Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/TU8QLuArGAs_--YmawXbyYbj8TU.roa
File: TU8QLuArGAs_--YmawXbyYbj8TU.roa (raw, json)
Hash identifier: jG3y8C8wYZXwd5X0mZjy/qd8uztQLFjbAn2opVscPvU=
Subject key identifier: 4D:4F:10:2E:E0:2B:18:0B:3F:FB:E6:26:6B:05:DB:C9:86:E3:F1:35
Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial: 018CC6B7FC47F32F405BCE530DB80B125D88
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/TU8QLuArGAs_--YmawXbyYbj8TU.roa
Signing time: Mon 01 Jan 2024 20:29:55 +0000
ROA not before: Mon 01 Jan 2024 20:29:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205663
IP address blocks: 192.145.52.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 27 Feb 2024 08:45:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:fc:47:f3:2f:40:5b:ce:53:0d:b8:0b:12:5d:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Validity
Not Before: Jan 1 20:29:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4d4f102ee02b180b3ffbe6266b05dbc986e3f135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a3:94:ed:99:a6:50:a5:41:a6:cd:a3:f9:93:
69:ad:d3:e9:fe:67:c2:94:6a:d1:2f:42:f2:65:8d:
44:dc:cd:68:2d:97:d8:fe:e8:2c:ea:82:a8:a3:b4:
9a:bb:5f:46:14:0b:fd:32:f8:d0:47:f2:22:62:a4:
31:d0:b4:24:cf:c7:be:a5:02:45:0f:2b:60:6b:59:
93:45:97:b3:a5:9e:8c:26:bb:60:a0:8e:71:2a:8f:
5c:1a:cb:8a:23:c5:72:fc:c9:a9:ac:c7:21:95:3c:
3d:ff:89:0a:59:52:5e:b6:a2:e8:10:38:02:84:d3:
3a:2c:60:97:8e:d8:ba:17:41:2b:3e:30:c6:13:f2:
75:10:09:f6:0d:b2:cf:29:b0:d1:80:a4:0e:9c:0c:
c0:71:32:6c:01:e2:fb:03:a9:ee:d8:d9:65:a6:0c:
36:73:1d:10:2c:be:89:06:a0:7f:30:46:99:0c:44:
f2:e3:61:ac:8f:62:f8:8b:be:bb:1b:14:d8:42:a3:
cf:bd:ef:47:b8:44:d2:85:a4:48:87:8c:2c:8b:83:
02:20:65:5e:97:ab:55:e2:ca:5e:89:f9:7e:c1:ce:
c3:3f:cc:4b:8a:59:ff:11:0b:ad:84:df:97:11:a9:
2a:77:9e:10:3b:57:34:3e:4f:34:c4:46:29:2a:37:
ed:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:4F:10:2E:E0:2B:18:0B:3F:FB:E6:26:6B:05:DB:C9:86:E3:F1:35
X509v3 Authority Key Identifier:
keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/TU8QLuArGAs_--YmawXbyYbj8TU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.145.52.0/24
Signature Algorithm: sha256WithRSAEncryption
81:84:f1:3a:bb:fe:45:8e:a8:5d:1d:a7:59:e7:e5:96:9c:b1:
3a:f4:9f:b7:27:c2:23:c3:41:d4:8b:94:42:c5:f6:98:4b:e9:
82:a6:5c:02:53:f3:34:2d:49:63:09:31:74:ee:4a:43:7a:a2:
df:7d:ba:ff:8f:e2:56:45:62:77:4e:c6:23:cc:8a:36:2a:78:
8d:8d:5d:a8:03:13:4f:ed:61:e8:8b:38:a6:ed:5b:63:cf:b6:
4d:84:7d:94:e0:95:38:f5:42:f4:9c:f3:27:39:d9:7a:20:ec:
c1:45:c1:df:5c:30:a4:a3:d1:ca:d4:4d:8e:a8:3c:be:da:6d:
a8:55:01:ab:17:87:8a:73:ac:47:76:28:43:8b:cf:12:f4:ae:
e3:7d:9c:c5:1e:b2:f9:85:10:da:b0:d5:a0:b5:9b:ce:b4:8e:
28:4e:87:89:34:a3:83:1f:c9:7a:3e:56:ac:18:12:6c:ee:1b:
f0:e6:a0:d4:b0:88:9c:40:80:e9:78:f1:78:b0:90:a9:02:0f:
06:05:ea:f2:44:da:4d:24:7e:52:cf:da:88:13:e5:28:39:dd:
9d:2d:d2:07:71:2f:ad:f1:e9:8b:4b:96:6a:47:05:69:3b:c0:
30:81:7a:fe:b3:93:30:8b:15:0a:50:6d:5a:d3:d5:20:1d:15:
0b:80:47:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:08 2024 by rpki-client on console-ams.rpki-client.org