Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/91b093-acb7-4cb7-bf8f-5cb934a55b0d/1/Tf28BplJ15B_HYjnzeVsV4kaOOA.roa
File: Tf28BplJ15B_HYjnzeVsV4kaOOA.roa (raw, json)
Hash identifier: BV5Il7V+itCeMyDVykTAOiSvElGDAdtKQOMWuUyNy4I=
Subject key identifier: 4D:FD:BC:06:99:49:D7:90:7F:1D:88:E7:CD:E5:6C:57:89:1A:38:E0
Certificate issuer: /CN=6511ce5e2f53b7bb8cac8f39e294e89a45b20029
Certificate serial: 018570304E1C812873BBA6C2D0A585C9CB88
Authority key identifier: 65:11:CE:5E:2F:53:B7:BB:8C:AC:8F:39:E2:94:E8:9A:45:B2:00:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRHOXi9Tt7uMrI854pTomkWyACk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/91b093-acb7-4cb7-bf8f-5cb934a55b0d/1/Tf28BplJ15B_HYjnzeVsV4kaOOA.roa
Signing time: Mon 02 Jan 2023 01:54:51 +0000
ROA not before: Mon 02 Jan 2023 01:54:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30870
IP address blocks: 84.244.153.0/24 maxlen: 24
84.244.170.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:30:4e:1c:81:28:73:bb:a6:c2:d0:a5:85:c9:cb:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6511ce5e2f53b7bb8cac8f39e294e89a45b20029
Validity
Not Before: Jan 2 01:54:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4dfdbc069949d7907f1d88e7cde56c57891a38e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e6:0b:d4:14:27:e6:d0:66:cb:55:5c:1c:0f:
c4:91:a5:c1:f4:c4:19:0c:4e:77:e7:6a:27:46:2a:
1c:29:6b:e8:78:36:70:48:5b:c8:f7:86:d3:d9:85:
e5:70:ca:bd:48:60:69:9e:6c:86:18:e5:8f:7e:c9:
0a:bf:e5:c5:39:b7:a2:a4:e9:ff:9c:99:fe:71:09:
b7:2e:f9:23:34:4e:b5:24:f7:7f:12:d0:0c:e1:bd:
59:41:2b:df:ee:f4:ba:27:8e:da:b6:f5:b3:77:ba:
0c:e9:4c:c4:7d:e5:60:d0:bc:4c:15:ed:29:de:a4:
33:95:f5:aa:7b:a5:80:35:11:84:17:92:cb:af:70:
c9:d4:64:44:dd:e5:32:25:2a:12:9d:56:5a:b3:ca:
28:54:b5:13:75:e0:56:b0:2b:f1:79:e1:ab:b7:ac:
3f:61:17:ab:f3:7d:b6:da:2c:15:25:97:b9:fb:0e:
b1:97:3b:06:35:a5:f1:a0:c3:b2:c6:92:24:04:5f:
d9:98:fc:09:29:8b:ed:6f:f5:bb:33:1b:4a:cc:cb:
69:77:fe:74:0c:cf:f5:3a:53:ff:59:0b:6a:c8:50:
13:6d:9e:92:c0:34:d7:a5:df:63:74:58:7a:0c:dc:
a8:6b:25:4d:1a:71:bb:d7:ad:af:3e:f7:29:27:77:
c0:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:FD:BC:06:99:49:D7:90:7F:1D:88:E7:CD:E5:6C:57:89:1A:38:E0
X509v3 Authority Key Identifier:
keyid:65:11:CE:5E:2F:53:B7:BB:8C:AC:8F:39:E2:94:E8:9A:45:B2:00:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRHOXi9Tt7uMrI854pTomkWyACk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/91b093-acb7-4cb7-bf8f-5cb934a55b0d/1/Tf28BplJ15B_HYjnzeVsV4kaOOA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/91b093-acb7-4cb7-bf8f-5cb934a55b0d/1/ZRHOXi9Tt7uMrI854pTomkWyACk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.244.153.0/24
84.244.170.0/23
Signature Algorithm: sha256WithRSAEncryption
59:94:db:5e:6f:da:54:cd:f3:33:d3:9f:c6:4b:89:85:2f:6c:
1d:b3:08:31:74:52:72:75:11:a5:80:dd:b3:9e:03:5d:16:9c:
3e:8e:a1:6d:07:af:9a:48:13:a0:f6:5e:f0:ed:7b:9b:96:02:
3f:b3:53:7c:d7:a1:c0:64:42:a9:66:79:af:ae:d7:10:1a:6e:
33:fe:d5:4c:09:15:50:ce:03:74:f1:fc:69:e7:93:fa:5b:33:
83:91:c0:ff:6a:3f:d4:57:c0:9f:73:3d:ba:c1:3c:0f:f0:1a:
31:fb:b8:35:73:f7:92:97:e5:e0:8b:63:7f:96:cb:c3:d0:a6:
d9:72:4a:c5:fb:0e:d4:f9:48:98:dc:4c:b7:56:3f:ef:3e:9a:
8a:dc:7a:00:2a:ff:23:38:c9:c0:e1:c6:be:d5:05:33:25:74:
c8:ff:a8:a2:21:86:c5:3e:e1:f4:8b:c7:3d:b7:80:6e:a6:9b:
1b:99:57:fb:37:c5:9e:60:86:70:da:79:a6:f1:2b:91:39:ac:
c0:b3:f2:f0:22:89:fd:e2:ba:23:76:b4:49:d5:f3:ac:5c:96:
de:9b:c2:2c:d2:84:88:5e:ed:26:7b:cd:dd:1d:3d:1e:16:19:
77:98:9d:78:82:13:bf:dc:5a:a9:0e:85:a6:cc:a3:ba:9a:17:
29:a2:6e:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:23 2024 by rpki-client on console-ams.rpki-client.org