Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/TSMie14veUQMv4xau45qOAofA0E.roa
File: TSMie14veUQMv4xau45qOAofA0E.roa (raw, json)
Hash identifier: NpULysAQLjlRkxj2RBxXcG5eyl1hDokQBeAkE+Lfyeg=
Subject key identifier: 4D:23:22:7B:5E:2F:79:44:0C:BF:8C:5A:BB:8E:6A:38:0A:1F:03:41
Certificate issuer: /CN=e87ce7df23140c0005125a61aad721531e681f0e
Certificate serial: 0192886A2B150E942318846EBCECBEBF1F81
Authority key identifier: E8:7C:E7:DF:23:14:0C:00:05:12:5A:61:AA:D7:21:53:1E:68:1F:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Hzn3yMUDAAFElphqtchUx5oHw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/TSMie14veUQMv4xau45qOAofA0E.roa
Signing time: Mon 14 Oct 2024 00:25:12 +0000
ROA not before: Mon 14 Oct 2024 00:25:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214390
IP address blocks: 45.112.123.0/24 maxlen: 24
94.139.32.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 11 Nov 2024 16:42:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:88:6a:2b:15:0e:94:23:18:84:6e:bc:ec:be:bf:1f:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e87ce7df23140c0005125a61aad721531e681f0e
Validity
Not Before: Oct 14 00:25:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4d23227b5e2f79440cbf8c5abb8e6a380a1f0341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c4:ee:96:23:94:05:f7:a1:c3:a5:39:b2:e5:
3a:ad:31:9e:8b:48:29:d3:39:17:be:0f:07:c1:78:
c4:fb:48:91:4d:78:ed:b3:98:e4:09:bb:83:e4:9c:
87:fb:1b:99:f7:35:ff:06:c5:d9:97:b8:83:03:b7:
2c:63:fe:e2:df:7a:a5:56:6a:74:fe:87:82:4c:8b:
47:71:e8:87:d6:59:73:d9:02:31:39:79:70:d3:32:
4c:0c:96:8a:3c:57:e4:bb:ee:94:ec:bc:66:7c:05:
e5:de:9a:a1:46:52:aa:22:71:30:0b:ba:8e:35:23:
e7:fb:14:d2:98:1e:48:71:1e:db:1e:61:b5:e5:6b:
b1:06:d6:3a:61:a1:dc:a1:4e:1e:cf:d0:ea:5a:12:
47:88:88:15:1f:0a:1f:23:e1:ec:52:72:19:c2:91:
82:c8:6d:fb:21:cb:0a:d1:21:da:4a:3b:e3:97:10:
14:8b:e3:a0:3e:9d:cd:bf:2e:29:94:31:bc:51:8a:
1a:f9:39:5f:8a:3f:12:d8:9e:f1:0a:50:ae:bc:11:
8e:1f:70:ea:d6:17:01:a7:5a:50:9a:2c:3f:08:21:
77:7c:b4:6c:d5:6e:27:36:f7:33:a0:d0:8e:8b:b2:
95:cf:ce:21:21:6f:41:d3:40:55:e7:4a:95:83:0f:
bc:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:23:22:7B:5E:2F:79:44:0C:BF:8C:5A:BB:8E:6A:38:0A:1F:03:41
X509v3 Authority Key Identifier:
keyid:E8:7C:E7:DF:23:14:0C:00:05:12:5A:61:AA:D7:21:53:1E:68:1F:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Hzn3yMUDAAFElphqtchUx5oHw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/TSMie14veUQMv4xau45qOAofA0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/6Hzn3yMUDAAFElphqtchUx5oHw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.112.123.0/24
94.139.32.0/24
Signature Algorithm: sha256WithRSAEncryption
37:fa:00:52:e5:bd:13:91:95:52:58:88:55:d3:2d:f5:ed:9a:
9b:81:4b:39:b5:66:72:a7:25:3a:3e:b3:bd:4e:9f:e6:20:c8:
00:d7:75:22:c6:98:28:47:bf:4d:ad:2b:24:b5:e5:2d:1b:ce:
03:5c:5c:c7:cd:a8:0a:f5:2b:35:ac:5c:84:59:d0:ac:49:a1:
76:23:ac:a8:00:f9:d2:fd:38:7a:a5:02:9f:71:fb:cd:52:b9:
dd:c1:47:6b:93:42:79:81:55:c6:ec:25:69:19:63:66:77:41:
5d:62:a1:58:37:90:31:cd:fc:b5:5c:48:6b:82:ca:30:d6:05:
39:a1:56:5c:ad:e1:c7:72:e3:d2:bc:9a:64:61:91:c6:51:95:
d3:f5:af:8b:d1:32:bb:1a:06:45:42:ec:94:a4:0a:c0:74:94:
0f:a1:bd:9a:14:8e:32:3b:86:99:99:23:15:89:71:e0:c1:74:
2b:44:d7:c0:ec:9f:09:07:8b:f6:c1:bd:d2:31:ad:d7:d4:2f:
4a:e9:09:cc:cc:75:4b:6a:38:4e:c3:e7:94:c1:0c:c7:43:52:
6a:50:64:77:5b:f3:2c:cf:fc:d7:6a:2b:9b:4c:98:fc:b4:af:
db:d0:5f:da:4a:4c:e9:6e:72:29:96:96:a0:0b:70:f7:9c:a8:
92:42:75:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 11 19:38:44 2024 by rpki-client on console-fra.rpki-client.org