Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/TAwE1wBw59R2dqwHN7biyNh3Y2U.roa
File: TAwE1wBw59R2dqwHN7biyNh3Y2U.roa (raw, json)
Hash identifier: FZ+K03ORpOo+vIp3+cbPqB3OM3GIAv/I/azijEQglag=
Subject key identifier: 4C:0C:04:D7:00:70:E7:D4:76:76:AC:07:37:B6:E2:C8:D8:77:63:65
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 018570F0B17BD8D21C4248F645AEBFE8BD93
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/TAwE1wBw59R2dqwHN7biyNh3Y2U.roa
Signing time: Mon 02 Jan 2023 05:25:00 +0000
ROA not before: Mon 02 Jan 2023 05:25:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211440
IP address blocks: 45.9.152.0/22 maxlen: 24
178.239.28.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 02 Jan 2023 12:14:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:f0:b1:7b:d8:d2:1c:42:48:f6:45:ae:bf:e8:bd:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Jan 2 05:25:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4c0c04d70070e7d47676ac0737b6e2c8d8776365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:c0:f4:d5:03:78:f6:98:ba:7e:0f:cb:a4:de:
23:49:27:a2:d4:96:6b:d6:27:9e:f8:7a:59:aa:7e:
de:f9:a0:d3:f1:06:ac:80:1d:76:73:bc:86:66:da:
8f:58:c9:96:c5:8e:cf:4c:44:30:b8:1e:38:4b:c2:
fd:86:23:56:df:3d:90:fa:76:5f:44:4f:98:dc:2d:
76:cd:8a:b7:52:5e:28:b0:ca:25:d7:54:4f:f9:de:
c6:17:e5:e9:e8:90:72:4f:c7:90:46:d1:de:a2:78:
27:a7:da:c9:8b:e7:fb:8a:68:4b:bc:4c:72:8d:f6:
a3:9c:2d:97:17:42:dd:51:aa:ca:90:a2:14:aa:a6:
ad:26:b1:5c:a3:e2:72:84:6a:88:50:84:86:37:9c:
4a:27:a9:2b:19:73:68:c6:e7:a0:d8:4e:ac:79:e6:
21:94:0e:92:52:14:36:34:cc:22:31:e8:d0:43:0c:
45:3a:02:c9:01:ca:eb:77:6c:64:e3:8c:aa:05:b0:
8c:39:b1:a4:2e:82:2c:cb:dc:3c:60:19:4d:51:f6:
17:56:ab:36:5c:6a:91:c1:57:b5:fc:1c:d3:1d:ce:
eb:85:6e:02:86:e5:c4:a9:d0:7d:eb:c9:92:14:14:
9a:be:c4:bf:a4:42:14:11:b6:2f:33:9d:ab:83:94:
9e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:0C:04:D7:00:70:E7:D4:76:76:AC:07:37:B6:E2:C8:D8:77:63:65
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/TAwE1wBw59R2dqwHN7biyNh3Y2U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.152.0/22
178.239.28.0/23
Signature Algorithm: sha256WithRSAEncryption
57:0e:38:c7:f9:4c:72:b2:6a:fc:87:2d:0e:90:d8:95:b7:1a:
da:97:ca:b8:ca:c6:a2:0c:41:f3:ca:8f:c1:31:e6:a2:18:57:
98:93:d5:42:74:c8:77:69:ee:bf:d2:41:15:14:63:b1:5e:98:
f7:35:80:74:46:a3:b7:96:f6:a4:c2:65:39:19:5e:ac:a5:4a:
c4:65:d4:80:6c:a5:80:b3:03:4a:57:dd:b0:83:ce:1f:44:bd:
6c:84:b8:3c:8b:30:f1:ce:0b:53:3a:83:25:b1:05:bc:af:43:
92:35:9d:f2:1f:66:aa:74:70:ee:08:a1:6b:3d:b4:70:e3:31:
71:81:90:81:9a:3d:83:35:a1:23:37:07:dd:aa:e4:35:63:09:
07:3d:fd:27:58:e6:1d:eb:82:16:7b:3b:f1:18:27:5c:95:92:
d9:18:bd:8f:e5:c4:42:5b:2b:31:38:92:2c:2a:58:56:37:f2:
0b:0d:aa:40:6e:c8:b3:f5:03:2f:0d:13:86:e4:47:dd:7c:28:
1c:e5:62:c6:b4:dc:11:76:2b:08:84:50:d9:9b:9f:3a:01:7d:
a0:0d:20:c9:c2:63:3e:a1:be:71:c0:b0:7e:80:3e:26:e9:71:
ed:20:14:50:54:27:62:94:92:c5:f3:5b:f9:28:a3:ea:0d:65:
a8:2d:90:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:35 2024 by rpki-client on console-fra.rpki-client.org