Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/TJfT4XzFwIsNC4Fums5caungx8U.roa
File: TJfT4XzFwIsNC4Fums5caungx8U.roa (raw, json)
Hash identifier: 4F9k9SVvvQ0SjWR/kp9sm4nZaMArw8AfzbF03K7Gly4=
Subject key identifier: 4C:97:D3:E1:7C:C5:C0:8B:0D:0B:81:6E:9A:CE:5C:6A:E9:E0:C7:C5
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01856CCAFAE72A1E48E87BD3A8171B4C560C
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/TJfT4XzFwIsNC4Fums5caungx8U.roa
Signing time: Sun 01 Jan 2023 10:05:19 +0000
ROA not before: Sun 01 Jan 2023 10:05:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60068
IP address blocks: 193.181.192.0/24 maxlen: 24
193.181.193.0/24 maxlen: 24
193.235.32.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ca:fa:e7:2a:1e:48:e8:7b:d3:a8:17:1b:4c:56:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 10:05:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4c97d3e17cc5c08b0d0b816e9ace5c6ae9e0c7c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:f1:63:c9:c7:aa:a8:52:de:80:8b:74:75:40:
37:ee:72:4f:83:35:7a:04:c4:46:23:04:d2:90:ff:
41:c0:5a:dc:55:33:83:9b:9e:fc:12:0e:1d:c5:59:
dc:12:29:e8:1e:bc:c4:98:8c:c5:cf:ec:64:b0:f0:
93:91:1a:c5:b3:74:17:21:ad:01:fb:00:84:20:54:
47:be:e2:72:c5:d2:e7:7d:2d:54:39:13:33:a3:8c:
85:94:5a:b4:60:c1:e3:a3:e1:52:5d:e2:56:9d:36:
d3:f0:a1:e1:69:84:24:dc:7e:7b:9b:d0:aa:b7:d2:
e9:ec:ba:69:9d:cf:8a:fa:8b:9f:24:67:29:c6:c1:
91:89:e8:68:60:71:83:a8:a5:29:9b:3c:e6:9f:d5:
99:01:0f:04:c7:51:18:0f:45:68:9b:96:cd:96:15:
84:70:82:67:c1:f7:32:9f:3a:19:29:c1:f8:8b:45:
e6:11:df:e9:96:10:88:8d:9c:01:01:1b:9c:c3:cf:
35:1e:63:98:fd:62:28:78:c0:79:58:86:ff:29:af:
9c:f7:7f:a2:f8:e0:eb:8a:9e:6a:7a:fe:78:36:55:
b0:0e:32:de:66:9b:8b:3d:b6:87:4c:39:98:74:b8:
78:f4:5a:2c:b9:61:40:e0:c0:5d:00:7a:04:14:a2:
49:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:97:D3:E1:7C:C5:C0:8B:0D:0B:81:6E:9A:CE:5C:6A:E9:E0:C7:C5
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/TJfT4XzFwIsNC4Fums5caungx8U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.181.192.0/23
193.235.32.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:34:c4:1c:4b:66:18:20:31:a8:33:7f:83:d6:d8:bc:f3:e1:
02:60:41:da:48:00:df:e4:5b:ae:a1:19:f7:a7:52:7a:8b:30:
5b:b0:32:1b:a3:79:bc:6e:7d:4b:f9:16:27:4a:ce:c6:32:ad:
fa:37:7d:dd:ec:d8:9b:0d:2e:06:22:c9:12:a7:96:48:86:e3:
6a:25:2e:0f:d4:eb:cc:1a:bd:b4:03:ea:09:72:7e:3e:5d:88:
fb:a3:89:11:4e:74:7f:3c:97:d6:cf:a7:4d:b4:73:15:11:a4:
87:5c:7b:78:f4:7d:d5:c1:82:4a:5a:1d:bc:32:4a:f7:86:81:
2f:e2:88:02:82:12:a3:a5:72:99:48:58:10:72:e0:c4:fe:ae:
6d:66:24:64:8e:df:46:2f:93:91:a9:c8:d6:44:6a:9c:be:27:
44:50:c7:14:90:96:fa:d5:dd:4f:0a:ca:0e:04:6d:76:d7:0c:
63:4c:33:47:e1:96:57:4e:d7:8e:59:85:4c:1e:e6:74:51:c1:
ce:6b:6b:00:32:98:35:9c:96:23:14:c9:21:3a:48:db:71:4e:
59:e0:df:91:af:3a:df:d9:2c:e4:59:1e:44:07:14:53:1c:50:
91:b1:0f:2c:4e:62:a7:aa:89:aa:8f:b3:be:55:4f:04:39:70:
ca:ad:95:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:33:20 2024 by rpki-client on console-ams.rpki-client.org