Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/TBthWs_uUTtM5Xy-kU3SjKcScjc.roa
File: TBthWs_uUTtM5Xy-kU3SjKcScjc.roa (raw, json)
Hash identifier: XmP5ZI8kfMPjQF4KB3qnnX/vIvZzRUf9OHQyeEup8j0=
Subject key identifier: 4C:1B:61:5A:CF:EE:51:3B:4C:E5:7C:BE:91:4D:D2:8C:A7:12:72:37
Certificate issuer: /CN=a0a6d6b087461fdec6a5b9d52d29832d8f299c87
Certificate serial: 01856DDD536BB2615BDF7312A6B4F520CE80
Authority key identifier: A0:A6:D6:B0:87:46:1F:DE:C6:A5:B9:D5:2D:29:83:2D:8F:29:9C:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKbWsIdGH97GpbnVLSmDLY8pnIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/TBthWs_uUTtM5Xy-kU3SjKcScjc.roa
Signing time: Sun 01 Jan 2023 15:04:59 +0000
ROA not before: Sun 01 Jan 2023 15:04:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25569
IP address blocks: 80.82.0.0/20 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:dd:53:6b:b2:61:5b:df:73:12:a6:b4:f5:20:ce:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0a6d6b087461fdec6a5b9d52d29832d8f299c87
Validity
Not Before: Jan 1 15:04:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4c1b615acfee513b4ce57cbe914dd28ca7127237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:03:16:40:c2:25:12:f2:43:09:bc:4a:ad:21:
64:34:5b:45:54:a1:32:87:75:92:e5:fc:58:bd:01:
f2:f4:42:bd:db:b5:f3:3a:30:ac:e9:91:88:e1:d2:
9f:41:6c:fd:24:a6:0e:94:7b:47:b2:ff:09:75:46:
dc:6d:55:6e:3a:02:a5:99:a5:d6:e2:71:04:71:ac:
9e:83:8b:00:1c:55:70:e7:79:42:4e:30:35:86:f7:
b7:cc:ed:f5:84:16:72:6d:fe:14:08:9a:cd:b4:14:
82:53:7f:83:7d:73:c7:a6:7b:0d:f5:89:20:05:d1:
c4:86:b7:df:51:07:b8:bc:ec:29:70:54:85:88:ad:
2a:cb:a3:a9:c1:76:15:df:38:c9:d2:d0:90:5c:a4:
bc:28:18:90:8f:46:90:4c:87:fa:81:01:d3:7b:7e:
5f:09:29:a8:0f:22:49:64:c8:ee:65:a0:36:b1:41:
cd:6d:34:3e:4e:81:d7:35:ff:e8:30:fa:03:43:da:
af:90:59:a8:e5:b3:e2:d6:76:82:26:22:55:70:b2:
35:2a:33:f0:6a:05:a8:00:68:89:29:86:13:09:80:
b6:1f:26:9c:41:dc:e7:36:23:fe:ab:01:6a:24:65:
86:8c:8c:a3:5d:ff:ba:2b:f7:c1:b4:2b:93:d4:fe:
58:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:1B:61:5A:CF:EE:51:3B:4C:E5:7C:BE:91:4D:D2:8C:A7:12:72:37
X509v3 Authority Key Identifier:
keyid:A0:A6:D6:B0:87:46:1F:DE:C6:A5:B9:D5:2D:29:83:2D:8F:29:9C:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKbWsIdGH97GpbnVLSmDLY8pnIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/TBthWs_uUTtM5Xy-kU3SjKcScjc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.82.0.0/20
Signature Algorithm: sha256WithRSAEncryption
2c:d6:a7:47:01:99:79:f3:70:e7:e9:88:eb:8f:73:bf:0c:33:
9c:b3:42:9e:7f:bd:9e:fb:84:00:35:a0:2b:6e:e1:d5:3c:95:
13:d2:e3:43:c9:55:c3:b4:28:93:43:7a:2e:1c:64:1c:c6:8c:
91:53:41:e2:f4:04:65:80:b0:b7:d4:19:b6:59:e1:69:37:05:
e2:78:68:1b:52:12:c6:50:25:05:d7:6f:bd:fc:a6:97:f4:78:
de:93:35:49:53:fe:dd:dd:9f:3a:52:84:66:68:2d:fb:aa:77:
14:30:6d:91:19:2d:09:8b:e7:c7:46:72:cf:25:9a:b9:52:88:
24:99:65:51:31:52:d7:df:6f:82:e9:99:e9:02:54:ba:0c:51:
14:26:76:77:19:d7:5a:6a:19:ff:ba:4f:10:63:84:2f:5b:9d:
56:de:0c:03:85:3e:6f:e3:de:44:95:29:a4:bd:52:9d:19:5a:
59:ca:0d:09:00:12:2a:97:52:5c:38:48:f3:3a:3a:7a:47:80:
7e:93:41:34:6a:aa:a2:21:e7:bf:a4:6d:ab:6d:c9:cb:cd:05:
52:d1:1e:be:e0:01:6f:bc:ab:1e:da:8d:1a:9c:52:80:49:27:
53:f7:39:ae:b7:f6:46:46:59:ba:08:97:ea:fd:3f:01:54:b3:
9f:32:87:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:56 2024 by rpki-client on console-fra.rpki-client.org