Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/TUGRN84Gma1gJ2gCMAu7SvvuVqg.roa
File: TUGRN84Gma1gJ2gCMAu7SvvuVqg.roa (raw, json)
Hash identifier: 846Pxm8dKqDydQhwvNCTegIOBxxmQIPWKJUKlJmLsTY=
Subject key identifier: 4D:41:91:37:CE:06:99:AD:60:27:68:02:30:0B:BB:4A:FB:EE:56:A8
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 018BC65C441DC7AB47795183ACD5E70289B0
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/TUGRN84Gma1gJ2gCMAu7SvvuVqg.roa
Signing time: Mon 13 Nov 2023 01:46:57 +0000
ROA not before: Mon 13 Nov 2023 01:46:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.177.24.0/24 maxlen: 24
45.150.55.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 13 Nov 2023 16:14:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:c6:5c:44:1d:c7:ab:47:79:51:83:ac:d5:e7:02:89:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Nov 13 01:46:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4d419137ce0699ad60276802300bbb4afbee56a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:e8:0c:6a:88:eb:46:0d:54:ba:c9:4c:2a:db:
c8:16:2d:24:0f:11:12:ab:07:ee:ec:0e:de:89:9c:
66:ce:f3:a2:82:72:03:32:21:63:f5:5b:b4:7e:cd:
ed:51:9f:9f:8a:8e:4e:19:16:a7:10:12:14:76:a9:
d9:94:03:78:76:5e:35:ef:a8:b0:a7:41:5f:73:d8:
76:1d:36:a0:81:98:60:37:c3:5b:6d:25:28:a2:8f:
60:cf:f4:97:bc:fe:00:48:89:78:78:df:5d:38:9d:
0d:b7:a1:e1:2b:79:c0:4b:66:89:2b:9f:a8:cf:d9:
6c:d7:ff:7b:7a:e1:01:fb:ed:89:d5:66:71:da:63:
42:c8:6f:16:c2:8d:32:d8:64:97:1b:48:27:9e:f1:
40:95:1e:9b:19:93:97:46:b8:b9:45:6c:3e:58:84:
b8:e4:54:43:77:37:35:42:1e:6d:ae:93:ef:f3:ad:
61:f8:da:c5:8f:a8:8d:11:7f:cb:07:b0:7c:83:4b:
58:66:e9:7c:c8:a1:13:7c:1a:e9:06:75:a9:43:7b:
68:62:8b:70:30:55:06:5a:b6:df:34:dc:bf:16:51:
cb:73:eb:2b:61:cb:be:25:6f:4f:72:45:26:be:3b:
d0:23:73:14:fe:d6:0c:86:f2:7a:69:54:d3:0c:20:
d3:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:41:91:37:CE:06:99:AD:60:27:68:02:30:0B:BB:4A:FB:EE:56:A8
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/TUGRN84Gma1gJ2gCMAu7SvvuVqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.55.0/24
185.177.24.0/24
Signature Algorithm: sha256WithRSAEncryption
73:db:b4:59:6b:d2:4f:4a:4f:b7:fe:14:3f:0c:01:b7:4a:e5:
d9:48:1f:35:36:d5:57:59:b7:17:1f:5b:7c:3e:3f:6d:12:8e:
36:7f:95:2d:8e:49:77:eb:c6:1c:1f:57:cd:bc:c3:ff:7b:5c:
35:56:33:58:6c:30:fe:04:c3:a8:3c:26:65:9e:56:6c:f6:51:
0f:3a:95:d2:b6:68:95:b0:a9:47:31:67:3a:df:cb:7e:85:a1:
a2:87:04:ce:bb:bd:98:33:b1:4e:50:2f:1b:65:57:a7:14:55:
03:76:91:bd:e8:78:86:6e:31:d0:91:69:fd:38:8e:0d:1e:c5:
58:1f:6e:bf:f7:a2:45:5b:29:24:9b:76:08:eb:b9:bb:fd:42:
7c:79:7b:a8:4d:53:21:92:cb:85:97:db:35:bb:c7:a0:01:ed:
06:d8:1c:72:fe:4b:6a:88:c1:6a:d4:69:3c:4d:c6:3e:7b:48:
6b:a7:43:56:32:17:eb:91:c1:4a:c0:61:ef:40:11:83:b7:45:
35:33:4b:c1:f4:b2:b3:73:56:97:91:31:66:64:ae:41:87:37:
ee:7e:6c:55:d9:90:86:cb:81:b0:41:26:c0:19:88:23:bb:90:
20:51:13:56:0c:2b:6b:6c:ae:b1:52:c4:84:2c:81:d6:ea:a5:
4e:41:cb:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:00 2024 by rpki-client on console-fra.rpki-client.org