Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/Tp-JD5FzOs7qNpS--6YrVSH0i-k.roa
File: Tp-JD5FzOs7qNpS--6YrVSH0i-k.roa (raw, json)
Hash identifier: fc0XffI+qtEm3/rFL1CYMc/xAhEPr+6M/udLnFkb+qQ=
Subject key identifier: 4E:9F:89:0F:91:73:3A:CE:EA:36:94:BE:FB:A6:2B:55:21:F4:8B:E9
Certificate issuer: /CN=0562d5a67b7a20f865e753163a6ed0e5f347e839
Certificate serial: 018679741A86CD7720D96F3D00259E0EB991
Authority key identifier: 05:62:D5:A6:7B:7A:20:F8:65:E7:53:16:3A:6E:D0:E5:F3:47:E8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/Tp-JD5FzOs7qNpS--6YrVSH0i-k.roa
Signing time: Wed 22 Feb 2023 14:08:17 +0000
ROA not before: Wed 22 Feb 2023 14:08:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2856
IP address blocks: 194.1.132.0/22 maxlen: 22
194.1.136.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 22 Aug 2023 05:56:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:79:74:1a:86:cd:77:20:d9:6f:3d:00:25:9e:0e:b9:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0562d5a67b7a20f865e753163a6ed0e5f347e839
Validity
Not Before: Feb 22 14:08:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4e9f890f91733aceea3694befba62b5521f48be9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:5c:0e:80:6d:9a:97:e2:ed:67:65:09:0c:68:
a5:78:15:18:7a:a1:b7:3e:67:03:b5:a6:0a:0b:2e:
f7:c4:82:b4:62:70:96:51:97:4a:04:55:18:f9:20:
7e:5b:02:2b:be:30:7e:f7:1a:9a:74:27:bd:e6:e7:
34:27:4f:a5:b7:a8:f2:61:9a:e4:a3:aa:5a:11:e3:
e6:b1:83:a1:64:d5:ba:95:8a:ab:ba:e2:9c:07:70:
94:86:9c:cc:79:13:d1:49:24:9b:db:ed:a3:d3:46:
42:d4:45:c1:72:40:b8:30:7c:4b:08:4f:a0:c0:34:
61:6e:34:c8:61:23:97:36:a3:d2:93:5f:38:d2:37:
c5:46:18:7b:46:23:cd:46:ac:63:2f:f7:ad:7e:81:
6a:6d:8d:1f:50:05:1c:c9:04:d9:6b:f3:bd:20:f9:
20:13:1a:56:83:3b:95:5d:fb:a2:cc:1d:17:8f:6f:
16:9f:30:10:bb:7e:d9:32:f5:a2:2d:98:c4:b8:cd:
25:0e:bb:3d:05:aa:9c:71:09:77:ed:92:04:0b:de:
08:44:dd:50:da:12:f9:d7:30:57:4b:2e:24:89:e8:
85:52:d8:08:ae:26:11:98:c9:29:30:fd:1a:db:3b:
c0:0a:35:0c:ed:c7:bf:91:6c:a9:82:41:17:ff:f9:
aa:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:9F:89:0F:91:73:3A:CE:EA:36:94:BE:FB:A6:2B:55:21:F4:8B:E9
X509v3 Authority Key Identifier:
keyid:05:62:D5:A6:7B:7A:20:F8:65:E7:53:16:3A:6E:D0:E5:F3:47:E8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/Tp-JD5FzOs7qNpS--6YrVSH0i-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.1.132.0-194.1.139.255
Signature Algorithm: sha256WithRSAEncryption
3c:9e:49:68:30:7a:f3:54:53:9f:4f:90:d9:b8:d1:3e:d8:db:
b7:ea:b2:e1:65:77:19:fc:2e:3c:d8:f0:74:0a:d4:61:68:c4:
14:a1:28:52:3e:9c:a1:ea:a2:59:93:a5:91:c9:b0:6c:03:d4:
65:1e:6f:cc:38:85:62:47:bf:34:fa:55:29:a5:8c:91:7c:bb:
a2:e9:34:0f:af:1e:96:b5:d1:dc:b4:08:df:c8:0b:04:2f:3a:
d5:5c:c5:4d:b6:1d:cf:68:6b:14:04:cf:f9:10:ea:6e:93:25:
64:5f:f2:51:15:3b:d1:5c:31:f9:0c:ac:40:3b:ca:c6:42:ce:
68:fb:76:2d:79:2d:de:76:09:14:05:e5:93:1c:cc:14:19:a7:
50:3a:87:b5:fa:2d:4c:b5:92:d3:85:69:47:2e:5d:67:6b:0f:
e0:15:3e:a8:58:0a:b0:7c:99:7c:f5:88:e5:59:fa:61:f2:56:
c8:b6:9f:3f:95:b1:18:5f:1b:82:3f:86:38:2f:bc:80:8c:ef:
27:c7:ef:52:9c:5d:82:e1:62:17:31:48:62:52:d2:c9:4e:76:
ba:f4:9d:c7:a3:c6:60:67:4f:86:3b:d0:22:6c:f7:e5:f0:ea:
ae:64:b5:33:25:bf:e6:d9:03:fb:fb:17:7f:75:69:69:8a:16:
5a:12:3b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:10 2024 by rpki-client on console-fra.rpki-client.org