Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/TTM_G0pCl8U0ieFMVEdQPByi9M8.roa
File: TTM_G0pCl8U0ieFMVEdQPByi9M8.roa (raw, json)
Hash identifier: 0AQxDxFCWRuI3tQdvLLXmm807I1vovIKJalW5af+rLc=
Subject key identifier: 4D:33:3F:1B:4A:42:97:C5:34:89:E1:4C:54:47:50:3C:1C:A2:F4:CF
Certificate issuer: /CN=b05d28d16626bc5dcabf2e915435782b96e14071
Certificate serial: 01892088E83AA0A7E652A206415B960A8036
Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/TTM_G0pCl8U0ieFMVEdQPByi9M8.roa
Signing time: Tue 04 Jul 2023 10:53:10 +0000
ROA not before: Tue 04 Jul 2023 10:53:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 19905
IP address blocks: 2a04:9a04::/32 maxlen: 48
2a07:3506:4c::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:20:88:e8:3a:a0:a7:e6:52:a2:06:41:5b:96:0a:80:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071
Validity
Not Before: Jul 4 10:53:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4d333f1b4a4297c53489e14c5447503c1ca2f4cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:0a:cf:25:3a:b8:3a:4d:14:b7:32:39:1b:fd:
a5:17:86:33:25:83:fd:91:d0:79:52:34:de:d7:0c:
02:bd:16:d4:15:d7:cf:05:d9:e8:65:98:6c:c2:84:
e2:b9:dd:43:bd:5d:a7:7a:90:bb:26:0e:c1:3d:f5:
09:ca:c9:24:0b:7c:81:30:57:dc:ac:df:2d:34:ea:
d8:a7:a0:2e:79:27:be:2a:3b:92:c0:de:5e:8c:45:
8d:4a:41:06:54:8b:3f:c5:4c:ac:66:c4:d2:6d:6b:
c0:93:85:7a:9a:0f:11:7d:18:c0:d8:7b:6c:91:c6:
67:1b:87:63:a3:8a:23:b0:14:fa:4d:2b:47:90:13:
cf:cc:d5:53:09:bb:06:54:d4:25:6f:ce:79:bd:af:
10:61:a5:fc:33:e5:95:d1:82:7e:6b:57:75:37:e0:
76:95:8f:e8:38:7e:93:34:98:fe:dd:b9:a7:25:06:
80:2d:2c:47:f6:fe:3b:44:24:ec:bf:ea:62:7a:98:
00:9e:91:8f:f6:59:ac:35:46:8e:2f:5b:2d:ed:bd:
48:c6:81:db:85:21:80:d4:f3:5a:cc:e8:99:8a:dd:
a5:d3:75:c6:97:67:86:0f:6f:9f:dd:00:10:1e:b2:
25:ac:ce:70:f1:64:12:ef:a7:dd:e9:b5:30:4e:e5:
9a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:33:3F:1B:4A:42:97:C5:34:89:E1:4C:54:47:50:3C:1C:A2:F4:CF
X509v3 Authority Key Identifier:
keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/TTM_G0pCl8U0ieFMVEdQPByi9M8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:9a04::/32
2a07:3506:4c::/48
Signature Algorithm: sha256WithRSAEncryption
c0:44:0f:16:06:99:cf:b2:19:c3:ca:d7:81:85:9b:5c:68:b5:
d4:cd:31:06:6c:25:e5:de:09:58:37:7d:38:6f:90:fd:0c:f9:
19:ba:55:48:4b:4f:8d:3c:b4:18:71:56:80:e1:ee:ea:41:93:
62:ca:b7:18:f9:08:5f:cb:21:04:18:00:83:0b:8b:a4:b9:6c:
6a:ac:1a:e0:ca:15:03:1a:ad:90:74:56:86:e8:95:5a:e5:a7:
76:75:23:43:e3:99:fe:ab:7e:d8:ee:0f:d8:5f:53:34:69:5a:
4e:d8:6d:a8:27:4f:77:21:4e:94:30:34:0a:60:ea:b7:9e:98:
65:27:65:2d:3b:ec:61:29:f6:b0:b8:95:a4:23:1e:09:68:68:
ef:b0:8c:92:9b:12:87:d3:70:85:7a:df:b3:27:b4:6d:71:5a:
c1:b1:a2:2d:de:86:08:7d:5a:0b:d9:f8:12:47:29:75:80:9a:
0d:98:73:5d:c8:24:b7:ea:aa:cf:63:15:63:59:a9:47:bc:c0:
6e:94:cd:85:d4:f8:1c:d7:98:ea:74:c8:d8:4f:2d:04:41:63:
ca:55:85:d7:b7:b6:1c:12:46:b2:d1:4c:e2:76:56:e5:41:b5:
f4:69:18:99:af:b1:f6:26:95:5a:c5:0d:75:aa:70:20:55:33:
db:d6:80:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:49 2024 by rpki-client on console-ams.rpki-client.org