Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/TLJLdj-oRrXOZdnY0iuVk8N23zE.roa
File: TLJLdj-oRrXOZdnY0iuVk8N23zE.roa (raw, json)
Hash identifier: JaGPy2bKGneI2E/DT9eK++nHY0nnNinX083+1UCTcDA=
Subject key identifier: 4C:B2:4B:76:3F:A8:46:B5:CE:65:D9:D8:D2:2B:95:93:C3:76:DF:31
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 018EDC3D469BCEEE17BB42F941B467B6B777
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/TLJLdj-oRrXOZdnY0iuVk8N23zE.roa
Signing time: Sun 14 Apr 2024 10:53:06 +0000
ROA not before: Sun 14 Apr 2024 10:53:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201949
IP address blocks: 212.16.81.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 13 May 2024 10:58:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:dc:3d:46:9b:ce:ee:17:bb:42:f9:41:b4:67:b6:b7:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Apr 14 10:53:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4cb24b763fa846b5ce65d9d8d22b9593c376df31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:23:86:a6:45:5f:ca:8b:9a:d0:ed:ab:4d:b4:
56:d6:f9:6f:e1:94:dd:ca:8f:c2:20:61:e5:6d:31:
86:52:ab:0c:39:dc:74:6d:4f:db:b3:0f:d7:0b:ba:
5b:39:f3:8e:8f:83:5f:90:bf:60:0f:e4:8c:a6:95:
49:41:6a:e0:6d:52:9d:4c:9c:cb:ca:44:69:c8:d6:
93:4d:8b:12:d9:f9:14:83:c8:98:31:46:59:8f:c2:
ad:7e:8d:30:b9:14:95:e9:1f:e3:4b:4d:0b:14:3a:
dc:27:fc:13:5c:02:d6:14:d4:ac:6b:0f:20:ef:1e:
42:94:65:ec:19:14:95:84:fa:64:af:f0:3b:ef:c4:
65:50:06:60:7b:33:2b:fe:b8:03:c6:e5:45:f8:a8:
5d:36:30:aa:2a:73:80:8e:e5:98:d0:3e:9d:b3:55:
1d:01:b3:cf:70:a1:09:85:4f:5e:4f:a6:7b:a9:79:
77:e1:44:44:d0:56:1e:82:7a:08:4d:cd:97:dd:41:
52:47:d8:7b:4f:39:e1:8a:bb:b9:d5:29:87:95:87:
7f:e4:de:35:84:7f:9f:5e:8e:0e:56:49:6e:fc:37:
0a:47:12:17:a1:7e:29:b2:6a:14:06:34:e6:9c:46:
99:2e:d3:57:d4:96:5a:bf:a1:6a:7c:14:ee:f4:69:
1b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:B2:4B:76:3F:A8:46:B5:CE:65:D9:D8:D2:2B:95:93:C3:76:DF:31
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/TLJLdj-oRrXOZdnY0iuVk8N23zE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.16.81.0/24
Signature Algorithm: sha256WithRSAEncryption
af:c0:5d:0f:c5:af:da:7e:53:25:4a:7f:ee:ad:ce:57:e2:39:
d6:b2:9e:da:ce:6c:97:f5:eb:60:69:f2:16:51:b8:6a:5f:d8:
bd:7e:04:f8:be:1f:a2:fe:dc:ad:e0:ec:2b:36:4c:8b:ed:d2:
5c:58:b7:2c:a1:ff:bf:3d:d7:87:3c:0b:cd:a4:b7:bf:c5:a4:
75:7a:c0:91:48:d4:1b:76:79:c4:92:ed:a5:59:ef:d3:89:4f:
b7:86:30:15:4b:30:05:62:4f:14:6c:c1:0d:d7:51:35:bc:f0:
40:b2:97:bc:27:c2:d8:ff:15:ec:1f:cc:29:e5:db:4e:af:30:
aa:29:7d:96:ee:5f:4a:4c:7a:37:01:35:32:e0:b3:b6:ab:54:
92:76:96:b6:a2:e6:79:e6:6a:84:90:9e:bb:ca:97:ce:e8:0f:
a2:cf:2c:f1:7f:3e:2e:66:ad:44:14:2b:9f:b3:08:6c:6f:df:
50:30:0a:bf:99:3b:ce:98:7a:ab:dd:07:dc:13:f0:bc:3a:15:
d6:7f:d9:3b:63:0f:28:67:3a:7f:b2:0f:31:76:e9:3a:9e:3a:
17:f7:17:c2:d0:94:6f:57:e9:ae:ac:c6:45:be:0c:48:24:5c:
16:aa:0b:60:e8:b5:a2:36:2c:b1:81:49:b1:93:2b:a6:5f:38:
48:35:29:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:06 2024 by rpki-client on console-ams.rpki-client.org