Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/TqhC7BbQC2tJzOL3IF43wKJYJNE.roa
File: TqhC7BbQC2tJzOL3IF43wKJYJNE.roa (raw, json)
Hash identifier: tfCYAmklX23CYyJecjx+iYX8hB7WAz19Jdj5hpP5myM=
Subject key identifier: 4E:A8:42:EC:16:D0:0B:6B:49:CC:E2:F7:20:5E:37:C0:A2:58:24:D1
Certificate issuer: /CN=0562d5a67b7a20f865e753163a6ed0e5f347e839
Certificate serial: 0185D88ED7F0FC419DC878D71259A9E03E79
Authority key identifier: 05:62:D5:A6:7B:7A:20:F8:65:E7:53:16:3A:6E:D0:E5:F3:47:E8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/TqhC7BbQC2tJzOL3IF43wKJYJNE.roa
Signing time: Sun 22 Jan 2023 08:18:38 +0000
ROA not before: Sun 22 Jan 2023 08:18:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6663
IP address blocks: 195.146.0.0/20 maxlen: 20
195.146.11.0/24 maxlen: 24
195.146.12.0/24 maxlen: 24
195.146.16.0/20 maxlen: 20
Validation: Failed, certificate revoked on Sun 22 Jan 2023 15:38:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:d8:8e:d7:f0:fc:41:9d:c8:78:d7:12:59:a9:e0:3e:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0562d5a67b7a20f865e753163a6ed0e5f347e839
Validity
Not Before: Jan 22 08:18:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4ea842ec16d00b6b49cce2f7205e37c0a25824d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c6:43:d4:bc:5d:93:b6:66:69:17:90:cc:38:
5f:33:1c:6d:37:b5:5a:4e:76:46:ae:24:73:dc:ca:
5f:c3:1b:1a:5f:a5:1b:5c:e4:f9:aa:86:f9:bb:c2:
c5:85:79:d1:8f:7d:b4:36:ea:2b:8d:13:85:fb:3c:
30:f7:36:89:e8:4f:05:ce:f6:83:66:b2:f2:ee:5e:
b2:cb:fa:9e:7e:49:e2:8c:5b:97:ae:a5:6e:ef:ad:
34:02:29:af:d2:6d:9a:0c:21:4d:f1:97:45:a2:b5:
56:39:71:f4:38:3a:25:fa:42:31:d6:eb:f4:e6:b0:
6a:19:2d:31:23:86:f6:7c:c2:55:9e:cb:bf:b5:36:
39:2c:1c:68:b9:76:fd:79:98:0a:b8:48:70:00:67:
9a:b2:54:d9:2a:17:e3:17:19:9e:56:ab:76:85:9e:
f2:06:16:10:5d:e0:89:f0:3f:ab:5b:5b:ca:3c:a2:
e1:f4:9b:86:2f:df:8e:89:78:ae:8e:32:8b:18:1e:
ed:ea:64:fa:22:ae:84:dc:2e:61:84:8a:ce:10:a4:
7c:35:6e:40:75:ed:1c:ff:9f:82:38:8e:66:8f:91:
8d:69:e4:aa:63:2e:07:5e:15:8d:c1:55:db:2c:c2:
93:b3:ca:ce:0e:1c:69:5e:b4:30:94:cb:1a:3c:9a:
87:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:A8:42:EC:16:D0:0B:6B:49:CC:E2:F7:20:5E:37:C0:A2:58:24:D1
X509v3 Authority Key Identifier:
keyid:05:62:D5:A6:7B:7A:20:F8:65:E7:53:16:3A:6E:D0:E5:F3:47:E8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/TqhC7BbQC2tJzOL3IF43wKJYJNE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.146.0.0/19
Signature Algorithm: sha256WithRSAEncryption
4a:80:6c:70:42:55:26:f5:87:0e:54:16:71:af:4e:69:bc:1d:
83:af:64:94:cf:ef:12:a5:e6:a7:e9:4e:d6:43:ae:68:37:ae:
ce:4d:81:eb:60:73:4c:93:72:fd:fe:3c:3c:f5:28:94:c5:e3:
63:92:6b:c0:fa:35:cd:46:df:d0:f7:b3:45:f7:06:9a:7b:40:
31:1f:db:9a:6b:bf:12:0a:31:e7:f7:ea:8a:b3:17:aa:4c:c8:
e4:eb:e4:fb:69:ad:ed:9d:fe:39:53:6b:b1:15:c1:0b:1a:c8:
2f:94:82:1c:44:90:66:40:56:ab:98:b6:87:c7:25:ee:47:ad:
3c:f8:18:db:df:e9:96:13:13:13:3a:88:8e:8b:9c:0c:43:ca:
e9:84:0d:30:0c:5f:c7:1d:e9:97:f2:39:7e:6e:5e:a1:97:23:
98:ea:a2:8f:b2:a6:9f:7e:cd:a1:ec:3e:92:c1:d7:ec:6f:50:
05:13:3c:8a:ea:3b:22:cd:fe:99:9c:05:f0:19:56:39:1c:af:
91:df:71:9c:8c:d2:f7:28:3d:7a:eb:1b:0d:c0:51:35:d9:19:
6d:cb:a9:d7:4d:68:0a:92:f5:70:7a:06:a2:b7:3d:c9:9d:d6:
a8:25:4f:06:b4:9e:79:8a:62:50:fc:93:df:8b:8d:d7:c1:0c:
b4:32:5f:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:10 2024 by rpki-client on console-fra.rpki-client.org