dd:f0:11:56:0f:3b:
1d:f7:0a:37:2b:d9:94:f2:4f:b3:5b:0c:75:df:14:
b1:d7:81:b5:d6:8d:5e:9c:0f:8c:59:60:06:c5:5c:
20:de:ac:e0:f1:c1:77:c8:96:2c:9c:81:a5:a6:12:
b7:ec:13:95:17:0f:ef:6c:e9:5d:fd:f0:18:c6:d4:
a3:02:0e:c2:b4:17:71:25:8e:5d:01:3f:ce:d8:8a:
09:f5:03:46:ad:9c:bc:35:bb:fc:86:75:dc:fe:28:
12:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:4A:88:5C:9D:EE:08:0C:FE:89:E4:C9:6E:3E:12:C7:E4:C2:94:EC
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/TkqIXJ3uCAz-ieTJbj4Sx-TClOw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.57.0/24
84.32.110.0/23
88.216.104.0/24
88.216.130.0/24
Signature Algorithm: sha256WithRSAEncryption
41:fc:40:9c:b4:bd:2c:50:70:0c:8f:76:5d:ae:b0:6a:a3:a8:
cd:55:0b:f6:c4:62:91:13:19:cb:cd:9b:54:80:0e:4f:80:d7:
0d:5f:a7:b2:c3:0c:8e:fd:99:b3:ae:8f:68:41:e1:43:92:db:
fd:d7:c6:08:94:77:0d:db:ca:48:41:eb:b6:cf:b9:0b:e0:91:
e4:8b:95:c0:37:a9:36:ba:4c:fb:a7:f5:38:5b:c6:ae:1a:f0:
93:87:22:7b:c5:fc:0c:fc:d9:c5:ab:ab:ce:aa:dc:fa:89:b9:
a8:3c:d4:21:2c:8b:e8:91:d2:fd:99:3b:5c:08:38:c1:6f:97:
41:76:c9:b9:11:4c:1e:d2:b2:05:ae:52:b1:b6:44:dd:90:56:
2f:e5:d4:68:5d:82:f6:44:6d:c6:27:89:99:e4:3f:86:86:00:
25:b0:c1:ca:a8:c9:20:f7:2a:42:d9:a0:e7:4f:77:74:c9:c0:
6b:cc:10:d7:5b:e0:d5:bb:e6:de:3a:5d:f1:19:18:c0:36:c9:
31:a8:db:08:e2:4b:c5:73:f0:e4:7b:12:25:72:00:1a:e6:8b:
5a:c7:db:98:db:37:fa:68:0c:38:6c:20:d8:04:01:b9:d2:8a:
24:12:ae:8d:a6:dc:26:16:1d:b4:b0:30:bf:2a:d6:76:ff:35:
8e:30:6d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:28 2024 by rpki-client on console-ams.rpki-client.org