Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/231a4a-83de-42fd-9691-8062f241dd96/1/tjBSMAp0Z6XZFQ2MkLzz_9eYdLI.roa
File: tjBSMAp0Z6XZFQ2MkLzz_9eYdLI.roa (raw, json)
Hash identifier: YsOMdOU2iawf/0Y7Rf2nRsu1Bav2LEC33OKhXGWJEVQ=
Subject key identifier: B6:30:52:30:0A:74:67:A5:D9:15:0D:8C:90:BC:F3:FF:D7:98:74:B2
Certificate issuer: /CN=10a9650d7217ddb99f3bc00ebddd6bb2028512e7
Certificate serial: 01856FB124C495FEA91841469FC75D643D4E
Authority key identifier: 10:A9:65:0D:72:17:DD:B9:9F:3B:C0:0E:BD:DD:6B:B2:02:85:12:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EKllDXIX3bmfO8AOvd1rsgKFEuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/231a4a-83de-42fd-9691-8062f241dd96/1/tjBSMAp0Z6XZFQ2MkLzz_9eYdLI.roa
Signing time: Sun 01 Jan 2023 23:35:58 +0000
ROA not before: Sun 01 Jan 2023 23:35:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58027
IP address blocks: 192.94.233.0/24 maxlen: 24
2001:67c:1b00::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:30:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:b1:24:c4:95:fe:a9:18:41:46:9f:c7:5d:64:3d:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10a9650d7217ddb99f3bc00ebddd6bb2028512e7
Validity
Not Before: Jan 1 23:35:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b63052300a7467a5d9150d8c90bcf3ffd79874b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:74:18:be:a4:0a:5e:93:cb:22:8b:b5:aa:86:
91:f5:ca:52:3c:5f:c9:b7:05:6f:c4:a9:17:19:45:
70:f4:31:2a:c4:08:c5:39:b0:52:e8:01:55:84:95:
97:f4:39:cf:9e:f4:3e:38:b2:82:b7:7d:83:21:69:
0a:bf:d7:9b:e9:43:30:4a:24:0d:03:94:4f:43:63:
1c:ff:78:04:4c:dc:2a:ad:64:3c:3c:b1:2a:4e:24:
6c:3a:de:82:13:2d:b7:07:0c:62:50:fb:81:c1:55:
01:8e:90:31:16:a5:00:47:63:3f:0f:25:7f:11:ef:
7a:23:fa:fd:25:9c:65:c6:e7:25:da:2b:bb:d7:c3:
2c:24:81:1a:5e:cc:a4:55:ad:ad:6a:df:0f:c0:d6:
6d:80:ee:61:11:01:00:a3:b0:36:25:18:c5:92:81:
41:6b:9f:16:e2:30:be:06:d5:ff:6c:6f:bb:6f:c9:
fd:b4:66:d0:e0:13:5e:dc:b0:22:0c:27:08:f5:55:
80:d4:27:71:f0:f9:11:d8:ca:fa:97:29:06:16:11:
3a:0f:6d:49:27:40:81:a8:cf:f8:d1:bc:62:7b:db:
be:bc:26:5b:24:2c:08:bd:96:72:e7:30:0c:3e:2e:
72:1e:5b:89:0a:32:e3:7e:6f:3c:ef:f6:dd:19:fe:
26:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:30:52:30:0A:74:67:A5:D9:15:0D:8C:90:BC:F3:FF:D7:98:74:B2
X509v3 Authority Key Identifier:
keyid:10:A9:65:0D:72:17:DD:B9:9F:3B:C0:0E:BD:DD:6B:B2:02:85:12:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EKllDXIX3bmfO8AOvd1rsgKFEuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/231a4a-83de-42fd-9691-8062f241dd96/1/tjBSMAp0Z6XZFQ2MkLzz_9eYdLI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/231a4a-83de-42fd-9691-8062f241dd96/1/EKllDXIX3bmfO8AOvd1rsgKFEuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.94.233.0/24
IPv6:
2001:67c:1b00::/48
Signature Algorithm: sha256WithRSAEncryption
a7:a6:19:7e:3a:53:4c:3f:2c:56:e3:6b:ef:2d:b1:f6:6c:f4:
0a:c9:44:fd:5e:ea:42:96:65:27:49:e9:1d:38:e3:2c:9b:47:
ec:fe:4e:17:85:c3:d1:b1:cf:43:c4:25:70:e5:40:c3:9f:8d:
d7:45:05:fa:21:00:34:0e:60:7c:b1:0c:18:c2:f6:f2:48:d2:
88:fc:7a:e7:ae:d2:ce:0a:09:09:b2:1f:e3:49:b3:58:bc:81:
78:54:70:8b:cb:ef:b2:0f:25:6f:6d:9e:a9:da:62:d8:a5:22:
70:c1:b9:2e:32:dd:b6:33:e1:13:10:ff:9f:d5:14:22:75:65:
7d:df:33:18:b4:08:3a:ed:c4:c8:9a:bc:94:31:b9:f7:27:1c:
4a:90:48:93:48:ff:a1:f6:f1:4e:54:73:3e:bb:3d:2b:31:ad:
79:8e:54:ec:c8:38:65:75:09:9a:c0:11:fb:c4:8b:a3:45:ea:
ed:36:03:4d:7c:fc:5c:d9:22:e5:33:b9:52:48:28:88:ef:19:
cc:e3:e1:3d:9a:fb:5c:bf:e9:e1:af:59:94:09:81:b3:fa:0e:
87:14:a2:65:45:c4:07:14:ca:bb:7f:3e:f7:a2:20:cd:82:b2:
b6:51:6e:e7:36:12:54:64:e0:81:78:9c:47:a0:90:4b:78:01:
ba:f9:60:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:34 2024 by rpki-client on console-fra.rpki-client.org