Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/TFYOe3z27NWECL4J3qaAwf0bY8o.roa
File: TFYOe3z27NWECL4J3qaAwf0bY8o.roa (raw, json)
Hash identifier: vUuPvn7Hxu2HYWxIEuR6Gsc5EmrqExYuh0l1tQK6tNw=
Subject key identifier: 4C:56:0E:7B:7C:F6:EC:D5:84:08:BE:09:DE:A6:80:C1:FD:1B:63:CA
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 018CC9E5EE4D8718D0047D1788B71515D6AE
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/TFYOe3z27NWECL4J3qaAwf0bY8o.roa
Signing time: Tue 02 Jan 2024 11:18:58 +0000
ROA not before: Tue 02 Jan 2024 11:18:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212552
IP address blocks: 202.133.88.0/24 maxlen: 24
212.90.102.0/23 maxlen: 24
185.215.244.0/23 maxlen: 24
46.249.98.0/23 maxlen: 24
193.36.84.0/23 maxlen: 24
46.249.100.0/22 maxlen: 24
103.75.196.0/22 maxlen: 24
82.115.17.0/24 maxlen: 24
82.115.16.0/24 maxlen: 24
82.115.24.0/22 maxlen: 24
82.115.20.0/23 maxlen: 24
82.115.19.0/24 maxlen: 24
82.115.18.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:e5:ee:4d:87:18:d0:04:7d:17:88:b7:15:15:d6:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jan 2 11:18:58 2024 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4c560e7b7cf6ecd58408be09dea680c1fd1b63ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:97:1a:39:f0:f3:71:79:a7:07:44:d1:6e:ee:
af:ff:69:5e:82:93:2c:47:69:45:79:c7:76:ed:62:
aa:f4:cc:db:b2:59:5f:11:e1:fb:4b:02:d5:83:4d:
2b:c2:44:ae:01:df:56:e3:7a:3c:11:69:84:94:b9:
b7:af:46:5a:ed:59:67:12:4b:0c:44:02:a5:41:11:
1a:aa:b6:20:53:e0:5d:72:f5:a3:c6:0d:b5:8f:28:
9b:90:77:f0:d3:cd:f0:9e:e0:88:8b:7b:1a:98:4d:
f8:7f:87:c2:43:28:b2:2e:67:6c:79:23:7c:23:fa:
af:b4:a9:1c:aa:f5:74:60:7b:ef:d0:85:1c:f4:96:
10:08:95:de:fc:31:4f:3d:34:b8:36:b7:a3:a2:15:
39:b7:0a:67:7d:57:e9:9a:cd:80:15:5d:ea:3b:6e:
df:97:9e:b4:de:70:ad:f2:5b:19:64:bb:63:45:00:
a3:f1:60:53:40:49:81:49:8e:7c:da:32:e3:b9:f5:
67:6b:35:2e:4c:37:00:d6:90:2c:15:01:fb:1b:c3:
a5:e7:ae:29:2f:a7:34:3b:55:6d:f1:e7:90:72:22:
d5:7f:9a:18:03:f1:7c:07:7e:57:8a:2c:ab:d5:bf:
57:b0:8d:15:c2:ea:55:ee:d6:ad:32:97:d7:3b:eb:
c1:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:56:0E:7B:7C:F6:EC:D5:84:08:BE:09:DE:A6:80:C1:FD:1B:63:CA
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/TFYOe3z27NWECL4J3qaAwf0bY8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.249.98.0-46.249.103.255
82.115.16.0-82.115.21.255
82.115.24.0/22
103.75.196.0/22
185.215.244.0/23
193.36.84.0/23
202.133.88.0/24
212.90.102.0/23
Signature Algorithm: sha256WithRSAEncryption
89:88:9c:b5:fb:7d:e6:b7:d9:38:c6:8c:54:0a:a8:05:54:bb:
f9:87:d5:dc:57:07:ec:6a:c0:85:14:1f:3c:4f:5c:49:84:8c:
f0:db:cd:80:44:f3:d2:22:52:17:c9:ec:10:8d:48:c9:ef:4a:
9c:ec:99:69:73:e2:cc:8e:7e:e5:00:4c:a5:eb:1e:1e:73:6a:
5f:35:a0:c6:58:b7:9e:38:1f:d3:72:1c:6f:09:15:8f:ad:cb:
8e:82:bc:f4:96:86:dc:15:13:e0:a2:26:68:24:27:44:9e:0b:
40:a9:f8:3b:60:51:46:e8:98:22:af:bc:4a:97:3a:64:87:64:
26:25:47:84:19:9e:87:ca:05:63:24:80:c8:51:8a:4a:43:61:
84:1e:00:02:3a:24:b6:c2:56:e4:fe:4f:c6:95:19:1d:cb:67:
aa:f6:6f:7f:d1:9c:f8:9c:de:82:69:7e:df:af:ea:d8:d4:8e:
af:67:6e:29:83:77:ca:21:4e:63:3f:6f:4f:e4:41:4f:76:15:
91:67:94:be:5f:e5:32:db:6a:a3:42:7b:4d:10:44:df:5f:83:
95:18:c5:4d:76:22:39:e5:70:05:e0:1b:ee:4e:dc:07:c6:69:
36:db:d0:9f:9a:5f:c7:81:03:dd:b5:89:ca:f4:2b:f6:d3:47:
58:e6:53:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:34:48 2024 by rpki-client on console-fra.rpki-client.org