Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/Tppj9bnYyrF3rkusqoz0nI6UUIQ.roa
File: Tppj9bnYyrF3rkusqoz0nI6UUIQ.roa (raw, json)
Hash identifier: 7qNK2VDk0EsrNNoOFh/ceoB5QULPzC87gc059s70PMQ=
Subject key identifier: 4E:9A:63:F5:B9:D8:CA:B1:77:AE:4B:AC:AA:8C:F4:9C:8E:94:50:84
Certificate issuer: /CN=c04db7623241d7e6678fc25751fa4e0b6665186b
Certificate serial: 018CDE1243BD4E7DF95586906DCEC62487B4
Authority key identifier: C0:4D:B7:62:32:41:D7:E6:67:8F:C2:57:51:FA:4E:0B:66:65:18:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/Tppj9bnYyrF3rkusqoz0nI6UUIQ.roa
Signing time: Sat 06 Jan 2024 09:19:48 +0000
ROA not before: Sat 06 Jan 2024 09:19:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39877
IP address blocks: 193.169.142.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 08 Apr 2024 15:30:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:de:12:43:bd:4e:7d:f9:55:86:90:6d:ce:c6:24:87:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c04db7623241d7e6678fc25751fa4e0b6665186b
Validity
Not Before: Jan 6 09:19:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4e9a63f5b9d8cab177ae4bacaa8cf49c8e945084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6d:6c:e8:f8:a3:5a:c1:d0:9c:07:70:55:46:
57:60:48:6b:fb:33:7e:66:74:7c:a0:4e:ed:0e:35:
fa:0b:fc:15:58:d5:7c:d0:8f:23:60:e7:c3:e2:89:
f3:d2:99:3e:34:8e:2e:f3:fa:fb:02:6b:3d:3c:2b:
5f:e2:53:b4:1f:65:e7:70:d0:bb:de:dc:d1:66:91:
d9:84:e9:e8:13:52:7a:a8:a0:cd:b8:70:99:d0:22:
54:60:97:08:7e:62:d6:27:ad:4d:0a:35:52:cb:88:
73:05:29:ec:26:66:76:c3:b2:94:91:b9:66:b3:06:
03:26:4e:e5:00:11:cb:a7:f8:f2:e1:6c:43:29:76:
65:ab:a1:96:4d:1c:42:0d:a1:98:c3:fe:7e:71:e3:
94:10:ab:16:92:83:bf:cf:73:02:a0:aa:03:5c:c4:
5b:33:76:61:5c:da:a9:79:4d:65:6d:1e:a9:ff:66:
5e:49:60:bc:35:e3:1e:e8:04:42:b8:a6:6e:ff:7b:
d0:41:0b:6f:46:0e:91:13:11:ab:af:95:7c:9f:fa:
f3:9c:22:dd:d2:e0:20:37:e7:62:ff:6a:01:61:05:
12:24:58:c1:0a:62:ff:c8:ce:08:50:f1:36:f9:64:
4c:e3:5a:a8:1f:56:af:e9:2c:d6:9c:f3:6a:74:f9:
17:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:9A:63:F5:B9:D8:CA:B1:77:AE:4B:AC:AA:8C:F4:9C:8E:94:50:84
X509v3 Authority Key Identifier:
keyid:C0:4D:B7:62:32:41:D7:E6:67:8F:C2:57:51:FA:4E:0B:66:65:18:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/Tppj9bnYyrF3rkusqoz0nI6UUIQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.169.142.0/23
Signature Algorithm: sha256WithRSAEncryption
20:ab:20:44:1b:f2:15:e6:01:90:95:31:2e:a6:35:8b:ac:9e:
50:24:0a:08:06:17:2a:e3:e6:8a:d5:39:45:f7:87:8d:2d:32:
b9:3c:f3:3c:2c:c0:c6:9e:c3:80:32:9e:3d:08:75:00:b4:d2:
96:61:4b:c5:43:72:11:a1:d8:5c:f8:8a:fa:cc:97:93:9a:29:
2e:6e:2c:ae:3a:4d:13:1c:b7:ac:f4:d8:c0:80:bc:04:78:34:
b5:7d:86:44:e2:74:82:34:9f:c4:c0:15:42:23:05:6b:9b:90:
da:3f:8f:57:9d:e2:4d:ed:7b:d0:b2:c8:5b:8c:f3:82:2c:7c:
68:c2:74:94:a6:27:fe:03:55:4a:fc:77:dc:76:f4:bd:2f:8e:
3b:b6:ce:13:e2:87:e8:ba:37:24:1e:a5:fb:61:d8:ae:47:5d:
d3:31:d8:82:32:33:4b:2e:08:eb:77:21:1d:35:c9:56:5d:6d:
e5:f5:02:af:99:e2:af:8b:21:7e:9e:90:71:0a:fd:10:ee:0a:
df:4a:79:2e:bb:de:eb:d4:f3:36:72:34:60:d9:74:8c:ad:fc:
de:ea:68:dd:d6:fd:d5:33:98:1b:24:73:6b:c0:b5:c1:2b:13:
1f:2c:3a:ac:f1:4d:c6:ed:db:03:86:56:8b:b7:5c:71:bd:7b:
e8:99:aa:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:59 2024 by rpki-client on console-ams.rpki-client.org