Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tSMR2Y_fEAIaBG1vSxIf95PBYtk.roa
File: tSMR2Y_fEAIaBG1vSxIf95PBYtk.roa (raw, json)
Hash identifier: jjLz6Nf+SJYvSgDJABDchetlZNJlU2RL2MwnRd8Ul04=
Subject key identifier: B5:23:11:D9:8F:DF:10:02:1A:04:6D:6F:4B:12:1F:F7:93:C1:62:D9
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 018570399054CF52A45A0F6C3E7BD11D9412
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tSMR2Y_fEAIaBG1vSxIf95PBYtk.roa
Signing time: Mon 02 Jan 2023 02:04:58 +0000
ROA not before: Mon 02 Jan 2023 02:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44966
IP address blocks: 212.16.71.0/24 maxlen: 32
Validation: Failed, certificate revoked on Mon 13 Nov 2023 07:28:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:39:90:54:cf:52:a4:5a:0f:6c:3e:7b:d1:1d:94:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Jan 2 02:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b52311d98fdf10021a046d6f4b121ff793c162d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:61:d4:83:db:2d:86:f3:74:a2:44:70:df:58:
d8:29:75:56:d4:52:7a:26:3c:91:b3:d2:29:c3:20:
15:25:e4:c2:fd:1c:a8:f8:13:8d:62:44:1d:eb:69:
a4:ba:9c:20:36:ff:d3:25:7c:1b:0e:81:02:82:07:
c3:cd:51:8a:72:89:f4:3e:3e:8d:5d:6a:c2:1c:36:
84:03:de:46:df:b0:e7:e1:88:59:49:06:67:be:81:
fb:8c:ed:88:1d:ae:57:3b:1f:3c:ef:83:4b:51:40:
18:1f:9d:1c:bb:7b:cb:18:79:61:5f:60:3c:d1:8c:
a7:b1:f3:16:9c:ac:12:53:7a:2d:e4:1e:9d:f4:3c:
c6:aa:4d:f0:7a:c7:0e:7a:de:06:94:89:91:0f:dd:
db:2e:c9:71:bf:81:d0:51:c0:bc:83:96:ed:48:98:
cc:ec:fe:86:0a:32:e4:f1:d7:c6:0d:45:0f:e9:a3:
cf:48:99:36:bf:b3:31:64:e4:75:39:68:53:2a:79:
c5:b3:b3:0b:d8:a0:b5:7c:03:08:37:5e:2d:72:c8:
49:69:6a:72:3d:52:22:74:52:a8:49:7d:de:85:57:
5c:06:32:89:b4:3f:4f:12:43:4c:0a:d1:15:4e:dd:
58:52:e1:18:87:f2:39:22:dc:12:ce:bd:db:96:18:
04:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:23:11:D9:8F:DF:10:02:1A:04:6D:6F:4B:12:1F:F7:93:C1:62:D9
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tSMR2Y_fEAIaBG1vSxIf95PBYtk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.16.71.0/24
Signature Algorithm: sha256WithRSAEncryption
be:12:a7:52:9b:09:45:e2:21:77:04:3a:1f:4c:9a:a6:40:36:
87:4c:c8:ce:45:c6:a0:da:58:31:9a:92:b4:28:91:54:22:27:
9b:2a:28:65:05:e0:41:d2:5a:7e:23:83:aa:cf:c1:d3:2e:b7:
72:3d:32:d7:c3:2e:f9:4e:e3:b9:ec:31:64:b3:df:6b:d4:97:
76:b7:44:72:96:77:06:49:31:9a:63:56:63:0e:16:28:26:01:
b0:49:01:d4:43:24:7f:eb:b3:e6:5f:42:0b:7e:2b:3d:f3:95:
6c:48:b3:d3:22:d2:69:a3:df:bd:12:d1:c6:89:2c:08:c0:37:
0c:63:23:64:df:96:f9:e5:7b:c2:7b:6a:7f:53:d7:b9:50:0c:
3c:1c:da:95:68:1b:ec:10:8a:4f:ac:23:db:bf:0b:53:18:97:
4c:b1:56:22:44:8e:6a:eb:22:31:61:2b:84:06:70:f4:d6:df:
3d:be:ba:e3:fa:98:47:f4:e1:01:36:4f:43:18:dd:b0:74:5f:
2f:a4:83:ac:4c:2b:45:5a:dc:6e:a3:f3:68:69:f0:b3:99:9c:
c2:63:c1:c5:cb:06:3a:54:12:d4:64:13:64:d1:db:8d:fb:6a:
42:af:57:dd:7a:f6:08:da:b4:77:f8:83:80:12:2b:5b:e0:73:
1d:6f:2a:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:24 2024 by rpki-client on console-fra.rpki-client.org