Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/ti-_0C9UD2fRLlk1M1cjmp60RaQ.roa
File: ti-_0C9UD2fRLlk1M1cjmp60RaQ.roa (raw, json)
Hash identifier: q1VlI0l883BRZ7akKPX2kcAmg5UarhhW0ym+zwLdRys=
Subject key identifier: B6:2F:BF:D0:2F:54:0F:67:D1:2E:59:35:33:57:23:9A:9E:B4:45:A4
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 0187B67EE245F5F043AF37186EA7C9CE4C11
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/ti-_0C9UD2fRLlk1M1cjmp60RaQ.roa
Signing time: Tue 25 Apr 2023 03:39:41 +0000
ROA not before: Tue 25 Apr 2023 03:39:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58192
IP address blocks: 185.239.0.0/24 maxlen: 24
5.159.49.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 25 Jul 2023 09:26:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b6:7e:e2:45:f5:f0:43:af:37:18:6e:a7:c9:ce:4c:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Apr 25 03:39:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b62fbfd02f540f67d12e59353357239a9eb445a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a7:da:bd:9e:05:64:73:fa:77:5e:3b:95:8d:
60:3e:8b:3d:4c:ea:5b:80:85:dd:53:5a:31:74:ae:
2f:c0:38:56:9e:9e:a4:69:e3:73:4f:db:94:52:41:
50:7d:2d:49:f6:fc:a4:2c:1e:15:72:11:04:27:99:
99:65:5a:9a:0c:88:4b:4f:ab:d8:ba:27:1a:de:56:
0d:eb:2e:03:3b:12:02:6d:67:20:d0:9f:bd:d7:cd:
71:58:2e:64:44:75:30:9d:23:f8:32:cb:4d:1a:f4:
c9:c8:e7:c4:c5:dd:7d:2c:22:85:75:ff:04:e6:66:
e1:68:14:3f:9b:61:12:68:20:28:f6:3c:92:8e:2c:
a6:09:d5:8b:2d:b0:dd:8d:7e:cd:68:e3:61:77:59:
37:10:9e:17:67:f0:af:1e:ca:36:c2:a2:26:c9:b3:
57:79:14:e9:79:9e:a6:76:5e:f4:3e:70:20:50:4f:
b7:36:74:99:e2:ba:97:3b:56:e1:83:60:9a:1d:07:
28:b2:7d:b2:af:c5:02:4f:90:2f:71:50:65:50:e2:
c9:20:ce:76:ce:60:68:95:f3:40:b3:b9:4f:62:f0:
3f:d0:d3:b3:bd:78:1d:4d:87:37:4f:fa:a4:f6:8e:
d1:65:23:10:27:9c:6b:93:e4:1f:f7:ee:7b:84:f9:
d1:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:2F:BF:D0:2F:54:0F:67:D1:2E:59:35:33:57:23:9A:9E:B4:45:A4
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/ti-_0C9UD2fRLlk1M1cjmp60RaQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.159.49.0/24
185.239.0.0/24
Signature Algorithm: sha256WithRSAEncryption
55:ca:8d:36:36:1a:9c:f4:d4:33:c6:c0:cf:9c:78:a4:75:0a:
60:1e:2f:bf:1f:eb:2b:e7:aa:c8:e2:53:a0:ec:58:76:4b:d7:
ab:4c:88:f2:41:42:1f:28:79:b5:28:8c:f4:33:4d:16:69:3c:
c9:5d:3d:81:59:d0:ed:6c:62:cc:c0:65:94:02:d1:0c:73:30:
72:cf:6f:40:88:93:82:f3:d0:4f:98:0e:31:54:22:09:5a:62:
e7:d4:9e:cd:52:b9:a1:c3:65:32:20:e6:9d:46:f4:db:f3:c7:
40:b1:cd:da:70:34:28:df:3d:82:f7:a1:07:cf:44:d2:25:3c:
b8:83:fa:e6:8f:91:ab:00:cb:a6:b3:eb:9b:2f:92:66:a3:6f:
22:55:7b:fb:b5:ae:b6:63:c3:c7:01:a3:5f:98:7b:b7:6c:a6:
b7:0a:e8:15:47:0a:ba:07:da:1b:97:98:cd:ed:91:c2:16:37:
69:4e:64:66:d2:23:2b:03:11:db:28:55:bc:38:94:07:84:e0:
4b:7e:ea:3e:49:57:3c:b2:28:7c:5d:2b:77:29:46:b4:eb:b9:
e3:cf:24:00:44:61:1f:c6:5d:e9:b5:91:86:9b:bd:65:e7:2c:
f0:29:13:49:5a:93:38:e3:66:71:eb:e4:14:44:a0:42:23:be:
0a:31:f9:e7
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYe2fuJF9fBDrzcYbqfJzkwRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkZGIzOGIzNDNkYTJkMTE5MzA5ZWRhYTE5YzdhNzg4NzAz
MjdlYmUwHhcNMjMwNDI1MDMzOTQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNjJmYmZkMDJmNTQwZjY3ZDEyZTU5MzUzMzU3MjM5YTllYjQ0NWE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKfavZ4FZHP6d147lY1gPos9TOpb
gIXdU1oxdK4vwDhWnp6kaeNzT9uUUkFQfS1J9vykLB4VchEEJ5mZZVqaDIhLT6vY
uica3lYN6y4DOxICbWcg0J+9181xWC5kRHUwnSP4MstNGvTJyOfExd19LCKFdf8E
5mbhaBQ/m2ESaCAo9jySjiymCdWLLbDdjX7NaONhd1k3EJ4XZ/CvHso2wqImybNX
eRTpeZ6mdl70PnAgUE+3NnSZ4rqXO1bhg2CaHQcosn2yr8UCT5AvcVBlUOLJIM52
zmBolfNAs7lPYvA/0NOzvXgdTYc3T/qk9o7RZSMQJ5xrk+Qf9+57hPnRrQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLYvv9AvVA9n0S5ZNTNXI5qetEWkMB8GA1UdIwQY
MBaAFG3bOLND2i0RkwntqhnHp4hwMn6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9jOTYxYTAtNGY1My00MjJhLWI3ZGQt
M2RmYTUxMGQ2YjE2LzEvdGktXzBDOVVEMmZSTGxrMU0xY2ptcDYwUmFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi9jOTYxYTAtNGY1My00MjJhLWI3ZGQtM2RmYTUxMGQ2YjE2
LzEvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABZ8xAwQA
ue8AMA0GCSqGSIb3DQEBCwUAA4IBAQBVyo02Nhqc9NQzxsDPnHikdQpgHi+/H+sr
56rI4lOg7Fh2S9erTIjyQUIfKHm1KIz0M00WaTzJXT2BWdDtbGLMwGWUAtEMczBy
z29AiJOC89BPmA4xVCIJWmLn1J7NUrmhw2UyIOadRvTb88dAsc3acDQo3z2C96EH
z0TSJTy4g/rmj5GrAMums+ubL5Jmo28iVXv7ta62Y8PHAaNfmHu3bKa3CugVRwq6
B9obl5jN7ZHCFjdpTmRm0iMrAxHbKFW8OJQHhOBLfuo+SVc8sih8XSt3KUa067nj
zyQARGEfxl3ptZGGm71l5yzwKRNJWpM442Zx6+QURKBCI74KMfnn
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:51 2024 by rpki-client on console-fra.rpki-client.org