Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/TSjSLQHUsQfu4WG1FDPqgu2GpkQ.roa
File: TSjSLQHUsQfu4WG1FDPqgu2GpkQ.roa (raw, json)
Hash identifier: nrVG6g6wY8yMyHnzbJ7gn28ZD77LgJrQw7N+dQudXv4=
Subject key identifier: 4D:28:D2:2D:01:D4:B1:07:EE:E1:61:B5:14:33:EA:82:ED:86:A6:44
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 018F873E18A5A494A2B53DF886F3996AF5A8
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/TSjSLQHUsQfu4WG1FDPqgu2GpkQ.roa
Signing time: Fri 17 May 2024 15:49:04 +0000
ROA not before: Fri 17 May 2024 15:49:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9009
IP address blocks: 45.8.197.0/24 maxlen: 24
45.8.198.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 20 May 2024 10:24:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:3e:18:a5:a4:94:a2:b5:3d:f8:86:f3:99:6a:f5:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: May 17 15:49:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4d28d22d01d4b107eee161b51433ea82ed86a644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:75:fd:05:ed:f8:6a:29:8f:d2:e8:11:dd:0d:
d0:25:a8:b3:c9:7f:a2:02:b7:e1:10:a3:9a:bd:7c:
92:c1:60:87:01:1d:5e:b0:5b:24:19:34:48:2b:ca:
ee:eb:37:d3:0c:e5:ae:ab:71:a3:7e:9b:dc:6f:ef:
57:f6:4e:ea:79:02:08:0f:f1:56:08:57:ae:72:ab:
09:65:7f:15:bc:25:f8:3e:fa:6a:f6:b6:99:2f:d9:
e2:fa:23:2b:f2:02:72:22:fc:b4:5f:ac:66:82:52:
fc:af:38:54:19:fe:ba:9e:d8:1c:cf:6d:2f:d7:e9:
4a:e9:cb:50:bc:31:fe:be:cd:97:77:aa:7d:83:2d:
d2:0d:40:4c:aa:cc:79:c2:7a:da:7e:b3:a4:c4:50:
4d:d9:63:fa:3f:3f:37:f3:de:e0:08:c8:a2:87:f7:
42:25:a4:97:cb:76:e5:2c:89:31:96:db:84:a5:2b:
12:cc:d7:bc:ef:c6:4a:b3:11:90:1a:2d:f9:11:c7:
69:f1:50:19:0c:4e:b2:b7:55:de:57:70:2c:27:7a:
ea:70:5d:a6:a2:b7:d8:71:e8:4d:b2:f6:da:fd:81:
ed:ff:ec:f7:24:61:11:9a:ae:20:82:45:f4:8e:51:
1c:1a:02:bf:21:af:9b:d3:99:0b:83:5b:be:ca:19:
e4:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:28:D2:2D:01:D4:B1:07:EE:E1:61:B5:14:33:EA:82:ED:86:A6:44
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/TSjSLQHUsQfu4WG1FDPqgu2GpkQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.197.0-45.8.198.255
Signature Algorithm: sha256WithRSAEncryption
ce:5e:43:89:17:25:d4:be:7e:e6:05:5b:8b:d3:90:3c:9e:14:
c4:e4:23:36:a4:61:5b:c2:d3:4b:5c:92:e7:d1:91:b8:a2:c2:
15:ea:d2:85:83:6f:35:79:09:d3:fb:4f:d6:48:ff:a1:d2:fa:
14:07:f4:b3:70:a5:7b:4b:47:c8:ed:6c:f2:da:ac:b6:76:0e:
2c:12:f3:c0:45:c6:4e:8a:4d:ab:d2:bf:44:1d:e2:6b:f9:fb:
43:28:aa:08:c1:b1:fc:51:e0:95:d7:50:6a:a0:03:85:f1:3c:
37:df:19:bc:21:c9:f4:51:e0:85:8d:7e:8a:af:ec:54:34:9c:
e6:9f:92:7b:77:6d:f3:b1:17:97:b1:3e:82:79:e4:b1:dc:74:
d6:4d:c4:94:89:5c:05:18:38:b0:b7:60:d6:59:ca:a5:d2:c4:
d2:40:97:49:42:20:a3:8c:66:ad:00:ab:f4:c3:53:4e:00:98:
84:21:54:4f:6c:81:32:c2:62:8c:36:1a:df:8e:b6:c3:32:90:
46:8a:29:c3:d6:6d:ac:ed:5b:94:c7:69:25:6c:78:8f:ff:8f:
89:2a:9a:69:5d:fd:24:8e:93:cd:ae:89:bf:d3:d8:fb:90:32:
80:80:7e:61:1c:a2:2c:cb:e6:80:b6:6f:b9:aa:f4:b3:57:6c:
19:6f:05:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:24 2024 by rpki-client on console-fra.rpki-client.org