Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/RM-TuB4U99g8tUuGrauRdk9MIIg.roa
File: RM-TuB4U99g8tUuGrauRdk9MIIg.roa (raw, json)
Hash identifier: M16urYDU8/q1ctkAIDPkvHGZywCajwVcRmRQYZMtZ1g=
Subject key identifier: 44:CF:93:B8:1E:14:F7:D8:3C:B5:4B:86:AD:AB:91:76:4F:4C:20:88
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 01856F1DCE98B9DA2D49F09BE48B653DC10C
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/RM-TuB4U99g8tUuGrauRdk9MIIg.roa
Signing time: Sun 01 Jan 2023 20:55:02 +0000
ROA not before: Sun 01 Jan 2023 20:55:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35536
IP address blocks: 94.124.116.0/24 maxlen: 24
2a09:6:6::/48 maxlen: 48
2a09:7:2003::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:30:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:1d:ce:98:b9:da:2d:49:f0:9b:e4:8b:65:3d:c1:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Jan 1 20:55:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=44cf93b81e14f7d83cb54b86adab91764f4c2088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:06:e6:12:8c:cd:3f:18:72:1e:06:e1:c1:7b:
92:5f:3c:14:98:24:27:44:27:27:a9:57:d2:d3:a6:
54:6f:01:ef:a3:4d:47:ab:a8:fe:4b:f9:c1:ae:39:
64:8a:7a:37:b9:a8:d3:38:0e:98:21:05:05:5c:05:
8e:1f:d9:e8:24:4b:89:34:c4:69:a0:24:66:ff:45:
b1:96:b7:47:ff:18:52:88:97:10:2d:a3:7e:db:53:
28:14:7f:b8:6d:c3:d9:54:ad:72:5f:40:43:53:da:
22:62:3f:00:e2:44:e8:86:9a:c6:1b:69:d7:e4:6f:
6d:41:53:b4:ca:d6:1c:eb:0b:ab:6d:c6:ab:00:24:
a8:de:a7:5a:41:73:75:3b:63:7a:ac:03:73:98:fe:
73:d4:c8:cf:fd:51:d6:39:10:d3:3f:ee:49:4f:cc:
18:a6:ec:b3:d5:3f:b4:ea:f4:ef:2b:87:52:fc:25:
9d:05:4c:1c:09:77:7f:c9:ef:ca:33:fa:b7:77:f0:
d6:60:4a:51:75:a5:dc:ec:b8:65:42:0d:81:17:c1:
a3:52:e2:22:a9:88:f3:2c:33:d3:58:39:b2:a7:82:
3b:69:b7:b9:58:3d:d9:9c:83:91:51:d6:82:87:ab:
42:26:17:18:e1:53:e9:96:08:d9:65:72:86:43:f8:
22:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:CF:93:B8:1E:14:F7:D8:3C:B5:4B:86:AD:AB:91:76:4F:4C:20:88
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/RM-TuB4U99g8tUuGrauRdk9MIIg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.124.116.0/24
IPv6:
2a09:6:6::/48
2a09:7:2003::/48
Signature Algorithm: sha256WithRSAEncryption
0d:29:90:41:92:a7:8a:ea:a4:e0:a3:90:38:51:4f:e1:43:bb:
0b:16:23:7c:3d:3a:47:bc:fc:01:a5:9b:0a:f6:fa:ea:0d:17:
1a:3a:37:17:9e:0a:c7:36:57:a5:24:5a:9b:e9:d0:80:06:95:
9a:58:07:64:f9:fa:b0:92:70:c8:94:ba:6c:d3:cc:94:02:35:
79:a1:39:74:d7:58:da:ad:df:8e:cf:79:44:05:76:15:1a:11:
78:9d:ba:bf:b3:4c:4c:a0:37:5d:c3:3e:a3:85:ae:43:69:30:
1f:f7:d4:78:27:a5:b7:42:1f:3e:8a:e1:93:52:91:0e:1c:29:
ed:39:6d:d5:1f:bc:79:2e:7c:df:d3:92:b3:73:e9:71:04:14:
65:90:25:94:6f:33:cf:ad:9e:56:d5:46:58:b1:11:60:1f:03:
fc:1a:77:e2:28:7e:9a:5a:f3:b7:4a:2b:1b:b2:64:ee:cd:dd:
83:00:19:d4:27:bd:f5:bc:13:08:18:9c:6d:60:48:e1:f8:80:
b8:89:81:c7:a5:bc:1a:f6:cc:bb:8d:43:74:30:65:a2:46:c6:
91:2b:4d:c4:82:41:b4:75:be:b6:4a:e2:21:e3:e0:f5:4a:3c:
ab:88:15:7c:5e:01:70:22:5c:f6:35:fb:2e:c2:75:b7:82:46:
64:1e:02:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:48 2024 by rpki-client on console-fra.rpki-client.org