Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/TTAQ0BODkrLHy9ZmDWJRWyx9yLU.roa
File: TTAQ0BODkrLHy9ZmDWJRWyx9yLU.roa (raw, json)
Hash identifier: m3/rseTMxFuIkum56bfFWvfueMJbHLBhAzOLQfle5bg=
Subject key identifier: 4D:30:10:D0:13:83:92:B2:C7:CB:D6:66:0D:62:51:5B:2C:7D:C8:B5
Certificate issuer: /CN=f030658f16d2d88d34164592fcd4de13131f1695
Certificate serial: 018CA0394A9F919733C77946550594CEBA12
Authority key identifier: F0:30:65:8F:16:D2:D8:8D:34:16:45:92:FC:D4:DE:13:13:1F:16:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/TTAQ0BODkrLHy9ZmDWJRWyx9yLU.roa
Signing time: Mon 25 Dec 2023 09:05:58 +0000
ROA not before: Mon 25 Dec 2023 09:05:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216334
IP address blocks: 217.196.105.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:a0:39:4a:9f:91:97:33:c7:79:46:55:05:94:ce:ba:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f030658f16d2d88d34164592fcd4de13131f1695
Validity
Not Before: Dec 25 09:05:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4d3010d0138392b2c7cbd6660d62515b2c7dc8b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:14:dc:af:9c:6a:06:7a:34:8a:79:b7:72:4e:
21:01:29:7f:b5:7c:61:b3:66:a0:88:95:0d:6e:a4:
ce:18:e6:20:22:e6:ec:81:c5:76:d5:50:ad:4f:14:
93:59:2a:f0:bd:fe:a2:e2:5e:61:3e:57:f1:69:ea:
67:9b:89:e9:71:c8:46:bb:a0:5c:0a:e0:37:34:d4:
8c:ca:23:43:12:b0:00:61:71:31:02:07:00:76:1e:
aa:5a:72:ab:0f:40:b6:44:0d:2f:ea:bd:d9:63:14:
05:e7:19:85:d5:3c:ba:b4:04:54:0f:a3:99:55:62:
13:9a:89:7f:ce:36:35:6f:57:f0:fe:76:df:17:fe:
c8:aa:66:aa:12:4b:bc:dc:22:7c:13:fa:d1:a2:90:
69:6a:69:91:81:57:c4:81:e8:7f:e9:16:b3:36:74:
17:d7:c0:44:f2:d3:10:ef:05:30:6d:34:00:ba:1c:
3d:93:59:cf:b8:25:64:15:99:e3:e9:ad:59:8d:fa:
9a:c0:2e:71:9f:a8:44:3f:4f:7c:06:91:b8:e2:b6:
4a:d7:a6:8f:2d:db:03:79:ea:22:3d:6b:95:7b:a9:
f1:d7:0d:33:f3:29:57:82:0c:04:ad:0b:78:42:93:
de:fc:f5:99:ad:38:f8:8e:14:65:d8:c2:ef:6c:78:
08:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:30:10:D0:13:83:92:B2:C7:CB:D6:66:0D:62:51:5B:2C:7D:C8:B5
X509v3 Authority Key Identifier:
keyid:F0:30:65:8F:16:D2:D8:8D:34:16:45:92:FC:D4:DE:13:13:1F:16:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/TTAQ0BODkrLHy9ZmDWJRWyx9yLU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.196.105.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:df:3e:8c:1e:5b:90:38:13:3d:d9:8e:a1:6d:00:aa:51:85:
dc:dc:6a:93:5a:63:d8:2f:ab:4d:bf:f4:24:3c:67:9a:d5:7f:
c6:55:3a:83:8b:f3:b8:8d:14:bf:88:a2:63:38:da:03:0f:9f:
af:3b:21:d1:b0:91:5c:13:07:7e:2a:b3:99:f4:cf:08:5e:8a:
ef:c9:63:ec:af:7d:f7:5d:a6:ab:ec:70:4b:c1:3c:0f:f5:dc:
ac:29:7b:6b:e3:7a:25:b0:be:e2:bf:94:13:5d:07:81:dd:de:
be:4f:9f:87:b4:19:dc:57:91:d5:4d:c5:23:ea:87:5c:97:e5:
78:67:4e:7f:3c:ff:d6:12:b3:c4:ac:d7:dc:fa:56:36:7e:69:
15:05:90:55:6a:e8:4d:42:97:90:20:f5:fc:09:cf:ff:0d:c4:
7e:34:cd:c2:3c:f3:d6:f6:a8:4b:f4:90:38:0a:bc:0d:89:c9:
3e:29:4d:82:1c:f8:c3:63:f7:69:63:ad:7c:18:13:73:07:7c:
f9:bf:2c:a2:6f:f5:4b:9a:3d:94:47:8f:02:22:11:0e:31:a0:
c2:f1:ee:5f:f3:14:4d:a5:22:f2:59:38:29:f7:b6:24:68:b7:
70:90:eb:38:39:ac:5b:98:52:dd:94:1f:77:04:93:01:85:ee:
ab:eb:8a:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:37 2024 by rpki-client on console-fra.rpki-client.org