Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/TSvg_UmMqDvxqDOx0S1A6pQl_ZQ.roa
File: TSvg_UmMqDvxqDOx0S1A6pQl_ZQ.roa (raw, json)
Hash identifier: VDG8cNFT9MI4kgCohkVu4EtQosdJkVW/wX3rtSMa7fs=
Subject key identifier: 4D:2B:E0:FD:49:8C:A8:3B:F1:A8:33:B1:D1:2D:40:EA:94:25:FD:94
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 0185710C3111CDE1613B89D88E08AA76E371
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/TSvg_UmMqDvxqDOx0S1A6pQl_ZQ.roa
Signing time: Mon 02 Jan 2023 05:55:02 +0000
ROA not before: Mon 02 Jan 2023 05:55:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30337
IP address blocks: 212.60.16.0/24 maxlen: 24
212.60.17.0/24 maxlen: 24
45.67.145.0/24 maxlen: 24
217.197.171.0/24 maxlen: 24
217.197.168.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:0c:31:11:cd:e1:61:3b:89:d8:8e:08:aa:76:e3:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Jan 2 05:55:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4d2be0fd498ca83bf1a833b1d12d40ea9425fd94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:23:9a:a5:f7:5c:09:13:3e:54:09:e4:80:f6:
70:9d:13:f5:b1:69:c9:f6:53:51:75:b3:cf:de:70:
b9:a1:d4:c3:89:aa:a8:a8:91:7e:50:a4:32:b9:22:
76:99:c0:a5:4d:6b:ea:0e:a3:5f:55:06:70:59:d7:
02:e3:e9:db:03:b4:3f:61:c6:de:22:19:7e:c0:4d:
9e:56:79:7f:55:dd:82:6f:e2:38:c4:e7:cb:72:88:
6e:a4:ea:fb:84:93:58:8b:fc:60:17:23:08:e1:0d:
e0:8f:22:2d:a7:82:c2:77:bd:e5:36:29:0e:96:98:
ac:a6:42:72:1e:ee:45:a9:0a:90:1c:86:2b:da:22:
33:b7:4c:10:50:99:2b:bb:89:a5:8a:ef:3f:a9:17:
48:48:e9:8c:97:16:85:f9:f3:0b:8b:86:35:89:07:
2c:18:c6:14:1c:80:e5:81:ee:0d:7c:91:07:9a:24:
29:6f:9c:cb:1c:48:93:c9:09:96:13:c0:a9:25:97:
f0:6b:d8:9a:82:07:5d:1d:ab:2d:5e:39:ca:1c:df:
b4:4f:85:ac:5a:6d:b4:92:24:22:92:fc:12:4a:b9:
ad:4e:19:d8:ef:20:23:f4:08:0d:f3:52:6e:a0:9b:
6b:7e:8a:84:d1:f4:c1:60:b1:76:92:72:73:cc:8c:
a7:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:2B:E0:FD:49:8C:A8:3B:F1:A8:33:B1:D1:2D:40:EA:94:25:FD:94
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/TSvg_UmMqDvxqDOx0S1A6pQl_ZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.145.0/24
212.60.16.0/23
217.197.168.0/24
217.197.171.0/24
Signature Algorithm: sha256WithRSAEncryption
19:22:8b:1f:5a:c9:71:44:35:fd:bf:a7:4e:30:6a:41:d6:36:
7f:ac:47:6e:d5:cc:2d:47:55:6a:fa:ba:76:a5:be:2d:cb:31:
21:8f:99:f4:83:2c:b6:e4:8e:2f:cf:ba:db:25:c1:61:28:f1:
6b:a1:d7:0a:d6:f4:59:aa:35:8a:ea:85:68:4f:e2:69:fd:47:
ee:9e:67:0f:7f:b0:56:66:b2:30:72:2b:6c:88:15:92:a2:bd:
29:32:92:7c:8f:11:08:41:3c:2a:fb:70:8e:7b:7e:e6:6c:cd:
7f:5b:f2:4e:fb:12:15:32:1f:36:fb:d0:42:7e:35:dd:b5:fe:
56:8c:c0:46:f1:e3:37:39:93:c0:b2:92:53:b5:7e:59:94:ac:
57:4f:ed:ee:86:d5:4c:7d:9f:6e:15:50:3f:4b:33:3b:b8:1e:
4b:dc:0e:fc:87:62:20:bc:4b:41:28:39:2b:3d:f0:a9:67:be:
39:db:08:43:83:ff:cb:e5:74:a4:71:20:6e:f5:b1:ff:dc:4c:
34:3a:6b:cc:6f:d1:eb:9d:e5:0e:b8:04:ff:9f:d1:16:2a:eb:
48:9e:62:82:cb:3b:b0:11:91:e2:ea:6e:3b:60:06:d6:e2:b6:
e7:6d:69:99:f6:ca:0e:b3:62:ee:be:cd:a9:6a:98:81:a3:89:
d6:01:17:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:24:40 2024 by rpki-client on console-fra.rpki-client.org