Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/TkJ5b6efsz9edAGRkrRVawgUoJA.roa
File: TkJ5b6efsz9edAGRkrRVawgUoJA.roa (raw, json)
Hash identifier: tllR0XXLyLo7r/VCoi1r5piTZpw2ulgCXewoFpmGy7A=
Subject key identifier: 4E:42:79:6F:A7:9F:B3:3F:5E:74:01:91:92:B4:55:6B:08:14:A0:90
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 01856ED4D78ECBD98F414D73C326A71578FA
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/TkJ5b6efsz9edAGRkrRVawgUoJA.roa
Signing time: Sun 01 Jan 2023 19:35:20 +0000
ROA not before: Sun 01 Jan 2023 19:35:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207136
IP address blocks: 94.198.44.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:d7:8e:cb:d9:8f:41:4d:73:c3:26:a7:15:78:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 1 19:35:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4e42796fa79fb33f5e74019192b4556b0814a090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:dd:07:bc:aa:ed:e4:92:01:03:5c:2b:08:df:
1d:59:a9:eb:e7:08:5c:4b:cf:7f:b6:82:6b:41:71:
35:7c:fd:7f:c6:58:45:c7:d9:76:46:ea:c7:76:21:
9f:c8:19:3d:da:4d:2b:0a:e6:76:9a:ae:72:43:22:
20:c1:82:ab:d4:c0:2a:5e:c9:b0:24:a5:ad:bb:7f:
b1:ff:77:2b:fb:d3:d5:51:ac:c9:4d:37:c9:56:cf:
13:b9:f3:87:9f:dc:66:79:da:b1:fe:4b:8b:4b:1b:
56:ba:51:f6:d9:33:fb:8b:98:bf:4c:f5:97:92:59:
12:f3:2b:97:f3:89:33:6e:29:a6:a2:91:e3:9d:7e:
a9:5e:48:a1:9a:7e:2f:58:d4:21:eb:46:28:13:0b:
49:88:1f:0e:4f:36:9e:1d:96:be:41:dd:38:60:fb:
0a:24:d6:b3:01:e0:bf:50:a7:30:f6:ee:52:32:c3:
d7:e7:47:0d:0b:5e:f7:df:c8:36:2c:e4:8b:75:0b:
cb:00:21:25:ac:d5:3c:64:da:94:e1:71:8f:b8:c0:
51:1c:4b:41:2f:61:a4:a7:b1:29:a3:1b:b6:c7:d0:
75:e3:d3:db:30:2f:47:d4:01:c8:22:7c:da:17:63:
98:27:65:44:ee:b8:15:46:37:13:c9:d8:54:41:fd:
9d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:42:79:6F:A7:9F:B3:3F:5E:74:01:91:92:B4:55:6B:08:14:A0:90
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/TkJ5b6efsz9edAGRkrRVawgUoJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.198.44.0/24
Signature Algorithm: sha256WithRSAEncryption
54:6c:f1:83:4b:cb:2c:31:d2:22:e2:1e:60:f5:e2:86:b8:d1:
f8:f6:b2:23:5e:79:10:fd:3b:b6:be:1a:06:a5:87:a1:2d:8a:
8f:90:dc:b3:15:20:17:0a:f4:99:cc:cf:51:b4:c7:b2:f4:73:
54:03:6a:87:a6:7c:b1:b1:32:6f:32:e1:de:3c:29:5e:d4:62:
d3:60:c8:e5:fa:5a:6e:08:5e:57:65:e5:8c:75:64:97:7d:57:
67:06:aa:2a:02:5b:61:25:97:15:fb:bb:b3:fe:e9:2b:55:c4:
59:7a:64:a2:1b:5a:34:d7:34:fa:4c:cc:7d:bf:05:3b:65:2a:
5e:9d:0b:2f:11:43:e4:96:bc:99:94:d7:f9:59:c6:43:18:66:
16:17:f0:f1:fa:f6:19:03:c1:37:03:ce:a3:be:8e:a9:39:f8:
11:6a:0f:32:d8:8c:40:9c:89:aa:8d:70:07:7b:03:0c:25:f7:
89:15:04:7b:a2:6b:5c:4b:76:2a:9f:05:39:61:ed:a7:22:82:
ae:8f:b1:a5:5c:8b:f2:64:91:f3:51:85:13:ec:85:e7:80:14:
84:6e:c6:c2:b8:db:83:15:05:e8:dc:11:3c:34:75:13:93:c8:
3b:ed:08:f5:dc:4a:fe:c9:f5:96:4d:14:66:9c:60:e6:44:4a:
26:65:9c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:25:47 2024 by rpki-client on console-fra.rpki-client.org