Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/6c075e-6263-4ff3-a26d-8d32220715ee/1/TJCXM7XGWPcLMHnQEHHrsJncXEE.roa
File: TJCXM7XGWPcLMHnQEHHrsJncXEE.roa (raw, json)
Hash identifier: mJEEr+f85FfARxNpbUIZzAR/lUqoal+l4GDZLuNgmCk=
Subject key identifier: 4C:90:97:33:B5:C6:58:F7:0B:30:79:D0:10:71:EB:B0:99:DC:5C:41
Certificate issuer: /CN=3d70f1f6563de43a11d3644975667c1c28e7959e
Certificate serial: 018570704DDF4B419791A17716E396497852
Authority key identifier: 3D:70:F1:F6:56:3D:E4:3A:11:D3:64:49:75:66:7C:1C:28:E7:95:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PXDx9lY95DoR02RJdWZ8HCjnlZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/6c075e-6263-4ff3-a26d-8d32220715ee/1/TJCXM7XGWPcLMHnQEHHrsJncXEE.roa
Signing time: Mon 02 Jan 2023 03:04:46 +0000
ROA not before: Mon 02 Jan 2023 03:04:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35492
IP address blocks: 193.238.156.0/22 maxlen: 22
185.194.20.0/22 maxlen: 22
78.41.112.0/21 maxlen: 21
2a02:60::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:34:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:70:4d:df:4b:41:97:91:a1:77:16:e3:96:49:78:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d70f1f6563de43a11d3644975667c1c28e7959e
Validity
Not Before: Jan 2 03:04:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4c909733b5c658f70b3079d01071ebb099dc5c41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:94:a1:ef:8a:bf:38:b4:9f:d3:80:9f:41:1d:
f9:0c:6c:9e:53:c1:ec:be:68:5c:0f:97:48:94:5a:
90:ec:20:e7:84:cf:09:e8:d1:80:13:1a:c5:0f:be:
ce:94:41:19:d1:cf:99:cf:f5:f0:d6:3b:1c:dd:c1:
67:95:55:70:1e:c2:97:31:65:8d:ef:72:97:6b:30:
a4:7d:b8:54:0a:6f:4b:9b:5b:bd:d2:4c:fd:2a:82:
26:90:9e:f1:f3:55:bc:d3:d3:0e:23:f6:eb:34:9f:
12:cb:18:d7:ce:b8:7e:ac:46:45:d2:80:23:e5:2a:
2b:3f:1a:07:8f:03:ae:04:47:21:8f:b9:17:79:7f:
99:06:27:c5:aa:5c:82:48:a5:5c:76:ae:ec:8d:36:
eb:4f:17:ba:66:19:54:66:74:8e:c3:f6:ce:38:a1:
c5:7c:69:94:d6:25:26:4d:f4:60:6e:b0:25:62:2e:
ac:5e:b4:cb:bc:94:0c:47:c7:02:b9:f6:5b:5d:fd:
a9:71:df:bd:06:e4:2b:e0:52:ae:68:d2:63:f8:04:
1e:2f:e7:f9:73:c6:e8:7c:de:ba:1e:45:55:3c:d0:
5a:dc:56:e1:1b:2b:60:8d:12:ae:36:74:e2:6e:bd:
14:04:29:78:40:84:3a:2e:52:92:03:a9:f6:a0:7a:
eb:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:90:97:33:B5:C6:58:F7:0B:30:79:D0:10:71:EB:B0:99:DC:5C:41
X509v3 Authority Key Identifier:
keyid:3D:70:F1:F6:56:3D:E4:3A:11:D3:64:49:75:66:7C:1C:28:E7:95:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PXDx9lY95DoR02RJdWZ8HCjnlZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/6c075e-6263-4ff3-a26d-8d32220715ee/1/TJCXM7XGWPcLMHnQEHHrsJncXEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/6c075e-6263-4ff3-a26d-8d32220715ee/1/PXDx9lY95DoR02RJdWZ8HCjnlZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.41.112.0/21
185.194.20.0/22
193.238.156.0/22
IPv6:
2a02:60::/29
Signature Algorithm: sha256WithRSAEncryption
3b:16:03:ea:ff:92:7f:ea:af:54:a2:6f:17:a5:5a:d9:a6:3b:
75:b2:32:f1:ab:c8:65:3e:b6:55:0d:d0:1b:bf:13:61:d4:f5:
96:54:03:20:0a:18:8d:3f:b7:fa:26:b8:37:a4:e4:38:89:72:
99:0f:e9:9f:a8:51:70:2f:97:40:8a:4c:64:ff:c5:34:76:8a:
d9:db:07:f2:b0:ca:eb:f5:65:b5:b9:5e:73:71:58:a6:d0:02:
5d:f4:dd:2c:81:93:0d:56:4b:af:77:4e:f0:b3:eb:ed:1e:89:
d2:2c:94:db:5d:4e:7d:b7:64:f6:ab:39:12:a3:bb:e7:7b:20:
41:73:b2:60:45:1b:83:8d:5a:2a:6c:f8:24:f8:b7:9c:61:6e:
30:92:5c:a3:cd:6c:aa:66:2f:d9:7d:d6:e9:37:d4:ee:24:c0:
d3:e3:7c:40:36:f3:eb:d7:2e:a9:e6:06:97:24:3e:43:a3:72:
64:00:7a:f3:52:27:cc:db:78:f2:59:f0:94:a6:a7:df:91:f9:
49:5e:bb:59:85:f4:29:1a:d2:93:4c:42:4d:ec:76:72:33:f5:
59:e5:23:dd:9f:b4:5b:0d:e8:8e:f4:ae:b5:8a:6a:e5:88:ec:
00:e2:e5:8e:44:b2:da:c5:9c:1f:6a:ef:b5:41:bb:d8:71:c6:
23:23:2a:a4
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAYVwcE3fS0GXkaF3FuOWSXhSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkNzBmMWY2NTYzZGU0M2ExMWQzNjQ0OTc1NjY3YzFjMjhl
Nzk1OWUwHhcNMjMwMTAyMDMwNDQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YzkwOTczM2I1YzY1OGY3MGIzMDc5ZDAxMDcxZWJiMDk5ZGM1YzQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZSh74q/OLSf04CfQR35DGyeU8Hs
vmhcD5dIlFqQ7CDnhM8J6NGAExrFD77OlEEZ0c+Zz/Xw1jsc3cFnlVVwHsKXMWWN
73KXazCkfbhUCm9Lm1u90kz9KoImkJ7x81W809MOI/brNJ8SyxjXzrh+rEZF0oAj
5SorPxoHjwOuBEchj7kXeX+ZBifFqlyCSKVcdq7sjTbrTxe6ZhlUZnSOw/bOOKHF
fGmU1iUmTfRgbrAlYi6sXrTLvJQMR8cCufZbXf2pcd+9BuQr4FKuaNJj+AQeL+f5
c8bofN66HkVVPNBa3FbhGytgjRKuNnTibr0UBCl4QIQ6LlKSA6n2oHrr8QIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFEyQlzO1xlj3CzB50BBx67CZ3FxBMB8GA1UdIwQY
MBaAFD1w8fZWPeQ6EdNkSXVmfBwo55WeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFhEeDlsWTk1RG9SMDJSSmRXWjhIQ2pubFo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC82YzA3NWUtNjI2My00ZmYzLWEyNmQt
OGQzMjIyMDcxNWVlLzEvVEpDWE03WEdXUGNMTUhuUUVISHJzSm5jWEVFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC82YzA3NWUtNjI2My00ZmYzLWEyNmQtOGQzMjIyMDcxNWVl
LzEvUFhEeDlsWTk1RG9SMDJSSmRXWjhIQ2pubFo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDTilwAwQC
ucIUAwQCwe6cMA0EAgACMAcDBQMqAgBgMA0GCSqGSIb3DQEBCwUAA4IBAQA7FgPq
/5J/6q9Uom8XpVrZpjt1sjLxq8hlPrZVDdAbvxNh1PWWVAMgChiNP7f6Jrg3pOQ4
iXKZD+mfqFFwL5dAikxk/8U0dorZ2wfysMrr9WW1uV5zcVim0AJd9N0sgZMNVkuv
d07ws+vtHonSLJTbXU59t2T2qzkSo7vneyBBc7JgRRuDjVoqbPgk+LecYW4wklyj
zWyqZi/ZfdbpN9TuJMDT43xANvPr1y6p5gaXJD5Do3JkAHrzUifM23jyWfCUpqff
kflJXrtZhfQpGtKTTEJN7HZyM/VZ5SPdn7RbDeiO9K61imrliOwA4uWORLLaxZwf
au+1QbvYccYjIyqk
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:14 2024 by rpki-client on console-ams.rpki-client.org