Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/720720-27b7-45ca-a9c8-e15bd79c39c3/1/TAFHrQHY8NUjQSlvgzvs0arA0XE.roa
File: TAFHrQHY8NUjQSlvgzvs0arA0XE.roa (raw, json)
Hash identifier: SB9QeTsCFdMLB1aHcGy+fmS9wz1Xxybq+z9ss1yB5+4=
Subject key identifier: 4C:01:47:AD:01:D8:F0:D5:23:41:29:6F:83:3B:EC:D1:AA:C0:D1:71
Certificate issuer: /CN=72b8d533e2519b68adcb3b7be359b93357e2b1cb
Certificate serial: 01856F1DA21C57FAF085C1DD48EB4831A826
Authority key identifier: 72:B8:D5:33:E2:51:9B:68:AD:CB:3B:7B:E3:59:B9:33:57:E2:B1:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crjVM-JRm2ityzt741m5M1fiscs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/720720-27b7-45ca-a9c8-e15bd79c39c3/1/TAFHrQHY8NUjQSlvgzvs0arA0XE.roa
Signing time: Sun 01 Jan 2023 20:54:51 +0000
ROA not before: Sun 01 Jan 2023 20:54:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48635
IP address blocks: 128.140.216.0/21 maxlen: 24
185.231.200.0/22 maxlen: 24
62.84.240.0/21 maxlen: 24
91.203.76.0/22 maxlen: 24
109.70.0.0/21 maxlen: 24
46.17.0.0/21 maxlen: 24
185.89.4.0/22 maxlen: 24
185.27.140.0/22 maxlen: 24
2a02:2968::/29 maxlen: 48
2a05:cfc0::/29 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:1d:a2:1c:57:fa:f0:85:c1:dd:48:eb:48:31:a8:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b8d533e2519b68adcb3b7be359b93357e2b1cb
Validity
Not Before: Jan 1 20:54:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4c0147ad01d8f0d52341296f833becd1aac0d171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:c7:e8:87:df:18:e9:fa:74:5c:3f:8a:8c:a9:
01:ba:49:ed:41:a6:88:97:0e:1c:8c:fa:f9:41:42:
e3:4e:e2:2f:6f:69:eb:a4:e0:da:72:34:60:c1:de:
57:8f:6f:ba:46:64:ff:42:f2:0a:55:ed:51:2c:cf:
28:1d:ce:cf:ff:6e:97:f7:93:f8:4a:c8:4f:26:4d:
87:84:24:26:9d:11:f6:bd:50:66:3a:9a:43:bc:7a:
c2:23:90:62:8a:28:32:6a:bd:b4:b5:81:1a:16:7a:
56:cf:5b:37:ac:d8:0e:1d:38:25:04:36:c7:57:45:
6a:98:b4:67:de:eb:aa:12:8d:bc:57:f6:4d:a4:f0:
c6:1c:ed:a0:e8:73:43:b3:22:91:87:aa:2f:05:5a:
96:97:8f:c5:29:8e:fe:bc:8f:6d:ea:28:41:68:0d:
11:0b:a8:31:7b:09:4a:42:11:03:9d:26:86:3b:ed:
d5:0e:a3:80:3e:94:52:ee:a8:52:c7:a8:37:86:3b:
08:61:32:7e:eb:d3:4f:2b:06:df:07:d5:a9:8f:43:
fc:84:c1:ba:db:c3:b8:6d:56:68:d7:2a:0b:b2:98:
24:e2:52:5f:48:e8:82:d7:c8:bf:8f:dd:95:e4:a5:
5d:6b:e1:08:3d:95:44:f5:08:71:2f:72:33:36:a6:
53:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:01:47:AD:01:D8:F0:D5:23:41:29:6F:83:3B:EC:D1:AA:C0:D1:71
X509v3 Authority Key Identifier:
keyid:72:B8:D5:33:E2:51:9B:68:AD:CB:3B:7B:E3:59:B9:33:57:E2:B1:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crjVM-JRm2ityzt741m5M1fiscs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/720720-27b7-45ca-a9c8-e15bd79c39c3/1/TAFHrQHY8NUjQSlvgzvs0arA0XE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/720720-27b7-45ca-a9c8-e15bd79c39c3/1/crjVM-JRm2ityzt741m5M1fiscs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.17.0.0/21
62.84.240.0/21
91.203.76.0/22
109.70.0.0/21
128.140.216.0/21
185.27.140.0/22
185.89.4.0/22
185.231.200.0/22
IPv6:
2a02:2968::/29
2a05:cfc0::/29
Signature Algorithm: sha256WithRSAEncryption
09:d4:cb:3b:2e:32:1e:ba:31:51:a1:59:c2:0b:54:f7:19:f3:
42:d8:77:58:72:1e:6d:a7:7b:7e:54:b7:e5:43:8b:ae:e3:b7:
79:4d:c9:97:cf:37:a5:0d:83:93:be:5b:18:f3:2a:8e:83:28:
3c:29:99:e9:63:02:59:72:27:e0:f0:60:90:33:54:f5:62:ed:
8b:cf:b0:19:c7:b3:f4:9b:68:ff:f8:55:42:eb:68:93:bb:f2:
86:a6:e9:7b:52:15:10:17:70:81:42:ba:b8:90:be:89:84:99:
c4:86:4a:d9:92:b0:66:06:bd:ff:4b:84:ef:be:8c:af:29:c7:
83:ef:ba:45:0c:93:db:22:80:0d:65:11:ed:f3:54:45:89:66:
f6:25:75:8a:f8:90:d7:05:93:8d:44:63:49:8b:78:7b:95:2d:
39:ef:9e:cb:82:a1:9e:d5:ad:20:0e:5b:8f:36:08:d4:89:7c:
71:76:db:ee:bb:e9:ae:d7:a2:69:94:bd:a7:14:21:ef:e3:7b:
93:a8:a9:ec:8f:26:8c:0a:fe:7c:ba:23:7e:39:6a:05:1a:7d:
02:c3:95:2c:b8:df:f7:57:f5:46:e6:f5:c7:c9:da:55:a8:44:
ea:2b:c8:eb:c2:6d:f5:a2:d3:58:8a:d9:3e:3b:d1:71:9b:c7:
f3:e4:01:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:40:41 2024 by rpki-client on console-ams.rpki-client.org