Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/a72a92-568b-4327-9c1d-6681f916e554/1/TNPsVDqzH6tBNZImDbCkblqjRmk.roa
File: TNPsVDqzH6tBNZImDbCkblqjRmk.roa (raw, json)
Hash identifier: 13QZqHjXFP4UiMOKgLXEBojE8MlNDUbGmYqnjGXdcvk=
Subject key identifier: 4C:D3:EC:54:3A:B3:1F:AB:41:35:92:26:0D:B0:A4:6E:5A:A3:46:69
Certificate issuer: /CN=56d57f6cf28c982c1d3ff6c5257f399e9b955bdd
Certificate serial: 0189490462D683A91EE1F18883B60A7DFD87
Authority key identifier: 56:D5:7F:6C:F2:8C:98:2C:1D:3F:F6:C5:25:7F:39:9E:9B:95:5B:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VtV_bPKMmCwdP_bFJX85npuVW90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/a72a92-568b-4327-9c1d-6681f916e554/1/TNPsVDqzH6tBNZImDbCkblqjRmk.roa
Signing time: Wed 12 Jul 2023 07:32:51 +0000
ROA not before: Wed 12 Jul 2023 07:32:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211612
IP address blocks: 94.76.41.0/24 maxlen: 24
94.76.40.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:49:04:62:d6:83:a9:1e:e1:f1:88:83:b6:0a:7d:fd:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56d57f6cf28c982c1d3ff6c5257f399e9b955bdd
Validity
Not Before: Jul 12 07:32:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4cd3ec543ab31fab413592260db0a46e5aa34669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:bc:21:a9:5e:40:68:1d:a6:75:3c:13:84:c0:
2f:4d:7c:b1:97:9f:b8:26:f0:08:5d:12:92:cb:62:
d2:a7:33:5d:15:e5:c5:8a:33:43:8d:c9:25:6a:88:
7a:5a:ac:2f:70:67:36:e3:1d:bd:01:8c:ef:fa:c2:
ac:a5:d3:5a:c9:9f:4e:40:fb:42:d5:9e:60:71:59:
12:de:8a:02:3b:97:68:50:55:b8:27:0d:0a:02:e8:
e7:c7:41:99:91:af:d1:90:2e:14:d1:ac:60:ff:3d:
c9:58:a3:6f:5c:6a:8f:be:2f:ae:1f:d0:c5:0d:24:
9f:0d:b2:24:88:26:83:14:c0:e6:53:7d:53:5f:9f:
a3:45:6d:f6:45:9d:88:27:e6:98:d1:a1:b9:e5:fe:
fb:f4:96:11:fa:a7:1f:3a:38:62:0f:35:81:83:91:
8a:f7:e5:e9:69:45:c3:fe:19:51:63:5b:cf:98:94:
f1:06:55:a0:32:87:45:26:b9:f4:f1:b4:6f:a6:9c:
d2:b8:43:7f:7d:bd:86:56:e5:4e:76:39:e6:f3:89:
97:37:80:97:e5:85:49:da:84:cb:1b:99:de:ef:d9:
99:29:ed:3d:e0:01:46:81:27:2c:99:c5:bd:1c:77:
4b:63:5a:46:9b:ae:2e:a8:a7:f3:06:47:7c:ca:29:
af:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:D3:EC:54:3A:B3:1F:AB:41:35:92:26:0D:B0:A4:6E:5A:A3:46:69
X509v3 Authority Key Identifier:
keyid:56:D5:7F:6C:F2:8C:98:2C:1D:3F:F6:C5:25:7F:39:9E:9B:95:5B:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VtV_bPKMmCwdP_bFJX85npuVW90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a72a92-568b-4327-9c1d-6681f916e554/1/TNPsVDqzH6tBNZImDbCkblqjRmk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a72a92-568b-4327-9c1d-6681f916e554/1/VtV_bPKMmCwdP_bFJX85npuVW90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.76.40.0/23
Signature Algorithm: sha256WithRSAEncryption
a6:17:3f:f4:64:68:e7:f8:a0:e2:83:25:3b:eb:5d:f9:fa:a3:
1c:92:7e:ee:2e:b1:43:d7:8f:f3:ee:19:38:f2:5e:6d:91:96:
c9:07:f8:87:83:e9:3d:e6:f4:56:aa:bd:54:3e:b0:47:fd:9a:
29:66:98:24:da:ea:43:8f:02:f4:54:97:fb:00:30:9b:4f:2d:
ab:4b:d4:38:40:ac:be:fd:61:43:b4:32:4c:af:92:1a:e0:d6:
b0:06:8f:5d:0e:83:ee:58:bd:94:c9:f2:52:58:62:1d:21:2b:
8c:2b:99:e5:85:09:f2:ba:9c:be:7c:dd:a6:38:33:79:3c:68:
bf:5b:a6:ec:67:a4:be:01:ac:53:da:a4:7a:73:d6:c6:26:1a:
4d:21:b3:dd:fc:42:df:6d:13:bb:06:5b:05:93:c0:f5:d9:95:
39:33:39:e3:6f:39:d1:70:bf:e5:7f:89:98:d1:a4:50:94:89:
04:73:e9:f3:bf:e9:3b:2b:04:2f:d0:91:a3:c8:4c:7f:f6:a6:
cc:6c:5a:39:ad:bf:9d:78:58:b0:ee:33:54:19:48:0a:66:c6:
f7:ae:e5:0b:b0:39:f9:e0:e3:d5:5a:ea:27:96:0a:64:d2:50:
67:90:f4:5e:24:1c:0f:22:a0:ee:ab:9c:29:26:9d:9e:4b:72:
16:bc:64:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:36 2024 by rpki-client on console-ams.rpki-client.org