Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/TSJU_NhcB1-QBB5B4-cGxYizRjM.roa
File: TSJU_NhcB1-QBB5B4-cGxYizRjM.roa (raw, json)
Hash identifier: OfGLTvNJwP3q8WPIwlMQjoVCYLA9o8kIfbIsnv2yaio=
Subject key identifier: 4D:22:54:FC:D8:5C:07:5F:90:04:1E:41:E3:E7:06:C5:88:B3:46:33
Certificate issuer: /CN=9e459aa4602bffa2d2650ba66818458c89fc4582
Certificate serial: 018CC2DB2925E312E99B4582FB086FA31268
Authority key identifier: 9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/TSJU_NhcB1-QBB5B4-cGxYizRjM.roa
Signing time: Mon 01 Jan 2024 02:29:51 +0000
ROA not before: Mon 01 Jan 2024 02:29:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 45671
IP address blocks: 89.42.20.0/24 maxlen: 24
89.149.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 19 Sep 2024 12:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:29:25:e3:12:e9:9b:45:82:fb:08:6f:a3:12:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e459aa4602bffa2d2650ba66818458c89fc4582
Validity
Not Before: Jan 1 02:29:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4d2254fcd85c075f90041e41e3e706c588b34633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:1d:f2:91:2a:96:73:ad:b2:55:e7:98:5e:11:
38:d6:2a:bb:21:36:8e:90:6d:f2:d2:23:2c:97:3a:
93:7d:d3:4f:2b:06:cd:11:c3:9f:2b:8d:77:a0:43:
49:4f:99:db:b9:7f:91:de:47:c7:35:c8:f5:46:b5:
50:6d:63:35:6b:6f:15:6c:54:61:ac:ff:9e:37:d9:
58:13:60:82:12:3a:47:7e:16:59:e7:d1:50:c3:be:
c9:e1:5e:0d:b2:8c:08:a0:5a:2a:36:80:5f:62:da:
6a:79:6f:e5:40:f5:40:87:df:63:9a:75:76:21:1d:
5f:57:97:f4:78:34:21:67:d7:6f:77:8f:30:d6:61:
c9:6c:40:de:d8:93:72:ab:3b:90:6d:95:5d:12:de:
69:9e:f8:95:8f:9b:be:8a:0e:f5:39:4e:b5:6e:87:
f2:1c:50:2e:2a:25:7e:6a:2f:df:ac:9c:dc:2a:a2:
45:a6:16:b4:4c:23:dc:69:ed:00:66:af:ce:7a:a1:
9c:cc:95:48:cc:08:70:98:e7:fa:80:b4:d9:53:41:
32:d2:48:8d:8e:91:6c:83:02:00:dc:82:5b:b2:14:
2d:fc:a6:4f:b5:2e:84:12:36:aa:c6:53:d2:95:ab:
74:67:ee:7c:b0:08:74:54:0f:60:42:c4:55:58:c7:
c5:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:22:54:FC:D8:5C:07:5F:90:04:1E:41:E3:E7:06:C5:88:B3:46:33
X509v3 Authority Key Identifier:
keyid:9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/TSJU_NhcB1-QBB5B4-cGxYizRjM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.20.0/24
89.149.63.0/24
Signature Algorithm: sha256WithRSAEncryption
10:d7:5b:99:95:76:3e:f5:54:dd:c2:62:5b:31:97:63:53:48:
5f:4a:6c:08:0d:d7:90:61:0f:68:8e:78:0e:8f:9a:b5:f4:55:
12:24:aa:da:4c:ed:d8:62:78:80:82:29:bb:23:d4:de:70:aa:
2b:6a:1f:56:20:a7:7d:cb:7c:b0:cd:49:21:5b:30:bf:73:75:
63:1f:32:ad:8f:f4:0b:90:e3:3c:e7:ed:94:18:a5:1d:e4:e4:
30:88:9d:7c:ba:e5:e0:8b:65:77:f8:7b:6b:c3:76:d7:98:fd:
c8:4a:af:c2:e4:1d:57:5d:02:28:3b:05:93:70:b5:96:cd:38:
01:18:05:de:85:9e:3a:94:e0:43:58:27:03:7b:64:31:1e:d6:
47:50:24:92:8f:82:4b:bd:90:5d:a0:37:5e:7f:7c:ca:4d:c7:
7c:9e:2f:74:62:ca:df:40:03:ad:ca:39:c9:b2:22:86:1c:ba:
73:7e:99:be:de:b2:34:a6:6f:c6:51:40:bb:eb:1f:86:69:48:
da:e1:b0:b9:dc:7d:26:58:f8:13:ee:e7:c2:b7:a0:2e:d8:65:
e8:f8:ea:d5:e9:17:d6:ad:ee:4a:75:70:44:57:c7:d5:c6:49:
ef:c4:be:4e:44:22:b8:9b:75:cd:c8:b9:39:76:61:34:6c:95:
bf:26:23:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 17:01:53 2024 by rpki-client on console-ams.rpki-client.org