Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/TGGch3cyswtG6aUBMeYdoBFP6bw.roa
File: TGGch3cyswtG6aUBMeYdoBFP6bw.roa (raw, json)
Hash identifier: Zr4tAXUYIj0nK6NCv1HOKv335ZoXI8zgH4o3GzWRmLs=
Subject key identifier: 4C:61:9C:87:77:32:B3:0B:46:E9:A5:01:31:E6:1D:A0:11:4F:E9:BC
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018CC50121D09FF65E84F833C01B079C4C9C
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/TGGch3cyswtG6aUBMeYdoBFP6bw.roa
Signing time: Mon 01 Jan 2024 12:30:34 +0000
ROA not before: Mon 01 Jan 2024 12:30:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200023
IP address blocks: 45.130.196.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Mar 2024 08:23:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:21:d0:9f:f6:5e:84:f8:33:c0:1b:07:9c:4c:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 1 12:30:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4c619c877732b30b46e9a50131e61da0114fe9bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:54:3a:1a:cd:53:b3:7e:02:a7:c5:9d:62:fb:
19:05:54:b0:b7:96:d9:c6:8e:12:63:1e:0a:ad:07:
ff:d8:0e:df:7c:1a:d3:f1:ab:71:f7:ab:44:c5:aa:
7e:8b:5e:90:43:e9:04:66:05:65:d3:c1:d8:00:d1:
90:85:e0:d8:cc:5d:4c:30:5d:16:a8:35:f8:52:64:
0f:df:5a:27:34:d0:f6:ea:78:8e:bd:c1:3f:7d:ae:
15:99:19:11:28:a2:48:2a:20:95:54:52:b1:b4:f9:
a3:e7:6d:b5:0b:da:06:64:c7:21:55:b2:10:6d:7d:
79:94:c9:3e:8c:66:b3:1e:44:7b:bb:e9:86:35:7d:
93:ca:3d:54:34:b0:87:89:aa:06:61:85:0c:b0:f4:
1c:ad:a8:44:2c:2e:37:90:ed:19:a3:a4:69:06:5f:
60:93:3e:7f:06:44:37:0a:d9:d0:91:ca:cf:28:bf:
61:e3:62:43:6c:b2:fc:c0:55:ee:a6:17:89:bd:a6:
59:d8:4b:c8:75:6c:68:1d:22:36:ff:38:ba:f7:75:
d3:75:02:73:6e:b5:96:6b:17:0b:65:91:fd:31:db:
f6:5c:43:4e:de:cc:76:c9:28:97:fd:62:b4:b2:e2:
5d:13:75:46:69:10:18:16:85:ed:46:61:9c:06:50:
c8:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:61:9C:87:77:32:B3:0B:46:E9:A5:01:31:E6:1D:A0:11:4F:E9:BC
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/TGGch3cyswtG6aUBMeYdoBFP6bw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.196.0/22
Signature Algorithm: sha256WithRSAEncryption
13:05:15:1f:a5:f1:7c:8b:7f:46:eb:14:10:27:2a:ec:a6:20:
f2:60:07:9f:d0:c7:c1:6d:04:49:9f:4a:1d:83:47:58:ac:08:
63:ab:54:c8:f5:e4:74:c2:9f:94:ab:cb:bf:9d:04:ed:00:97:
e0:b0:7b:8d:9a:13:cd:44:ff:42:88:00:63:47:1c:13:53:12:
ef:68:5b:c6:5c:29:d0:94:20:50:7b:62:28:8b:1e:0a:a3:bc:
c1:3e:50:7f:e0:ff:7b:78:43:90:7c:0c:88:c5:f1:6b:ae:1a:
00:fe:cf:37:19:82:d6:5a:a7:ec:39:29:1c:68:b2:c5:a1:73:
8c:81:94:a5:59:28:e3:2d:3d:18:51:a9:37:a0:a4:74:1a:a0:
05:d5:c6:f0:d8:af:ff:8a:c2:e4:aa:2a:a2:90:66:f8:6a:3b:
3d:5d:d2:00:3e:9a:5b:6c:0c:5a:87:6b:1e:05:45:31:fb:5e:
b6:1e:9c:a9:63:24:58:b8:00:b6:94:69:fc:86:75:30:85:70:
3c:8f:74:3a:b2:2f:47:f0:db:f7:76:cc:27:6b:48:ca:7d:41:
18:10:32:a9:48:44:d1:98:fe:1e:85:54:8b:c5:cd:60:cc:9d:
de:f4:5c:7a:f2:24:b1:14:8d:a9:be:85:30:2c:29:94:ff:0f:
5b:2b:35:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 5 12:43:31 2024 by rpki-client on console-fra.rpki-client.org