Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/TREx115DRt1-uM0FE0vu54gqRn0.roa
File: TREx115DRt1-uM0FE0vu54gqRn0.roa (raw, json)
Hash identifier: SfKpipzzR75SW32VTjhD2YkyxPyp/jD9pdZdbzNYQYI=
Subject key identifier: 4D:11:31:D7:5E:43:46:DD:7E:B8:CD:05:13:4B:EE:E7:88:2A:46:7D
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 018CC49382B8FF82CBF18A2236477FC08303
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/TREx115DRt1-uM0FE0vu54gqRn0.roa
Signing time: Mon 01 Jan 2024 10:30:50 +0000
ROA not before: Mon 01 Jan 2024 10:30:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 63.246.144.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 21 Jan 2024 19:38:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:82:b8:ff:82:cb:f1:8a:22:36:47:7f:c0:83:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Jan 1 10:30:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4d1131d75e4346dd7eb8cd05134beee7882a467d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b4:2a:00:44:c0:10:9f:f4:75:15:ea:57:87:
34:1b:b5:60:a1:03:dc:20:39:a8:c5:51:e0:52:5c:
fc:64:ea:f7:7f:87:6b:fd:be:61:87:65:6e:cf:0d:
ca:9f:c9:9c:84:04:74:10:36:09:f4:4d:e0:f9:8a:
7d:87:09:a7:3a:19:71:9c:26:ee:00:a1:4c:43:72:
9b:0d:fe:e8:48:cc:ae:c2:40:43:3d:b9:2c:ed:05:
c8:0d:8b:1c:b4:8b:b0:ba:c0:18:c1:8b:03:f1:6e:
b9:56:8e:4a:a0:3e:8d:b5:87:87:bb:a4:3f:22:f0:
8e:b0:f3:ff:6a:4c:43:0a:32:40:49:e5:2c:06:25:
18:e2:06:0d:83:3b:54:18:d7:ff:ef:8e:c5:29:dc:
12:fb:c5:6a:fe:0a:67:cb:b2:e0:9b:bb:fb:70:56:
4b:be:c0:d2:54:60:e0:62:03:ed:8f:a4:19:32:0c:
03:d9:a8:d9:77:4f:a3:17:88:e1:f5:7e:eb:35:4f:
2d:7d:de:92:03:f9:a4:9d:bd:e8:8c:3e:d8:e0:f0:
07:10:e7:65:a7:4b:03:04:5d:be:49:fd:aa:df:18:
c1:92:1f:31:67:d4:df:6e:f6:dc:55:f9:64:95:81:
de:d9:9d:49:14:83:dc:e2:9f:f5:cc:b1:42:a8:d9:
5f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:11:31:D7:5E:43:46:DD:7E:B8:CD:05:13:4B:EE:E7:88:2A:46:7D
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/TREx115DRt1-uM0FE0vu54gqRn0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
63.246.144.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:db:b9:10:93:ec:cf:9f:27:52:f8:77:da:ee:6b:72:7b:99:
85:ce:81:cf:2e:98:ee:0a:9f:db:b6:5c:1b:49:03:ca:76:f2:
2c:47:46:be:e7:1a:fe:81:a2:41:16:4c:d1:53:f2:82:3e:c6:
d0:9e:8b:61:76:7f:5b:fd:d9:fa:c3:bb:32:23:a8:20:6a:ea:
da:53:3d:95:08:e9:7a:72:d7:1b:bf:f9:07:02:5b:34:4f:5b:
0d:b6:24:04:11:1c:c3:e4:ec:49:3b:ac:3b:71:7a:eb:c8:3e:
91:2c:e0:ae:6d:f9:7f:a8:94:68:84:e2:38:e5:dc:19:4e:64:
25:61:19:12:17:e4:a3:a7:7d:47:10:66:d2:a4:d3:bb:7d:c6:
b6:86:45:c2:23:6a:cf:45:06:38:23:97:9a:57:bc:7f:b4:67:
05:db:db:0d:74:95:ec:9f:bd:f6:e7:86:5e:37:2a:92:91:f0:
51:6b:40:a8:e1:c2:56:86:87:bf:63:a1:f1:aa:00:80:0f:ad:
11:ad:be:a9:45:4c:bd:f5:5c:8b:44:97:15:8c:63:23:d4:a8:
5d:7e:42:23:a4:a2:44:c2:ea:ef:d1:ec:99:fc:96:84:5b:e9:
d3:3e:9b:e3:b2:0e:c0:50:64:1d:79:73:14:f8:20:9e:cd:ce:
0e:8e:23:31
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzEk4K4/4LL8YoiNkd/wIMDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyYjc4ZjY2ODJmYzM5YzU1YjQxZDQ4ZjgwYjg4MzhkNWQy
ZGJmMDcwHhcNMjQwMTAxMTAzMDUwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZDExMzFkNzVlNDM0NmRkN2ViOGNkMDUxMzRiZWVlNzg4MmE0NjdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7QqAETAEJ/0dRXqV4c0G7VgoQPc
IDmoxVHgUlz8ZOr3f4dr/b5hh2Vuzw3Kn8mchAR0EDYJ9E3g+Yp9hwmnOhlxnCbu
AKFMQ3KbDf7oSMyuwkBDPbks7QXIDYsctIuwusAYwYsD8W65Vo5KoD6NtYeHu6Q/
IvCOsPP/akxDCjJASeUsBiUY4gYNgztUGNf/747FKdwS+8Vq/gpny7Lgm7v7cFZL
vsDSVGDgYgPtj6QZMgwD2ajZd0+jF4jh9X7rNU8tfd6SA/mknb3ojD7Y4PAHEOdl
p0sDBF2+Sf2q3xjBkh8xZ9TfbvbcVflklYHe2Z1JFIPc4p/1zLFCqNlfxQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFE0RMddeQ0bdfrjNBRNL7ueIKkZ9MB8GA1UdIwQY
MBaAFHK3j2aC/DnFW0HUj4C4g41dLb8HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEt
ZjNlNTA2YWVhYTAxLzEvVFJFeDExNURSdDEtdU0wRkUwdnU1NGdxUm4wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEtZjNlNTA2YWVhYTAx
LzEvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAP/aQMA0G
CSqGSIb3DQEBCwUAA4IBAQA627kQk+zPnydS+Hfa7mtye5mFzoHPLpjuCp/btlwb
SQPKdvIsR0a+5xr+gaJBFkzRU/KCPsbQnothdn9b/dn6w7syI6ggauraUz2VCOl6
ctcbv/kHAls0T1sNtiQEERzD5OxJO6w7cXrryD6RLOCubfl/qJRohOI45dwZTmQl
YRkSF+Sjp31HEGbSpNO7fca2hkXCI2rPRQY4I5eaV7x/tGcF29sNdJXsn73254Ze
NyqSkfBRa0Co4cJWhoe/Y6HxqgCAD60Rrb6pRUy99VyLRJcVjGMj1KhdfkIjpKJE
wurv0eyZ/JaEW+nTPpvjsg7AUGQdeXMU+CCezc4OjiMx
Generated at Sun Jan 21 22:32:11 2024 by rpki-client on console-ams.rpki-client.org