Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/t8t_TK5-ZKE89T_lOba3PNfhSo4.roa
File: t8t_TK5-ZKE89T_lOba3PNfhSo4.roa (raw, json)
Hash identifier: PIvssPasrLXw7YzhV8Nrx912cMJrw4sDUDzUq+W2MnY=
Subject key identifier: B7:CB:7F:4C:AE:7E:64:A1:3C:F5:3F:E5:39:B6:B7:3C:D7:E1:4A:8E
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018BD7CF7F578BFE4CCC57129CCAF26FB0E6
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/t8t_TK5-ZKE89T_lOba3PNfhSo4.roa
Signing time: Thu 16 Nov 2023 11:06:21 +0000
ROA not before: Thu 16 Nov 2023 11:06:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60117
IP address blocks: 2.57.241.0/24 maxlen: 24
89.36.140.0/24 maxlen: 24
94.177.51.0/24 maxlen: 24
94.176.214.0/24 maxlen: 24
62.192.152.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 17 Nov 2023 10:22:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d7:cf:7f:57:8b:fe:4c:cc:57:12:9c:ca:f2:6f:b0:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Nov 16 11:06:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b7cb7f4cae7e64a13cf53fe539b6b73cd7e14a8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:0a:35:78:98:11:a4:b9:3c:e1:14:f8:24:66:
88:33:b1:96:54:60:71:13:6f:cf:c0:95:c4:59:8e:
ca:e1:1a:6e:db:d7:f5:17:a2:ac:56:7b:04:3d:2f:
b5:87:7a:e1:01:5e:3d:39:91:c3:e1:5d:c5:45:e5:
22:65:f2:fe:bc:53:45:3e:23:09:0b:d2:38:75:54:
4c:fa:9e:78:1a:3d:a9:d3:0a:b7:e2:7e:f1:cb:6c:
68:4b:dc:0d:9c:b5:c2:57:d0:37:41:c0:ed:d2:32:
fb:ca:3c:d9:d6:06:1e:c9:7a:21:1e:bc:d5:b6:89:
c9:27:ef:6a:18:0a:b0:a0:ad:67:14:13:c8:e7:23:
db:1a:b8:c8:30:47:85:0f:89:4e:f7:f5:0f:ef:f1:
76:1e:00:09:8b:24:01:c5:4d:c3:af:99:34:8b:88:
06:8f:e8:c9:f0:f1:2a:ba:ff:3e:4e:d3:89:da:86:
ba:e9:ec:06:1e:ec:a8:67:1e:6e:44:8f:42:31:65:
94:83:3a:68:8b:bf:83:05:8c:20:57:b7:3f:e6:d5:
00:2f:c8:51:48:77:a0:5b:4f:e2:4c:e7:28:39:45:
96:d3:e8:07:35:89:dd:3b:4b:2a:e7:64:41:70:a1:
a9:6c:6f:f1:f8:90:cb:88:1a:be:b8:c7:e3:5c:08:
c6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:CB:7F:4C:AE:7E:64:A1:3C:F5:3F:E5:39:B6:B7:3C:D7:E1:4A:8E
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/t8t_TK5-ZKE89T_lOba3PNfhSo4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.241.0/24
62.192.152.0/24
89.36.140.0/24
94.176.214.0/24
94.177.51.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:d3:40:c3:ef:1b:90:f2:1e:82:1a:d7:f1:97:bf:80:4d:85:
52:28:29:ec:88:2e:44:40:e9:02:b3:a7:aa:c8:08:32:dc:c2:
20:c0:a7:e8:8a:b6:fd:77:67:9c:a3:1d:78:fd:47:39:f6:b6:
cb:d4:2b:21:57:fe:8a:d8:80:a8:6b:03:77:ba:e6:ee:7f:99:
18:74:fe:05:87:8c:77:89:86:29:90:59:3b:a7:6f:f2:5f:6c:
9a:bf:62:b2:4b:45:b4:5a:72:9a:b4:60:9c:ef:9e:a1:09:c5:
88:01:43:ee:bd:a8:d1:97:a0:ca:46:49:65:5e:d9:a1:da:df:
ca:4a:72:f8:f1:7b:9a:cd:36:f7:25:ef:5b:3b:59:60:b5:7c:
f5:49:78:13:da:8e:33:f0:29:66:ee:bc:e8:f8:75:ed:c3:da:
a1:e3:6f:27:79:5e:4a:62:fc:55:b2:b2:fa:a0:af:93:4b:87:
de:96:05:0d:1c:3f:a2:79:4b:68:bc:ac:73:a0:9e:ef:d6:6b:
4a:30:60:07:ea:7f:b1:f9:8a:a3:2d:ef:2b:1a:33:92:89:b1:
76:3a:35:e9:fc:f3:24:25:5a:8d:56:2d:90:5b:2c:9c:7d:0a:
9a:d0:16:5f:b2:22:66:33:42:63:8c:85:c3:54:e5:cc:b9:80:
07:54:fe:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:14 2024 by rpki-client on console-ams.rpki-client.org