Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/0lYtdk-WQ6KsAmK8t_8TcFyefv4.roa
File: 0lYtdk-WQ6KsAmK8t_8TcFyefv4.roa (raw, json)
Hash identifier: d+iCRsRRNKWHvDD/0jhOzE3KkV+Rw2vzTvLCSCHrTDQ=
Subject key identifier: D2:56:2D:76:4F:96:43:A2:AC:02:62:BC:B7:FF:13:70:5C:9E:7E:FE
Certificate issuer: /CN=4ce37f71c933bf827118c63c07774de98645d019
Certificate serial: 0185724C921E7FD1D1ADB99286FF0991E61F
Authority key identifier: 4C:E3:7F:71:C9:33:BF:82:71:18:C6:3C:07:77:4D:E9:86:45:D0:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TON_cckzv4JxGMY8B3dN6YZF0Bk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/0lYtdk-WQ6KsAmK8t_8TcFyefv4.roa
Signing time: Mon 02 Jan 2023 11:44:58 +0000
ROA not before: Mon 02 Jan 2023 11:44:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207143
IP address blocks: 45.131.254.0/24 maxlen: 24
185.142.212.0/22 maxlen: 22
185.142.212.0/24 maxlen: 24
185.142.213.0/24 maxlen: 24
185.142.215.0/24 maxlen: 24
185.142.214.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:4c:92:1e:7f:d1:d1:ad:b9:92:86:ff:09:91:e6:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ce37f71c933bf827118c63c07774de98645d019
Validity
Not Before: Jan 2 11:44:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d2562d764f9643a2ac0262bcb7ff13705c9e7efe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e5:c9:70:43:eb:cd:6e:ab:f7:11:0b:49:8b:
17:b4:f1:2e:f8:39:b7:82:d3:89:09:cd:2d:82:cb:
04:ed:b4:b3:ba:92:32:56:9f:c0:59:02:cb:8c:e2:
df:27:a3:38:ad:54:2c:1e:d3:a9:16:98:03:1f:31:
73:2a:da:0a:56:ef:e6:c1:73:41:67:5d:b6:a2:f2:
18:89:3c:01:48:2f:a0:5d:a4:fe:5d:ab:1c:18:c0:
c7:88:b1:38:93:bd:18:21:f7:36:9b:d8:71:81:76:
54:b3:10:48:f6:33:8e:93:5f:8a:5d:78:7c:2e:9f:
18:59:0b:f4:f1:28:46:d9:e9:8d:2f:92:ba:a2:00:
f9:6b:8e:fc:4b:e5:45:ec:52:f4:8a:75:2d:6c:6b:
f5:ad:34:dc:81:2d:f7:91:a2:21:38:c6:6c:4c:14:
dd:f5:7b:b1:39:17:80:ee:04:04:84:4a:b9:50:84:
13:e0:9f:ee:1b:92:09:c8:36:3c:3b:7b:5e:30:10:
0a:99:50:ab:a0:22:de:a6:da:ba:9d:99:4e:88:a9:
c4:b7:c8:bf:a0:72:1a:90:e4:09:60:46:a4:2f:b7:
ee:a8:c2:8e:2b:a8:51:f0:fd:20:91:8a:fd:7d:8a:
fb:d6:5a:ee:88:e8:48:b9:7d:f2:3b:1e:c4:eb:74:
fc:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:56:2D:76:4F:96:43:A2:AC:02:62:BC:B7:FF:13:70:5C:9E:7E:FE
X509v3 Authority Key Identifier:
keyid:4C:E3:7F:71:C9:33:BF:82:71:18:C6:3C:07:77:4D:E9:86:45:D0:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TON_cckzv4JxGMY8B3dN6YZF0Bk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/0lYtdk-WQ6KsAmK8t_8TcFyefv4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.254.0/24
185.142.212.0/22
Signature Algorithm: sha256WithRSAEncryption
42:64:ed:6a:5f:9c:f5:7f:ce:43:41:34:bb:97:b6:55:84:36:
60:c4:41:e3:5c:26:ae:c2:03:c7:6d:fe:c9:7c:19:87:7a:db:
22:48:e0:47:3a:7b:17:d6:51:b5:0e:c8:60:c0:22:d6:46:3e:
1f:5a:f9:12:6e:25:35:22:de:79:09:d4:69:71:63:1c:a8:c2:
0c:08:7d:fa:92:fd:34:67:a0:26:b8:b0:e7:fc:5e:23:a4:00:
6a:56:16:ff:47:83:cd:ec:d4:1f:42:b0:af:98:02:14:fc:f8:
74:2c:2a:82:3c:0f:49:88:0c:dd:87:eb:c8:be:49:e0:78:6b:
85:f4:a1:11:0c:67:2f:41:3c:17:a8:27:be:7b:f7:57:dd:f5:
40:77:27:a5:4c:eb:72:63:09:e8:bc:ca:7e:63:2d:0f:1d:24:
fd:be:40:3b:24:44:23:87:e5:f9:0c:c2:94:4e:d2:ec:29:a5:
22:44:32:cd:60:45:15:a4:f0:4d:0d:18:e3:8a:84:d4:18:f0:
a4:c2:0b:ca:77:6b:7c:3a:95:f9:d4:20:4c:5e:00:a6:16:64:
dc:ac:2d:70:12:35:e4:01:d4:95:d0:63:ff:80:24:89:51:f2:
75:97:8e:0e:6e:3b:bd:72:0d:c0:37:67:98:d4:48:21:a4:02:
60:fc:d2:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:47 2024 by rpki-client on console-ams.rpki-client.org