Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/tgaUJTpEThPVZfYpif5uA3GEuRg.roa
File: tgaUJTpEThPVZfYpif5uA3GEuRg.roa (raw, json)
Hash identifier: Lxy+wb1Cc2ddJhLlPE3cyBp4dXIhm7BAYvx1pHB/p9Q=
Subject key identifier: B6:06:94:25:3A:44:4E:13:D5:65:F6:29:89:FE:6E:03:71:84:B9:18
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 01856C5412AF1BE3DCABA8A90C41FCB6F39D
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/tgaUJTpEThPVZfYpif5uA3GEuRg.roa
Signing time: Sun 01 Jan 2023 07:55:27 +0000
ROA not before: Sun 01 Jan 2023 07:55:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209609
IP address blocks: 185.236.81.0/24 maxlen: 24
147.78.223.0/24 maxlen: 32
2a06:82c4::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 25 Jan 2023 02:23:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:54:12:af:1b:e3:dc:ab:a8:a9:0c:41:fc:b6:f3:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 07:55:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b60694253a444e13d565f62989fe6e037184b918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4f:b9:46:4b:cb:29:c6:08:c2:4b:9c:a8:92:
cf:f8:c0:42:3b:86:2f:48:64:45:45:f3:f6:af:b0:
31:62:fc:bb:62:a2:d7:19:00:cf:53:7e:69:de:25:
44:05:49:aa:4e:9e:68:1d:92:99:d0:50:7c:b0:1c:
75:7c:3b:4c:c9:60:dd:2b:67:cf:9b:b9:79:28:b4:
11:e6:8b:68:ad:c5:ce:93:86:d8:84:4a:37:10:ba:
e6:44:0a:1b:6b:dd:fe:e6:90:91:aa:41:74:36:8d:
ca:6c:ab:14:dd:e7:9b:77:b6:58:56:7a:62:c0:5b:
3d:56:00:d3:f1:0a:f2:68:71:43:67:18:e4:e8:c4:
26:01:5d:30:c8:d4:4f:d8:06:95:aa:7f:b3:b0:6b:
20:32:e4:39:61:87:27:5f:92:56:a0:92:d4:8f:01:
03:7e:35:de:9a:6a:40:64:ce:b4:92:7f:f2:b1:d2:
87:c6:df:90:c9:1b:e6:f8:78:fd:74:c2:48:9c:52:
ab:07:e7:35:62:88:fc:ae:cf:d9:2e:c0:1a:b4:d9:
86:43:ee:0f:50:8e:9f:36:fc:51:59:53:9c:b7:72:
e8:3e:34:db:17:84:36:1a:f4:96:b3:f7:45:31:2b:
2c:05:06:c8:8c:a6:4c:4b:2f:9e:2e:c0:aa:b3:84:
da:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:06:94:25:3A:44:4E:13:D5:65:F6:29:89:FE:6E:03:71:84:B9:18
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/tgaUJTpEThPVZfYpif5uA3GEuRg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.223.0/24
185.236.81.0/24
IPv6:
2a06:82c4::/48
Signature Algorithm: sha256WithRSAEncryption
5f:03:46:e7:48:de:a0:07:8c:40:4a:85:35:db:aa:8a:eb:12:
61:63:f2:f4:b8:98:3d:b0:2c:12:e8:b5:7f:67:46:22:c4:51:
a2:e6:1d:b7:b6:62:6a:2c:7d:75:36:db:54:09:a7:c0:dc:9a:
d8:6b:34:ec:db:62:c3:9a:c7:38:23:ca:ab:06:80:4c:8b:9c:
f5:2d:60:ea:5f:9a:86:b8:d8:5f:59:50:94:b0:5b:e3:2b:26:
40:f8:a6:76:d0:56:1c:05:ff:90:b6:c2:fa:df:ef:fe:5a:63:
02:a0:33:c5:1f:b1:f7:52:f1:ef:4a:79:af:c4:5c:a0:6f:30:
4a:4a:53:d0:bf:a2:61:c1:b7:fa:a5:e6:b7:c4:cb:f5:b0:ff:
38:e2:a1:54:be:29:21:54:0e:75:bb:99:49:dc:77:c6:9a:32:
d5:43:0c:71:0b:69:a0:22:c0:d0:7f:93:19:9c:c2:66:88:cd:
fb:8e:63:3a:c3:60:43:03:19:d7:d3:c2:06:6c:fb:24:4c:dd:
da:8a:64:6c:13:3a:c2:1f:06:2b:6e:79:01:b0:73:ef:3d:fc:
19:d1:8a:cb:0e:a7:49:f2:fd:e2:08:c2:c5:17:a1:83:5a:df:
22:6b:5b:64:27:a1:c7:eb:01:3a:25:25:f7:b7:70:23:ad:87:
8a:a7:86:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:33 2024 by rpki-client on console-ams.rpki-client.org