Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/TccHQwXYyF0bjjigvImya-FYxtM.roa
File: TccHQwXYyF0bjjigvImya-FYxtM.roa (raw, json)
Hash identifier: jXqGaW8/5AmkZNVIqpL7o9tJKBIAhGxuEuvkgYJf3r4=
Subject key identifier: 4D:C7:07:43:05:D8:C8:5D:1B:8E:38:A0:BC:89:B2:6B:E1:58:C6:D3
Certificate issuer: /CN=2b928097dc9f89a7a3a8a296a78a4f9d0cbce17f
Certificate serial: 018760B70E04A4512BC461CD74F1481B8829
Authority key identifier: 2B:92:80:97:DC:9F:89:A7:A3:A8:A2:96:A7:8A:4F:9D:0C:BC:E1:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5KAl9yfiaejqKKWp4pPnQy84X8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/TccHQwXYyF0bjjigvImya-FYxtM.roa
Signing time: Sat 08 Apr 2023 11:53:42 +0000
ROA not before: Sat 08 Apr 2023 11:53:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16276
IP address blocks: 46.243.16.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:60:b7:0e:04:a4:51:2b:c4:61:cd:74:f1:48:1b:88:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b928097dc9f89a7a3a8a296a78a4f9d0cbce17f
Validity
Not Before: Apr 8 11:53:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4dc7074305d8c85d1b8e38a0bc89b26be158c6d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b4:bf:01:3b:a4:c5:6e:b8:8f:fe:9e:d2:f8:
c8:7e:bf:7a:bc:0f:a6:52:d6:8b:ce:13:db:36:31:
79:da:cf:b2:aa:f6:94:b2:e1:22:3e:a4:de:48:96:
19:91:88:6f:29:84:ba:af:39:d8:d1:96:a2:9a:60:
3d:28:7c:e2:a8:7d:8a:4e:66:64:67:9f:5c:b8:0e:
a4:38:7e:66:44:cd:72:4d:4b:f8:5f:08:f1:94:c3:
bd:98:04:47:02:49:33:ed:b6:aa:3f:b4:74:02:08:
42:63:37:d7:8b:e7:b6:d6:af:2d:15:5f:af:d8:33:
ca:b5:27:65:bf:63:73:f7:90:33:63:1e:e7:4b:a7:
97:4b:78:e3:15:b1:c0:9f:0b:a6:0f:9a:98:8c:b5:
01:4f:0c:ae:85:e0:43:4d:46:54:04:d1:d5:6b:ee:
10:71:56:34:8b:a5:d3:98:91:92:7d:47:f9:d0:bb:
8a:00:d5:3f:a5:32:1b:63:62:7e:70:09:6c:40:77:
30:a4:c2:9c:a3:ce:c7:d0:6b:dc:2e:bb:52:46:7b:
2c:75:77:97:0c:5b:64:38:44:7b:c4:1f:f5:ca:f8:
53:25:6f:0d:fe:8b:fa:bb:18:96:78:b6:fe:2d:fb:
30:16:b3:da:37:f7:62:d9:cd:a2:3a:ef:8f:77:6a:
9c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:C7:07:43:05:D8:C8:5D:1B:8E:38:A0:BC:89:B2:6B:E1:58:C6:D3
X509v3 Authority Key Identifier:
keyid:2B:92:80:97:DC:9F:89:A7:A3:A8:A2:96:A7:8A:4F:9D:0C:BC:E1:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5KAl9yfiaejqKKWp4pPnQy84X8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/TccHQwXYyF0bjjigvImya-FYxtM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.16.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:f9:65:7a:cc:8d:cb:37:65:c1:fe:1b:39:84:fc:df:6c:6a:
2f:2e:ed:aa:81:4c:26:40:86:e9:3d:3d:1f:2d:69:20:e2:2b:
7e:dd:c7:23:4e:29:ec:ec:01:44:2c:6d:9c:cb:33:32:5d:87:
db:24:bf:c9:72:8d:98:c7:2c:83:3e:b8:c3:2d:45:02:26:55:
b2:5d:84:ae:a0:10:fd:72:6f:f1:d0:42:0d:10:e0:67:76:35:
f2:bf:e8:69:19:a3:fa:65:b4:cb:35:8e:42:06:21:2f:7a:95:
dd:24:fc:fc:81:d9:8f:fc:a8:ed:94:4d:c1:04:7f:a0:41:49:
cd:03:2a:5e:93:88:6e:56:be:6d:cf:7e:9e:54:a9:b7:e5:af:
ac:f1:e0:bb:26:ec:11:f5:be:06:f4:03:52:77:44:2d:f6:e7:
b1:65:fa:12:19:c2:ab:0a:89:82:2e:34:bc:29:4f:96:53:f8:
1a:d6:fc:9c:1d:ab:f8:20:ea:ac:23:8a:8b:a5:75:c4:41:7b:
ad:6f:32:b8:88:8c:8d:88:0b:c2:dc:ae:c1:1e:cc:b9:c8:51:
d7:18:d3:8c:bb:89:b8:ba:f3:92:48:fb:5e:41:8b:7a:ce:4f:
b5:6e:21:9e:c0:9f:b9:f7:78:f0:1a:a2:72:04:a8:a0:f9:98:
f9:5c:d1:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:35 2023 by rpki-client on console-ams.rpki-client.org