Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/f2bdc8-79e7-48cd-a994-ad495858b32c/1/TUwjFjaqoBGQ7QptBAnDz93WixU.roa
File: TUwjFjaqoBGQ7QptBAnDz93WixU.roa (raw, json)
Hash identifier: MEWmps6/zS+hDzgmMxOTDoOnpM3QrwkFOT3/ISk1XY4=
Subject key identifier: 4D:4C:23:16:36:AA:A0:11:90:ED:0A:6D:04:09:C3:CF:DD:D6:8B:15
Certificate issuer: /CN=877dfcf91569d8156226fc2790e67906763a2b03
Certificate serial: 01856B8A2C10D804879D5240D1A0C16E1E08
Authority key identifier: 87:7D:FC:F9:15:69:D8:15:62:26:FC:27:90:E6:79:06:76:3A:2B:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h338-RVp2BViJvwnkOZ5BnY6KwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/f2bdc8-79e7-48cd-a994-ad495858b32c/1/TUwjFjaqoBGQ7QptBAnDz93WixU.roa
Signing time: Sun 01 Jan 2023 04:14:55 +0000
ROA not before: Sun 01 Jan 2023 04:14:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24786
IP address blocks: 81.93.112.0/20 maxlen: 20
193.28.192.0/21 maxlen: 21
2a06:7500::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:8a:2c:10:d8:04:87:9d:52:40:d1:a0:c1:6e:1e:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=877dfcf91569d8156226fc2790e67906763a2b03
Validity
Not Before: Jan 1 04:14:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4d4c231636aaa01190ed0a6d0409c3cfddd68b15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d4:46:f1:9b:40:a2:08:cc:19:ca:15:53:7a:
82:ad:12:74:3b:50:c8:6a:5b:db:c9:20:bb:4f:79:
2a:be:84:54:d8:21:9f:81:53:aa:ec:2c:24:cc:98:
f5:6d:bd:ab:67:59:b6:1a:ed:91:f7:8c:88:71:52:
d9:cf:65:6f:71:07:89:80:74:c7:c0:31:26:29:aa:
ab:1e:aa:12:4e:6f:8d:6d:99:c1:a4:af:03:70:e8:
72:7a:e3:c3:3a:2f:df:e6:dc:7f:8a:95:2f:a3:4b:
e8:61:17:5b:77:21:69:33:3f:eb:7f:4f:b0:0f:a9:
37:48:bd:20:b9:3b:c1:8d:9c:28:f7:20:b7:e6:9d:
7d:89:73:4c:09:28:36:3b:5b:48:78:01:92:5f:04:
a9:15:08:46:9f:be:c6:e1:17:7a:75:dc:7c:df:fc:
b0:ea:97:6f:ed:03:0d:c1:47:ca:7e:7b:83:be:22:
4d:17:81:3d:32:ea:df:fe:46:fd:f5:67:58:98:35:
65:16:e6:1b:8c:9c:00:2c:88:e3:42:6b:3c:47:f1:
ee:5f:47:76:70:a0:80:77:6f:27:9a:27:8d:4c:1d:
e4:6d:91:0f:8a:03:e7:02:93:3d:7c:ef:2c:06:36:
24:8e:d3:90:9c:ee:1c:2a:cb:34:4d:df:a9:da:bb:
93:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:4C:23:16:36:AA:A0:11:90:ED:0A:6D:04:09:C3:CF:DD:D6:8B:15
X509v3 Authority Key Identifier:
keyid:87:7D:FC:F9:15:69:D8:15:62:26:FC:27:90:E6:79:06:76:3A:2B:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h338-RVp2BViJvwnkOZ5BnY6KwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f2bdc8-79e7-48cd-a994-ad495858b32c/1/TUwjFjaqoBGQ7QptBAnDz93WixU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f2bdc8-79e7-48cd-a994-ad495858b32c/1/h338-RVp2BViJvwnkOZ5BnY6KwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.93.112.0/20
193.28.192.0/21
IPv6:
2a06:7500::/29
Signature Algorithm: sha256WithRSAEncryption
14:e0:42:16:6d:60:27:31:23:ac:63:bb:db:8f:10:8b:fc:b6:
00:75:9a:9b:8e:5e:73:d9:82:86:ce:71:f6:31:dc:77:51:27:
25:a5:c7:f8:dd:2c:4e:3f:37:42:ac:19:42:b6:82:94:d8:3a:
8e:ff:dc:eb:95:8e:0b:12:06:a9:eb:37:6f:7e:99:55:73:68:
a8:eb:4f:98:50:8d:ff:c1:7c:9a:c8:c8:96:d6:0b:db:b2:65:
5f:ac:f1:65:3b:2d:23:08:0a:57:db:86:2a:b2:5c:68:f6:7b:
77:55:a1:c5:55:7e:9f:99:56:3c:92:bc:f0:74:81:0e:f9:43:
f0:c8:12:6a:70:91:7b:34:63:b1:63:d9:53:87:89:93:59:0d:
02:c8:ee:97:ee:ff:92:b3:8f:8c:24:b0:e3:fc:e1:97:9e:33:
dd:fe:3a:4f:24:c5:ee:1c:4c:65:60:fc:c0:a0:ba:66:f3:11:
3d:ce:54:1a:c6:4a:23:ea:9e:6a:2b:26:1d:44:47:29:b0:6b:
86:17:7f:c5:41:5d:22:e2:a5:55:76:8e:f1:1f:f3:89:8a:e8:
0e:b7:27:0f:64:06:c9:2e:bc:91:43:e1:20:5b:b3:49:05:96:
5f:e5:88:d9:d3:5c:bd:10:95:9f:e4:3f:6d:c3:1f:1a:c3:9c:
cd:e5:4b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:56 2024 by rpki-client on console-fra.rpki-client.org