Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/TDorNMepFdGNL4L_O-TslAhx8F4.roa
File: TDorNMepFdGNL4L_O-TslAhx8F4.roa (raw, json)
Hash identifier: QyHRGItWW5eUQa3CXdTBNxbhxqJyqoB/mdd+5SCoaPg=
Subject key identifier: 4C:3A:2B:34:C7:A9:15:D1:8D:2F:82:FF:3B:E4:EC:94:08:71:F0:5E
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0185709586CE318E91C58434169D0EB25C38
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/TDorNMepFdGNL4L_O-TslAhx8F4.roa
Signing time: Mon 02 Jan 2023 03:45:25 +0000
ROA not before: Mon 02 Jan 2023 03:45:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62366
IP address blocks: 146.158.76.0/23 maxlen: 24
95.46.1.0/24 maxlen: 24
93.171.135.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:86:ce:31:8e:91:c5:84:34:16:9d:0e:b2:5c:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:45:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4c3a2b34c7a915d18d2f82ff3be4ec940871f05e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f1:8a:a2:83:3b:08:52:74:f4:08:5c:57:f1:
1d:5f:07:90:93:16:80:c3:98:dc:9f:9b:16:e7:24:
22:da:0b:67:a5:8f:9c:19:4c:3d:e8:88:b5:c8:48:
b8:cc:14:7c:58:b9:2d:bc:2d:bc:3e:1c:f8:8d:93:
64:bd:53:35:d5:5e:4e:ff:96:c3:ac:fe:b6:a6:25:
f6:b1:05:9b:9e:5e:e2:dc:7e:8a:83:ef:a9:d1:af:
7d:9e:56:19:04:46:65:ba:74:9b:2f:96:ee:57:e3:
33:d2:5e:ca:fa:a0:39:81:7c:77:a6:57:9d:ba:68:
30:85:d0:27:87:ec:db:61:e4:04:22:2a:8b:d9:f7:
02:2e:3f:c0:39:f5:d2:00:a8:f8:09:35:7c:0d:7d:
d3:5c:75:47:a9:ee:08:78:d8:bf:7e:40:5d:ff:8d:
f9:18:86:05:1d:78:68:a1:74:e2:96:f9:b5:e8:29:
90:2d:bb:f8:7e:d7:aa:f8:4e:d6:c6:88:18:d9:f7:
0f:f5:5e:66:1d:45:5d:87:92:be:04:81:a4:77:32:
a4:16:ae:84:d1:52:37:ad:b1:cd:c7:08:02:5a:30:
2b:d2:51:2b:74:36:6d:1c:85:e4:77:80:b6:8b:32:
d6:4b:b9:3a:b4:f9:71:b1:a2:d8:11:65:77:51:d0:
d8:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:3A:2B:34:C7:A9:15:D1:8D:2F:82:FF:3B:E4:EC:94:08:71:F0:5E
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/TDorNMepFdGNL4L_O-TslAhx8F4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.171.135.0/24
95.46.1.0/24
146.158.76.0/23
Signature Algorithm: sha256WithRSAEncryption
21:1c:85:1f:e1:74:2c:40:c5:e7:6b:53:91:56:dc:32:20:35:
1c:bb:db:a4:ec:4a:9d:16:b6:cf:1b:25:ac:6f:ee:09:43:15:
7d:75:95:0d:f2:8d:f6:90:c6:61:6b:bd:75:d3:0c:f7:02:63:
56:87:2c:8e:3f:1a:ef:9e:97:9c:5d:64:f1:98:a4:39:df:9d:
49:18:19:75:2b:3f:12:0a:8c:18:a9:08:5e:9d:55:08:e1:5e:
80:4d:57:86:a4:93:0a:fe:8b:a2:e3:7f:80:b5:1f:be:19:2a:
90:86:6a:3d:28:89:59:ad:5b:26:fd:33:50:d1:b4:56:e5:9b:
1f:61:14:ba:9d:dd:38:e9:eb:2b:dd:54:44:41:c7:2d:5b:c5:
3f:04:0f:2b:e8:88:66:1f:83:42:b9:b5:9b:f0:5a:79:9a:ba:
4d:f6:a4:94:67:dc:4e:33:a6:38:af:48:06:12:28:f7:91:2a:
78:12:34:10:d0:a8:ce:47:25:16:fc:ae:f5:2b:21:3e:ab:c6:
f5:02:37:6d:ce:4e:de:18:1f:8c:15:dd:3b:90:b6:8c:2d:cb:
8f:f4:32:8e:60:14:5b:a1:b1:8d:ee:44:98:fd:78:c2:50:ff:
cb:ae:06:22:27:ac:7c:8d:ce:ec:e1:ce:f1:59:5e:6f:aa:9e:
e8:eb:76:c9
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYVwlYbOMY6RxYQ0Fp0Oslw4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjMwMTAyMDM0NTI1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YzNhMmIzNGM3YTkxNWQxOGQyZjgyZmYzYmU0ZWM5NDA4NzFmMDVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvGKooM7CFJ09AhcV/EdXweQkxaA
w5jcn5sW5yQi2gtnpY+cGUw96Ii1yEi4zBR8WLktvC28Phz4jZNkvVM11V5O/5bD
rP62piX2sQWbnl7i3H6Kg++p0a99nlYZBEZlunSbL5buV+Mz0l7K+qA5gXx3pled
umgwhdAnh+zbYeQEIiqL2fcCLj/AOfXSAKj4CTV8DX3TXHVHqe4IeNi/fkBd/435
GIYFHXhooXTilvm16CmQLbv4fteq+E7WxogY2fcP9V5mHUVdh5K+BIGkdzKkFq6E
0VI3rbHNxwgCWjAr0lErdDZtHIXkd4C2izLWS7k6tPlxsaLYEWV3UdDY2QIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFEw6KzTHqRXRjS+C/zvk7JQIcfBeMB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvVERvck5NZXBGZEdOTDRMX08tVHNsQWh4OEY0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAXauHAwQA
Xy4BAwQBkp5MMA0GCSqGSIb3DQEBCwUAA4IBAQAhHIUf4XQsQMXna1ORVtwyIDUc
u9uk7EqdFrbPGyWsb+4JQxV9dZUN8o32kMZha7110wz3AmNWhyyOPxrvnpecXWTx
mKQ5351JGBl1Kz8SCowYqQhenVUI4V6ATVeGpJMK/oui43+AtR++GSqQhmo9KIlZ
rVsm/TNQ0bRW5ZsfYRS6nd046esr3VREQcctW8U/BA8r6IhmH4NCubWb8Fp5mrpN
9qSUZ9xOM6Y4r0gGEij3kSp4EjQQ0KjORyUW/K71KyE+q8b1Ajdtzk7eGB+MFd07
kLaMLcuP9DKOYBRbobGN7kSY/XjCUP/LrgYiJ6x8jc7s4c7xWV5vqp7o63bJ
-----END CERTIFICATE-----
Generated at Tue Jan 2 17:34:31 2024 by rpki-client on console-fra.rpki-client.org