Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/TEnIh8-TuX4D4ddrhC54IxWFxHU.roa
File: TEnIh8-TuX4D4ddrhC54IxWFxHU.roa (raw, json)
Hash identifier: vtfRUoArU3McAGOsiITFCy4SoquoYWT3K+XzEv7KbKI=
Subject key identifier: 4C:49:C8:87:CF:93:B9:7E:03:E1:D7:6B:84:2E:78:23:15:85:C4:75
Certificate issuer: /CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Certificate serial: 018CC795921E1CC6C4B0418A7EAD4C1651CB
Authority key identifier: AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/TEnIh8-TuX4D4ddrhC54IxWFxHU.roa
Signing time: Tue 02 Jan 2024 00:31:57 +0000
ROA not before: Tue 02 Jan 2024 00:31:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 397563
IP address blocks: 213.142.136.0/24 maxlen: 24
213.142.137.0/24 maxlen: 24
213.142.144.0/24 maxlen: 32
213.142.145.0/24 maxlen: 32
213.142.142.0/24 maxlen: 32
213.142.152.0/23 maxlen: 24
213.142.128.0/24 maxlen: 24
213.142.129.0/24 maxlen: 24
213.142.131.0/24 maxlen: 24
213.142.130.0/24 maxlen: 24
91.151.92.0/24 maxlen: 24
80.253.252.0/22 maxlen: 24
91.151.80.0/24 maxlen: 24
91.151.82.0/24 maxlen: 24
91.151.91.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 04 Apr 2024 20:56:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:92:1e:1c:c6:c4:b0:41:8a:7e:ad:4c:16:51:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Validity
Not Before: Jan 2 00:31:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4c49c887cf93b97e03e1d76b842e78231585c475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:47:88:06:a0:89:f2:a6:d2:a2:89:7b:b3:fe:
79:67:6c:a5:5c:e0:dc:82:e7:04:5c:33:e3:5a:9a:
90:ac:75:ea:06:dc:48:1e:3c:d3:0b:18:25:17:95:
6d:68:63:ce:7c:2a:99:d3:f2:ab:6d:4b:74:cd:88:
c6:97:cd:1d:f2:27:c7:45:3d:e1:d7:a2:7d:ac:e1:
70:5c:69:15:1c:69:8f:14:df:fb:aa:20:5f:22:fd:
65:20:4a:ae:5d:81:37:7d:5e:76:bb:9a:19:35:9f:
c0:99:f6:32:7f:f1:70:44:8c:e8:94:5e:c8:64:cc:
5b:f9:39:8c:8c:6b:5f:51:b8:0c:fe:ff:bc:56:5d:
47:f8:cc:b2:01:ad:e6:ab:91:45:9c:40:c2:98:db:
29:49:35:b2:d8:c5:b5:0e:56:c3:ff:ca:7e:04:a9:
23:e3:ce:c9:59:23:33:d0:6f:81:1c:b9:61:f2:88:
ed:c5:14:43:6b:a2:8f:f5:08:87:fe:7e:fb:35:52:
59:4d:f7:ee:04:51:bb:53:30:e9:2a:28:fd:d7:5e:
03:47:47:aa:29:74:c1:b9:78:1c:ac:e3:fa:c1:77:
f2:6d:f3:b1:e6:dd:9e:ec:5d:bb:e4:cd:4b:4f:fb:
0b:d7:c7:64:c6:a9:4d:09:40:e8:41:63:42:69:78:
53:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:49:C8:87:CF:93:B9:7E:03:E1:D7:6B:84:2E:78:23:15:85:C4:75
X509v3 Authority Key Identifier:
keyid:AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/TEnIh8-TuX4D4ddrhC54IxWFxHU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.253.252.0/22
91.151.80.0/24
91.151.82.0/24
91.151.91.0-91.151.92.255
213.142.128.0/22
213.142.136.0/23
213.142.142.0/24
213.142.144.0/23
213.142.152.0/23
Signature Algorithm: sha256WithRSAEncryption
81:d0:80:a4:7e:93:6b:58:38:53:d7:2a:65:ae:df:b9:d6:44:
01:0f:1f:37:38:2e:97:f0:f4:00:6f:fa:08:59:7e:13:2c:94:
df:2f:40:f0:ca:1d:50:bb:3b:c1:96:8f:41:11:00:a3:6c:4e:
d1:e2:f8:3e:72:51:1f:38:43:66:25:a4:64:5b:f8:42:0f:f5:
9c:fb:fe:ce:87:1b:33:b5:7a:d1:09:d8:77:1d:7d:0e:7c:2b:
a6:c0:cd:cf:79:a7:ee:18:46:84:5d:78:3c:1d:fc:f0:64:bc:
14:0d:47:dc:4e:58:7c:eb:73:3b:bb:ba:da:3c:b0:43:75:f1:
af:9f:28:a1:8a:fe:a0:f0:aa:fe:33:f4:28:1b:83:05:a3:54:
04:cd:a6:6a:f3:78:2b:a1:8d:64:96:05:2a:71:19:ba:34:21:
c8:3a:43:34:14:80:e2:e9:f1:7b:31:09:2e:1c:43:16:91:c7:
36:6b:b5:11:a8:6b:2d:f7:54:ee:25:b9:9e:0d:7e:42:b5:4f:
0b:ad:50:8a:22:8d:ba:88:19:90:ad:50:69:ef:20:4e:73:9a:
12:a6:2e:5d:5e:a7:05:eb:09:2e:1c:f5:79:cd:7a:f4:10:fc:
ed:14:d7:94:a6:5d:df:64:42:a8:13:fe:8d:94:c0:e7:45:24:
11:ef:d1:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 5 00:26:55 2024 by rpki-client on console-ams.rpki-client.org