Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/tdk3-JWUPM6f4a9hVFwP27oswJM.roa
File: tdk3-JWUPM6f4a9hVFwP27oswJM.roa (raw, json)
Hash identifier: 4+EEC/n6UotZIdhrz4/v68EeZX+Wt0ofx0QvCizP2E8=
Subject key identifier: B5:D9:37:F8:95:94:3C:CE:9F:E1:AF:61:54:5C:0F:DB:BA:2C:C0:93
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0192D2AB8C006D04F47092F2D625A5FF5DE9
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/tdk3-JWUPM6f4a9hVFwP27oswJM.roa
Signing time: Mon 28 Oct 2024 10:28:30 +0000
ROA not before: Mon 28 Oct 2024 10:28:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50053
IP address blocks: 185.121.14.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 11 Nov 2024 11:25:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:d2:ab:8c:00:6d:04:f4:70:92:f2:d6:25:a5:ff:5d:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Oct 28 10:28:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b5d937f895943cce9fe1af61545c0fdbba2cc093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:00:9a:8f:3f:c6:86:f0:61:cb:59:c3:7b:25:
4a:35:17:cc:2f:7d:04:98:e2:31:bd:e4:9c:1a:34:
eb:7b:80:52:13:d5:26:62:f4:af:81:e4:83:0b:6c:
d6:3c:f4:29:7f:18:bd:72:c3:ae:0c:05:a2:a5:28:
c0:ea:a4:c0:47:b1:fc:ed:29:11:6d:9d:47:ff:d3:
5d:0e:5d:1c:89:34:9e:18:b1:17:ee:4e:cc:15:ef:
fd:13:9f:ce:68:02:90:e2:5d:c7:78:3a:b9:d5:27:
16:18:e1:ec:dd:01:06:86:cb:59:d6:2d:6f:53:7d:
c6:0f:0d:c9:64:87:20:88:1f:1a:76:12:40:cf:f9:
34:a6:84:08:f3:bf:77:bd:23:41:3b:87:f0:f8:1d:
0c:9c:17:e8:9a:6e:ff:e7:06:64:a9:f0:21:61:d7:
c5:95:34:b6:f8:99:e6:c8:9e:c8:e9:a1:8d:b1:13:
18:c8:81:72:e7:25:0d:b0:a8:4b:87:9d:30:69:ee:
bc:b1:69:ee:09:46:4a:3c:3d:dd:b5:a0:cd:85:72:
8d:30:8f:9f:4b:bf:db:2d:4b:46:55:20:bf:68:f3:
1d:ac:ca:7a:93:09:b1:5e:92:fd:78:6d:21:49:76:
1d:c6:3b:e6:d4:ae:a7:ae:3b:95:10:51:72:ca:c7:
91:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:D9:37:F8:95:94:3C:CE:9F:E1:AF:61:54:5C:0F:DB:BA:2C:C0:93
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/tdk3-JWUPM6f4a9hVFwP27oswJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.14.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:c0:fa:f5:13:53:d2:1b:0c:b0:3a:f0:33:56:81:3f:1f:31:
dc:98:41:b7:10:5c:e1:7a:1c:05:0a:de:25:e6:75:22:f8:30:
36:80:98:1b:f5:bd:42:76:b3:09:01:cc:a1:e7:40:da:5f:17:
ed:f1:04:53:87:38:5c:af:e3:27:c7:cb:47:61:6d:57:36:47:
12:75:9e:87:aa:91:52:47:d9:ce:1c:cd:2e:7a:09:64:37:9a:
38:be:47:07:c9:c7:6e:ff:81:b9:19:c8:2a:1e:5a:64:0e:4f:
19:a5:43:d8:0f:33:bc:ee:a4:cc:0b:c2:5c:9b:09:f3:8a:d9:
27:2f:8d:b7:0b:cd:60:a6:e6:50:5e:8a:4c:d0:b3:d8:9a:92:
27:94:f5:74:09:2c:b5:d6:9d:85:21:8d:fc:77:80:79:94:cd:
53:1f:65:77:35:da:e5:3e:df:5e:77:08:82:e5:42:8a:ab:e1:
4d:b4:85:60:3d:f3:35:ea:c6:3f:55:97:71:b3:6b:d6:bd:1f:
e1:4e:5c:e4:bd:60:85:10:27:bf:e4:cf:c8:ae:ce:7f:21:67:
c2:bd:74:a7:6c:da:39:54:19:db:f4:ae:16:fe:98:ec:2f:bf:
7b:10:7f:b5:24:ab:17:d3:10:c1:ed:1d:72:b4:74:f5:5c:3b:
7d:c9:74:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 11 14:44:10 2024 by rpki-client on console-fra.rpki-client.org