Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Tj9NKn832N4p9AXAxOezH0hSZPU.roa
File: Tj9NKn832N4p9AXAxOezH0hSZPU.roa (raw, json)
Hash identifier: yx6qeElEPkmRdAlDq94FbLtlrDZq8FBBTR5gUV+3WiI=
Subject key identifier: 4E:3F:4D:2A:7F:37:D8:DE:29:F4:05:C0:C4:E7:B3:1F:48:52:64:F5
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018AF602F5F98C734EDFBC5ED67970B2E32F
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Tj9NKn832N4p9AXAxOezH0hSZPU.roa
Signing time: Tue 03 Oct 2023 14:48:23 +0000
ROA not before: Tue 03 Oct 2023 14:48:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60117
IP address blocks: 89.37.193.0/24 maxlen: 24
94.177.51.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 10 Oct 2023 10:35:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f6:02:f5:f9:8c:73:4e:df:bc:5e:d6:79:70:b2:e3:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Oct 3 14:48:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4e3f4d2a7f37d8de29f405c0c4e7b31f485264f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:13:d0:b4:90:50:51:2a:40:60:16:d1:ed:1c:
4e:ff:03:d1:f5:da:ca:68:0f:c1:c2:a0:af:a6:aa:
2f:94:f7:54:c3:1f:62:55:7b:6f:e8:0a:e2:56:a1:
5a:dd:ec:6c:d8:11:2e:1d:08:60:7c:7e:7c:e2:a0:
b0:1d:37:f8:bd:e3:51:97:d7:12:44:52:80:d5:70:
98:18:45:0c:88:c4:b6:b3:e4:6d:d4:2c:4d:12:4d:
7b:36:6f:0f:e0:56:ff:46:de:f0:24:a2:16:dd:f3:
7b:86:3c:4c:31:3a:ab:24:58:c5:12:35:4c:29:77:
dd:fd:c0:ee:23:70:fc:a3:db:3d:ce:71:ed:3c:4c:
d8:11:eb:41:7d:06:e5:cf:6e:a5:ad:c4:f5:6e:f7:
3c:98:26:bc:71:25:f7:a5:49:3b:ea:e0:38:0d:bf:
7b:03:a1:0a:3a:0e:bb:32:e8:cd:1b:04:76:d6:79:
37:e2:c5:8e:11:c5:2a:ba:51:4b:4e:79:b1:93:13:
2e:8f:f6:3a:f9:f7:84:e7:a4:cf:86:02:57:b1:7a:
dd:f4:56:89:56:24:4e:14:cf:21:47:09:a8:04:03:
42:18:1e:24:ca:23:82:6e:2f:a4:20:45:6f:05:ed:
dd:35:d1:15:d4:48:c0:4f:ee:1a:f4:af:4e:56:5a:
0c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:3F:4D:2A:7F:37:D8:DE:29:F4:05:C0:C4:E7:B3:1F:48:52:64:F5
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Tj9NKn832N4p9AXAxOezH0hSZPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.37.193.0/24
94.177.51.0/24
Signature Algorithm: sha256WithRSAEncryption
00:fb:43:50:db:af:aa:8a:a4:3a:7d:0c:35:87:a0:f7:e9:29:
de:5d:50:2f:e3:8f:45:1f:e8:b9:ca:78:71:bd:fb:6b:2a:69:
33:83:b9:ae:8a:07:e8:c4:72:83:37:c9:d2:1a:23:49:d1:80:
81:38:75:86:4f:43:e5:83:cb:29:f3:c1:aa:8e:3e:a8:15:19:
c9:20:54:7b:de:1e:e7:bc:fb:6d:6d:29:1e:e2:a7:78:b4:7d:
28:96:0c:83:e3:4e:77:51:53:fd:80:25:bc:29:2b:69:ca:6e:
8f:29:59:f6:f3:27:57:84:83:2b:06:42:2a:9d:97:63:a9:ec:
91:ed:2b:88:7c:2b:5f:b5:40:dc:e5:bf:7f:b3:4f:bb:c6:4c:
99:55:8c:40:72:2c:65:e1:5b:c5:32:ca:cf:ea:ff:b8:57:dd:
a0:2a:45:ed:a4:07:99:57:f6:11:bd:81:ce:5d:76:cf:9f:1c:
e1:61:59:b8:67:d6:a5:d3:ec:34:8d:d5:54:81:03:ba:25:fc:
45:46:1b:9e:ce:91:69:f6:bc:d8:26:56:72:37:b3:2f:be:71:
34:43:76:a3:1a:99:52:bb:02:a4:af:9e:99:fc:c5:a8:a2:98:
76:dd:2a:4e:c6:2f:3a:0f:32:a0:68:cb:30:82:7c:4b:23:b6:
b9:81:68:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:13 2024 by rpki-client on console-ams.rpki-client.org