Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/17e567-9e44-444a-ac64-18b34bea9b06/1/tb-eAEqH6IUnjaGFcnmccuvQXc4.roa
File: tb-eAEqH6IUnjaGFcnmccuvQXc4.roa (raw, json)
Hash identifier: zlBuFl+z8L0x9ATFOKRHiwspgKRU3DMQ+UjMBEPxzEs=
Subject key identifier: B5:BF:9E:00:4A:87:E8:85:27:8D:A1:85:72:79:9C:72:EB:D0:5D:CE
Certificate issuer: /CN=54791dde2c9bdea366ce7ec6c5a800c5da633454
Certificate serial: 018F2FCEBAA84ED5E916A983D119C18DBF3D
Authority key identifier: 54:79:1D:DE:2C:9B:DE:A3:66:CE:7E:C6:C5:A8:00:C5:DA:63:34:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHkd3iyb3qNmzn7GxagAxdpjNFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/17e567-9e44-444a-ac64-18b34bea9b06/1/tb-eAEqH6IUnjaGFcnmccuvQXc4.roa
Signing time: Tue 30 Apr 2024 16:20:28 +0000
ROA not before: Tue 30 Apr 2024 16:20:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199274
IP address blocks: 176.103.132.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 09:49:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:2f:ce:ba:a8:4e:d5:e9:16:a9:83:d1:19:c1:8d:bf:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54791dde2c9bdea366ce7ec6c5a800c5da633454
Validity
Not Before: Apr 30 16:20:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b5bf9e004a87e885278da18572799c72ebd05dce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e1:67:63:66:c2:8c:7f:50:8b:ec:3a:7d:d7:
e8:8d:08:46:8d:78:f7:7c:22:43:be:25:f3:c9:eb:
1c:e9:47:2d:ec:fb:e9:e9:77:cc:22:56:8c:ea:d5:
c5:be:23:17:6c:5d:00:4f:9a:66:f4:17:b0:fd:16:
ba:0c:60:6a:02:27:45:db:1a:2f:f6:69:e4:f0:3c:
ef:5b:5e:87:50:4e:9a:64:b0:77:a1:1a:4c:c7:6e:
a6:85:c1:e5:17:1c:0f:93:3b:27:82:1a:c7:d1:37:
d4:3d:be:8f:ba:2d:89:f3:62:20:7d:d7:74:9f:a5:
09:1c:fb:97:84:13:1f:a1:36:e0:6b:9a:ca:c3:e7:
26:1d:a7:30:b1:87:1c:4e:90:a4:c5:2e:38:27:7f:
4d:2e:4c:cc:b6:97:62:61:26:20:3e:58:60:7d:a4:
fd:8f:9a:24:76:18:10:ad:29:a6:b8:7b:64:a8:e4:
a2:00:f7:c5:ed:82:a4:b9:07:82:8a:c0:d4:f2:c7:
1c:53:0a:73:4f:9e:35:05:3d:10:a8:2e:c5:9b:3d:
4e:49:29:0c:65:a2:2f:44:ff:10:eb:ea:19:65:f2:
82:3a:3e:40:d4:3e:58:cb:6e:df:3f:3e:d0:00:52:
f9:c5:df:44:b2:a3:09:ae:f0:d9:f3:78:b7:de:cd:
92:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:BF:9E:00:4A:87:E8:85:27:8D:A1:85:72:79:9C:72:EB:D0:5D:CE
X509v3 Authority Key Identifier:
keyid:54:79:1D:DE:2C:9B:DE:A3:66:CE:7E:C6:C5:A8:00:C5:DA:63:34:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHkd3iyb3qNmzn7GxagAxdpjNFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/17e567-9e44-444a-ac64-18b34bea9b06/1/tb-eAEqH6IUnjaGFcnmccuvQXc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/17e567-9e44-444a-ac64-18b34bea9b06/1/VHkd3iyb3qNmzn7GxagAxdpjNFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.103.132.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:b6:d0:af:81:df:ca:59:43:bd:7d:20:c7:dc:cb:e3:c4:85:
e6:2e:a6:19:a3:e6:11:38:72:e1:14:f9:64:74:50:49:87:d3:
24:9f:7f:44:60:55:06:0a:da:0d:34:90:e6:a2:ac:9f:ec:bb:
e4:0e:16:9a:99:86:d0:ac:51:04:88:b4:10:ca:58:cf:72:48:
df:7d:80:75:31:0d:67:ba:75:ce:0a:00:47:80:04:f9:93:05:
f5:a3:1e:a5:ef:cf:2a:b0:75:0c:fb:37:70:49:ed:99:d1:b4:
20:c9:60:e4:38:ff:10:af:04:31:78:2b:69:31:45:45:f0:85:
a4:d5:d0:59:22:7f:75:82:0c:a5:67:64:81:57:a2:a4:8b:ef:
90:98:78:b9:e2:82:15:0d:ac:65:0c:c4:c6:e8:20:e4:88:ba:
c9:ef:10:20:3c:b5:4d:51:92:9b:d7:53:c5:c1:23:d9:a2:38:
30:96:73:c0:93:5e:e9:ca:c8:37:c3:1a:b2:4d:34:3d:6c:f1:
09:38:2e:d0:72:fe:51:18:36:ac:e6:b8:57:9c:b8:18:6c:1d:
9b:cf:3a:37:2c:6d:47:bf:3b:88:28:e1:4a:b1:ae:16:de:d5:
b5:2d:3f:3f:97:34:c4:93:1f:f5:74:97:a5:2a:61:19:4f:77:
8a:1b:c0:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:47:44 2025 by rpki-client