Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/TTr7Q5ExMuPvsvLdGpVqQtB05aU.roa
File: TTr7Q5ExMuPvsvLdGpVqQtB05aU.roa (raw, json)
Hash identifier: rbjM+7E13UQ19f2pWuYRzWLDT4V/BLlQKOQ/vhR5Ryw=
Subject key identifier: 4D:3A:FB:43:91:31:32:E3:EF:B2:F2:DD:1A:95:6A:42:D0:74:E5:A5
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018C3F59706CE2A13A3EAB175DF814E799AC
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/TTr7Q5ExMuPvsvLdGpVqQtB05aU.roa
Signing time: Wed 06 Dec 2023 13:37:55 +0000
ROA not before: Wed 06 Dec 2023 13:37:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212477
IP address blocks: 45.123.41.0/24 maxlen: 24
45.123.42.0/23 maxlen: 24
45.141.203.0/24 maxlen: 24
45.141.200.0/23 maxlen: 24
45.141.202.0/24 maxlen: 24
91.190.100.0/24 maxlen: 24
103.212.82.0/24 maxlen: 24
185.35.138.0/24 maxlen: 24
185.35.136.0/23 maxlen: 24
185.35.139.0/24 maxlen: 24
89.47.89.0/24 maxlen: 24
2a0b:64c0::/32 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:3f:59:70:6c:e2:a1:3a:3e:ab:17:5d:f8:14:e7:99:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Dec 6 13:37:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4d3afb43913132e3efb2f2dd1a956a42d074e5a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e1:63:3f:b0:1b:6c:14:63:ef:c4:7a:a1:e4:
3a:37:26:db:00:7d:77:1f:42:eb:00:b8:e4:4f:bb:
b1:17:65:37:a4:9d:b0:df:e7:35:8d:19:cb:16:da:
7f:4c:b1:9a:e0:34:38:09:03:9b:44:0d:db:b4:d2:
52:d8:8e:f2:15:41:7d:f7:4a:bb:34:3c:8d:dc:75:
93:9d:c7:73:e9:ba:6a:67:3d:fc:52:be:02:9f:fc:
ea:be:39:f6:9f:10:6d:ab:6a:fd:52:b4:20:82:43:
17:86:8d:9f:a8:e0:30:27:46:3d:be:e6:c0:19:d9:
d7:4b:49:a7:f7:95:85:96:64:cc:78:aa:90:b3:94:
df:1b:6e:14:dd:a8:9d:f1:e9:cc:5b:6f:05:5c:b8:
0e:de:1a:35:aa:a4:61:02:10:f2:c4:68:48:a3:ad:
df:f1:a8:2e:d3:b9:3b:28:1e:3f:e2:ab:8d:3c:e3:
3d:81:59:c2:63:c1:d9:91:49:f0:8e:b1:0c:11:3f:
31:e2:7a:6c:bf:dc:8c:49:10:bc:c3:13:e9:fd:73:
a5:72:b0:36:c6:8a:bd:e2:5b:71:d7:ba:8c:3d:c0:
e5:6b:42:41:91:f5:98:7f:93:c0:26:6e:bc:5b:a1:
d5:a5:cf:c8:49:5c:0b:bf:fe:d6:6f:ab:47:a5:2b:
4b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:3A:FB:43:91:31:32:E3:EF:B2:F2:DD:1A:95:6A:42:D0:74:E5:A5
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/TTr7Q5ExMuPvsvLdGpVqQtB05aU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.123.41.0-45.123.43.255
45.141.200.0/22
89.47.89.0/24
91.190.100.0/24
103.212.82.0/24
185.35.136.0/22
IPv6:
2a0b:64c0::/32
Signature Algorithm: sha256WithRSAEncryption
66:ff:ca:4b:bb:55:a9:a0:12:ba:84:d2:60:59:d9:69:ad:2e:
42:42:8c:28:5a:8e:94:fa:64:cb:a0:ef:6b:15:40:3d:07:9c:
dd:36:53:39:ea:bc:dc:31:f2:76:b7:54:d3:a6:c2:1f:46:78:
78:f7:e0:f8:57:66:54:5f:0e:00:8f:8e:66:98:93:11:cb:58:
dd:87:a8:6f:e1:8b:52:11:70:7d:c1:d7:aa:0b:9c:19:b6:fe:
ce:b2:2d:4b:e3:c0:36:b4:6a:d9:8b:93:ab:1c:2e:27:2b:03:
d1:f8:46:0e:e7:8e:6d:c4:9c:dd:d4:48:52:33:74:9b:6c:08:
ce:de:77:1a:7b:01:a9:e0:45:41:99:ca:b1:2f:25:a9:bd:99:
a3:10:e4:0d:cc:d5:1e:86:8e:ec:ab:35:98:4a:f0:cc:fc:33:
1c:c8:9f:8b:3d:0e:f3:7a:74:9b:b7:51:b7:9d:8c:4f:4b:6d:
6b:f6:98:97:10:af:01:a2:ed:e2:44:1b:1a:a7:a7:9c:e9:b1:
d7:1d:6a:c1:65:b7:c3:a2:b7:ec:1e:b0:98:c6:7b:b7:f6:7c:
f9:a0:7b:55:5a:8c:54:b0:ba:51:4f:3a:c0:a5:b3:01:a0:0a:
34:89:91:cf:43:ec:1d:76:a6:26:5b:e6:0b:e9:08:96:12:94:
07:b2:74:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:15:28 2024 by rpki-client on console-fra.rpki-client.org