Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/tJbshp59s2uUodildXqj5Cnh9H0.roa
File: tJbshp59s2uUodildXqj5Cnh9H0.roa (raw, json)
Hash identifier: Efp+PsLAtpvPPixZiSHcIbVQ/3HQoERKQezud+3ZJPU=
Subject key identifier: B4:96:EC:86:9E:7D:B3:6B:94:A1:D8:A5:75:7A:A3:E4:29:E1:F4:7D
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01887D6E78DA631BFD97A23322A92699DF12
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/tJbshp59s2uUodildXqj5Cnh9H0.roa
Signing time: Fri 02 Jun 2023 18:46:11 +0000
ROA not before: Fri 02 Jun 2023 18:46:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7411
IP address blocks: 188.212.121.0/24 maxlen: 24
92.114.93.0/24 maxlen: 24
94.176.215.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 03 Jun 2023 14:32:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:7d:6e:78:da:63:1b:fd:97:a2:33:22:a9:26:99:df:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jun 2 18:46:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b496ec869e7db36b94a1d8a5757aa3e429e1f47d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c0:83:e2:f0:6c:93:b0:7c:28:32:61:39:a5:
3c:be:ae:28:91:cb:d0:03:2c:8c:66:bb:c8:c9:7c:
d7:2e:2d:75:ef:24:f3:93:ea:4d:83:a1:32:6a:67:
c3:2c:78:d9:d2:e5:ee:8f:5c:af:23:72:1f:22:e5:
7c:8d:cc:d6:dd:30:c4:3b:0a:09:d4:e6:96:93:a2:
be:f0:4f:f2:40:28:43:94:f4:e1:0a:ae:7b:7d:5d:
3a:14:ed:39:4a:90:b4:96:a0:44:73:db:73:81:ee:
fb:68:f0:fb:04:82:99:c9:43:89:65:e3:bb:48:9e:
d3:36:f3:4b:94:af:be:90:b8:c9:a4:a6:38:e7:ea:
24:c8:f7:38:7d:28:24:1c:86:a5:0c:5c:75:d2:db:
d1:ed:f6:64:a5:d9:94:4b:d2:7f:2d:a3:a1:5b:1b:
b4:96:71:bd:4d:f5:68:be:9c:9c:3b:f1:a7:3c:9f:
fd:80:6b:53:f3:9e:92:59:10:d3:22:76:9f:e7:dc:
24:a6:1c:4e:02:a2:75:5f:9d:e3:f1:43:9e:6c:4a:
c8:b8:20:af:bd:3a:fc:a4:e0:c0:95:8b:55:4a:aa:
76:1e:f1:65:d9:a9:20:c2:3a:12:43:f0:77:50:d6:
b2:a3:c3:fe:6d:e0:78:3f:34:59:2b:f4:48:87:79:
01:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:96:EC:86:9E:7D:B3:6B:94:A1:D8:A5:75:7A:A3:E4:29:E1:F4:7D
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/tJbshp59s2uUodildXqj5Cnh9H0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.114.93.0/24
94.176.215.0/24
188.212.121.0/24
Signature Algorithm: sha256WithRSAEncryption
04:ab:08:d6:32:8f:a3:5c:e1:79:75:6b:da:f0:76:40:87:a6:
41:20:19:e9:b3:72:e0:95:7f:b3:72:d1:8d:07:ea:df:ce:4b:
9d:89:55:03:8e:74:ef:95:ba:0e:14:24:a7:a0:fa:3f:aa:21:
49:7d:3d:ef:74:f0:c6:be:4e:3a:1a:63:65:e2:e1:2e:0e:d2:
6e:33:b3:b0:d1:fb:a0:12:00:04:da:ca:fa:50:18:9e:97:97:
13:f1:74:4f:63:bc:f1:0c:93:fd:45:32:bb:26:5c:90:63:4f:
11:7e:d1:79:17:bc:97:5c:59:91:79:e7:ff:9e:64:d7:61:29:
e2:44:a5:06:28:e4:a2:90:70:04:17:1e:7e:0a:b7:94:e9:aa:
e0:6e:a4:89:d8:74:2f:b9:10:d7:31:62:0e:29:11:b9:82:ea:
03:d4:bc:fb:08:16:06:3d:f6:35:76:b2:f2:34:98:53:76:7a:
6c:55:36:9c:2d:43:f4:a7:b6:ca:74:7f:df:3e:58:e6:43:f1:
8b:23:b6:2d:d8:b6:73:4a:df:ab:da:8f:a5:7f:be:d4:b7:68:
c2:8a:e3:c4:d1:73:c4:86:15:cf:72:54:6a:32:ec:fb:17:1b:
60:7f:71:e0:8f:58:5b:6d:3b:7f:71:21:78:3b:02:79:f1:fb:
19:ae:9f:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:14 2024 by rpki-client on console-ams.rpki-client.org