Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/TCxMWN0JTKlAlebJuTCeo2ukTbc.roa
File: TCxMWN0JTKlAlebJuTCeo2ukTbc.roa (raw, json)
Hash identifier: rwMlYXPzWEilrQ5Gf707LRHg0naoDjB3eRqyOn3X3yY=
Subject key identifier: 4C:2C:4C:58:DD:09:4C:A9:40:95:E6:C9:B9:30:9E:A3:6B:A4:4D:B7
Certificate issuer: /CN=845d042f65e1b1303a44e43e0e02748a75837b44
Certificate serial: 018CC6B8026AA41015AD387F32563B702929
Authority key identifier: 84:5D:04:2F:65:E1:B1:30:3A:44:E4:3E:0E:02:74:8A:75:83:7B:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/TCxMWN0JTKlAlebJuTCeo2ukTbc.roa
Signing time: Mon 01 Jan 2024 20:29:57 +0000
ROA not before: Mon 01 Jan 2024 20:29:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61295
IP address blocks: 185.241.215.0/24 maxlen: 24
2a0c:bf80::/48 maxlen: 48
2a0c:bf81::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 01:49:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:02:6a:a4:10:15:ad:38:7f:32:56:3b:70:29:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845d042f65e1b1303a44e43e0e02748a75837b44
Validity
Not Before: Jan 1 20:29:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4c2c4c58dd094ca94095e6c9b9309ea36ba44db7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9c:c0:4b:81:70:e1:34:85:c7:f7:e9:f9:6d:
95:fb:43:28:7a:19:b9:5b:a6:78:43:dc:4d:e1:c9:
eb:c0:5f:6a:dd:cb:41:63:50:6f:f9:88:cf:bf:f3:
c3:c6:33:4e:7f:c9:d4:30:7f:1c:b0:2d:02:a6:68:
3b:01:33:b5:70:5a:bf:2d:a5:5d:e2:c8:4a:e1:98:
06:7c:c2:ab:07:c7:9b:b5:c7:e2:45:3f:69:cd:33:
e9:05:39:9e:5e:5c:b3:14:56:1d:51:f6:d6:0a:92:
b7:55:12:43:de:4e:af:75:17:0d:ee:c2:ad:c6:47:
fd:9d:c0:49:a3:8e:19:ac:a7:6b:3b:53:ad:58:2c:
af:ed:45:6d:df:65:eb:bc:11:4c:72:05:cf:e6:85:
b2:19:f6:e4:cb:aa:78:ec:0d:20:82:e5:3b:60:19:
5b:27:1d:82:1c:5d:96:a4:a1:fd:47:2e:02:f6:9a:
df:05:3c:00:2b:f4:b2:b1:e7:fc:28:ac:80:1c:9e:
ef:aa:33:4e:81:f4:8c:f3:f9:e0:b9:50:bd:c7:1c:
47:94:4c:13:23:e6:57:1f:e6:31:b2:a9:53:f4:e7:
20:ad:02:ec:fe:be:10:af:0d:a8:27:83:65:00:ea:
85:dc:24:98:82:85:2e:8e:4f:04:45:64:79:05:27:
ca:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:2C:4C:58:DD:09:4C:A9:40:95:E6:C9:B9:30:9E:A3:6B:A4:4D:B7
X509v3 Authority Key Identifier:
keyid:84:5D:04:2F:65:E1:B1:30:3A:44:E4:3E:0E:02:74:8A:75:83:7B:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/TCxMWN0JTKlAlebJuTCeo2ukTbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.241.215.0/24
IPv6:
2a0c:bf80::/48
2a0c:bf81::/48
Signature Algorithm: sha256WithRSAEncryption
73:d0:00:27:42:34:1f:c2:c8:a1:a9:94:a3:88:bc:74:4e:1b:
cf:9e:ca:cf:a9:58:5e:c5:6c:a8:ca:49:ef:23:30:28:f1:cf:
90:ec:bb:c0:3f:9c:e5:17:98:c7:c4:b8:f2:c2:c8:c6:8f:bd:
ec:c0:ca:46:87:4e:38:99:69:ba:7a:9e:4d:e9:cc:99:07:e3:
8c:70:49:ed:bc:42:bd:1e:0b:38:58:3e:bf:c5:92:fe:49:9b:
03:14:5e:26:38:4f:03:da:4d:59:20:f2:75:9c:4b:89:d8:b2:
af:40:5a:a2:91:80:87:72:dd:fd:88:e1:c7:87:d1:10:54:c2:
6e:b9:b2:6e:05:2f:c5:ca:d7:70:0d:61:02:c2:33:ce:a6:2a:
87:98:8f:e1:33:97:6a:85:7e:13:3d:2d:dc:1a:fe:3c:dd:50:
35:00:7f:05:06:77:48:0f:87:c3:af:24:28:f9:2c:26:65:ab:
ee:d2:bd:61:03:e7:06:ba:4e:4b:41:c7:02:e9:2d:f8:61:72:
c4:c3:1e:c3:66:2e:b5:ff:d2:7a:c3:4d:58:15:4d:17:47:f4:
50:32:04:8e:9e:b1:41:08:fb:99:e4:0e:f4:41:4f:d9:0d:5a:
d7:6b:e6:95:15:d5:dc:ae:92:1d:81:e8:43:a4:26:5d:68:3e:
c7:e1:2e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:39:14 2025 by rpki-client