Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/TbofytTMkmJl5P0MivE-mVUzas4.roa
File: TbofytTMkmJl5P0MivE-mVUzas4.roa (raw, json)
Hash identifier: eju/8AyT+aV/xaUsT3YxWQ/AX1jDyPYRxJJizD4S++k=
Subject key identifier: 4D:BA:1F:CA:D4:CC:92:62:65:E4:FD:0C:8A:F1:3E:99:55:33:6A:CE
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 01921DE21591CFB172EEF0F207351FB3971B
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/TbofytTMkmJl5P0MivE-mVUzas4.roa
Signing time: Mon 23 Sep 2024 07:56:48 +0000
ROA not before: Mon 23 Sep 2024 07:56:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 137409
IP address blocks: 14.102.62.0/24 maxlen: 24
167.160.28.0/24 maxlen: 24
198.55.31.0/24 maxlen: 24
203.188.166.0/24 maxlen: 24
203.188.174.0/24 maxlen: 24
203.188.175.0/24 maxlen: 24
203.188.176.0/24 maxlen: 24
203.188.177.0/24 maxlen: 24
203.188.178.0/24 maxlen: 24
203.188.179.0/24 maxlen: 24
203.188.180.0/24 maxlen: 24
203.188.181.0/24 maxlen: 24
203.188.182.0/24 maxlen: 24
203.188.183.0/24 maxlen: 24
203.188.184.0/24 maxlen: 24
203.188.185.0/24 maxlen: 24
203.188.186.0/24 maxlen: 24
203.188.187.0/24 maxlen: 24
203.188.188.0/24 maxlen: 24
203.188.189.0/24 maxlen: 24
203.188.190.0/24 maxlen: 24
203.188.191.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 23 Sep 2024 09:41:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:1d:e2:15:91:cf:b1:72:ee:f0:f2:07:35:1f:b3:97:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Sep 23 07:56:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4dba1fcad4cc926265e4fd0c8af13e9955336ace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d5:ff:ce:75:64:8b:2b:63:d2:97:51:c1:95:
2d:66:97:a4:0d:73:22:27:c1:67:be:d8:ee:6b:91:
67:c3:a7:75:fa:3e:86:39:30:03:26:8e:c2:cf:85:
3d:72:71:d4:6b:57:13:41:d3:aa:97:d0:1b:91:62:
27:2c:a7:78:e0:23:ff:ee:9c:7f:e5:41:22:b5:24:
3c:31:94:52:4f:25:85:5a:b9:7a:bc:46:11:d8:c6:
78:4b:8b:f2:89:eb:53:41:fb:e7:c0:dd:f0:5e:3c:
7e:2b:5d:96:b4:2d:04:72:af:d7:63:22:60:5d:1f:
b6:cd:5f:56:e1:be:57:44:11:72:1e:3e:89:16:37:
48:6f:b9:c8:9b:64:a4:8d:75:35:96:e0:db:6c:2d:
9f:af:6c:6f:ff:4b:a7:6b:59:a1:05:3e:65:7c:a1:
1f:44:10:fa:86:13:76:96:ac:1d:af:cf:a2:8a:6f:
34:54:72:e6:9f:19:e3:aa:52:4d:64:23:7d:8c:cf:
ff:a4:af:5c:6d:aa:00:65:b8:33:bf:6c:03:a9:b9:
0f:64:2c:a8:b4:48:1e:65:6d:53:51:a0:3a:a2:4c:
77:cf:26:83:17:ea:a2:a0:f7:55:e9:c8:62:b4:8e:
a8:a8:4a:01:50:72:88:55:ac:34:97:c6:b6:d7:a4:
07:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:BA:1F:CA:D4:CC:92:62:65:E4:FD:0C:8A:F1:3E:99:55:33:6A:CE
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/TbofytTMkmJl5P0MivE-mVUzas4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.62.0/24
167.160.28.0/24
198.55.31.0/24
203.188.166.0/24
203.188.174.0-203.188.191.255
Signature Algorithm: sha256WithRSAEncryption
43:d4:a3:e7:f9:19:01:96:c6:9b:7f:fa:d4:c2:d3:a8:07:5e:
0d:37:68:ca:ab:58:85:fd:ac:b7:79:ad:74:ae:3e:bc:c6:8d:
7c:7b:bb:04:aa:0b:3a:e5:1d:a9:85:fb:82:95:de:9b:ca:48:
aa:23:6c:d0:69:0a:52:05:cf:55:91:fc:b0:9d:9f:61:b6:2f:
ee:3b:42:23:ef:cc:a9:d0:cb:af:27:5a:82:0b:91:c2:7b:5a:
ba:42:d6:93:c8:25:ab:ba:7d:63:2a:e2:94:74:60:86:17:2b:
db:cb:18:e0:73:a5:dc:83:a2:46:0a:ad:c1:66:56:24:97:1b:
19:43:6e:95:2d:16:a5:a9:42:4e:20:9d:ce:fa:02:38:1e:cc:
64:ac:c3:d8:60:e6:36:3f:3c:2c:af:f4:e6:7c:30:75:a7:de:
02:cd:60:eb:1c:a8:6c:08:17:38:93:07:97:b9:f1:ad:72:c9:
ef:f0:8c:92:a3:b5:e7:0f:63:6d:03:35:2a:96:55:c9:c1:da:
6b:20:13:ee:d0:5a:50:e4:4f:d9:4b:7f:5e:c6:bf:14:7b:15:
0c:7d:08:b9:24:7f:9b:63:65:a1:2c:a4:68:d9:89:39:a9:66:
6f:1f:23:d9:05:d4:24:a0:7c:08:91:68:77:ec:07:13:63:29:
a5:13:f9:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 23 14:19:12 2024 by rpki-client on console-ams.rpki-client.org