Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/TEduzTMKDKtMAdv3-PBKUl5QPnM.roa
File: TEduzTMKDKtMAdv3-PBKUl5QPnM.roa (raw, json)
Hash identifier: KNqKxVEMEVC2XkhsKB4C2EZYxkC4enAqERvy5H+C2Ko=
Subject key identifier: 4C:47:6E:CD:33:0A:0C:AB:4C:01:DB:F7:F8:F0:4A:52:5E:50:3E:73
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 01914BAE4C9798865EFA585C8789A62D788D
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/TEduzTMKDKtMAdv3-PBKUl5QPnM.roa
Signing time: Tue 13 Aug 2024 12:19:59 +0000
ROA not before: Tue 13 Aug 2024 12:19:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 28064
IP address blocks: 201.77.50.0/24 maxlen: 24
201.77.52.0/24 maxlen: 24
217.76.245.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 15 Oct 2024 05:16:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:4b:ae:4c:97:98:86:5e:fa:58:5c:87:89:a6:2d:78:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Aug 13 12:19:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4c476ecd330a0cab4c01dbf7f8f04a525e503e73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:cd:72:fc:17:c1:5a:77:06:93:ff:f9:5d:bd:
af:21:78:bd:ca:68:2d:aa:25:4b:5d:d2:69:6e:7f:
14:49:64:26:4c:c2:2f:3e:8d:15:71:69:37:92:f6:
b2:6c:c9:4c:ee:d8:41:e5:29:44:d6:24:2b:59:1e:
36:35:dc:15:1d:10:12:ad:64:c7:5c:bd:c6:64:56:
05:d6:d1:1e:06:41:ab:5a:17:82:29:d3:9a:6a:18:
8b:d8:9b:15:8d:70:46:e9:97:ad:f6:39:e8:87:d4:
65:2e:77:ed:23:0a:a4:02:79:09:b3:9c:c1:a8:cd:
e6:65:cb:c8:38:9c:43:5f:7d:52:63:b4:eb:09:0e:
76:04:0a:74:2a:00:b8:99:d5:06:27:43:33:aa:4d:
95:45:f7:68:a8:d8:cf:a7:7b:30:f4:15:72:e5:b4:
3d:d5:cf:0a:b4:34:8a:45:1a:24:9e:e8:1c:7b:78:
5e:43:29:95:5a:53:56:ab:82:b9:31:88:6d:8d:1d:
05:0f:2d:51:5f:dd:60:7b:e2:21:88:19:72:25:63:
aa:8f:8a:eb:32:15:53:7a:4b:00:df:ef:2a:86:84:
e9:64:0b:33:11:0b:97:a2:e4:d0:4c:6b:25:eb:0e:
f0:b1:e1:bd:30:35:4f:2b:78:55:85:cf:2d:4a:fc:
8f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:47:6E:CD:33:0A:0C:AB:4C:01:DB:F7:F8:F0:4A:52:5E:50:3E:73
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/TEduzTMKDKtMAdv3-PBKUl5QPnM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.77.50.0/24
201.77.52.0/24
217.76.245.0/24
Signature Algorithm: sha256WithRSAEncryption
85:d2:c2:3a:71:86:ad:dd:51:f1:25:fb:c6:c5:4a:c8:a9:4f:
4e:2d:4a:eb:02:1c:45:f9:4b:82:2e:1e:28:c7:5d:9b:13:3e:
2f:c7:31:22:0b:fb:0f:cc:a1:1c:89:24:aa:10:ef:e5:1c:b5:
70:6a:03:09:7c:b2:ab:34:80:98:c0:ad:a8:12:e8:35:7b:12:
e9:9c:04:83:5a:bc:b1:26:ce:b8:1f:69:16:c9:db:7f:17:6a:
f0:fc:1d:e4:14:01:ea:6e:9d:ff:8c:a2:f0:c4:50:2a:6d:fa:
d5:7d:9e:c2:20:8d:35:35:3b:53:a5:c5:3f:b3:28:b6:04:a3:
4a:d6:67:61:42:b4:b9:d4:fa:44:d7:94:d4:5e:6f:8c:cf:6c:
be:03:2f:db:82:47:5b:39:40:97:3b:2f:ef:66:ea:ba:9c:6c:
97:22:14:e6:19:31:1e:03:73:9c:4d:97:5f:70:40:69:c6:1d:
03:d8:c3:2c:64:ba:40:ee:fa:53:48:c6:d8:0e:56:ac:41:04:
db:3a:06:ac:1d:45:a8:d3:c9:11:31:e8:8a:7b:fb:54:84:88:
cd:9f:fd:15:3d:24:f3:55:25:79:91:be:d9:8d:1f:48:0e:42:
2a:42:05:5a:34:c0:a6:49:18:2d:fe:1a:04:d6:43:0b:b7:bb:
91:b9:8a:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 15 06:12:56 2024 by rpki-client on console-fra.rpki-client.org