Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/TlRYwo__FTYvG329gDr6WX8fFco.roa
File: TlRYwo__FTYvG329gDr6WX8fFco.roa (raw, json)
Hash identifier: U/BoGzBOfAHsAkG8nlUgHTPK6HjOOYo0IRUHWlVXGjQ=
Subject key identifier: 4E:54:58:C2:8F:FF:15:36:2F:1B:7D:BD:80:3A:FA:59:7F:1F:15:CA
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018CC3B6C3603F7ACEC13CF34EBDFB3D36F3
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/TlRYwo__FTYvG329gDr6WX8fFco.roa
Signing time: Mon 01 Jan 2024 06:29:43 +0000
ROA not before: Mon 01 Jan 2024 06:29:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215998
IP address blocks: 83.137.156.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 07 Jan 2024 21:58:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:c3:60:3f:7a:ce:c1:3c:f3:4e:bd:fb:3d:36:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jan 1 06:29:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4e5458c28fff15362f1b7dbd803afa597f1f15ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:87:94:b6:44:e5:d8:b5:de:45:a6:d7:26:00:
5f:72:d4:fa:6e:af:3e:2f:0b:be:a3:a2:e9:b0:94:
81:43:86:7b:d9:85:27:b2:e0:ea:9a:fa:d2:ce:20:
13:34:13:91:5e:68:bc:e9:30:63:65:a0:ea:58:f0:
ca:a1:5c:a7:a1:71:3b:b6:3c:31:2b:3a:56:b9:9a:
93:4f:f4:c2:9f:8b:55:58:ba:8c:f5:82:24:35:5d:
60:3e:b1:33:d8:dc:af:d1:f4:44:37:6f:19:e6:56:
d4:5b:52:fa:bb:a7:3c:c8:dc:d1:52:3a:86:3d:1c:
9a:6c:e2:96:b2:1e:4c:b6:7c:73:2d:a5:6a:a6:a8:
76:84:c0:a6:c9:c3:85:61:32:40:6c:f5:df:39:38:
e5:2a:7f:86:06:a4:cb:c3:f8:56:6d:b3:4e:b8:a0:
b8:b8:a4:75:f5:45:7b:25:4a:cf:df:9e:32:43:54:
96:7f:f7:fd:ab:9f:a4:50:ea:14:ee:8c:1f:fd:25:
55:d8:55:ff:bd:7c:b3:cf:b3:3a:8b:dc:e5:6a:e0:
8b:1a:fa:9e:91:c1:8c:0f:8f:42:82:20:b9:c7:fc:
a6:13:15:fd:4c:d2:4c:82:c0:f5:71:c2:e9:88:09:
03:48:1a:a6:af:1b:df:87:a8:21:11:14:93:11:a2:
bb:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:54:58:C2:8F:FF:15:36:2F:1B:7D:BD:80:3A:FA:59:7F:1F:15:CA
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/TlRYwo__FTYvG329gDr6WX8fFco.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.137.156.0/24
Signature Algorithm: sha256WithRSAEncryption
18:0f:9c:e2:05:95:c8:84:a4:b3:62:25:6b:1c:13:94:f8:d7:
5f:ed:86:d0:a0:36:1c:f0:4c:fb:62:3f:44:b9:80:34:4e:43:
5e:c1:e8:bc:a5:66:7b:91:4e:52:28:16:b7:2c:da:00:68:56:
a1:67:ae:3d:b5:2f:a5:a7:04:2e:41:52:5c:6e:4e:ee:8e:db:
30:16:c5:7d:f0:9e:72:36:5f:ce:bb:8c:c5:41:6f:b8:4b:b8:
0d:49:d1:c8:42:ae:65:e8:60:5d:bf:7c:13:40:d3:c6:a0:1d:
4d:0d:2d:e6:33:13:43:26:b7:00:2d:28:9f:ec:42:9c:90:96:
17:45:a4:ec:5e:ac:98:cb:9b:d6:0c:6f:af:3e:4a:02:9e:60:
b5:66:3b:8f:e8:63:62:8c:62:b6:73:51:03:bd:ae:9a:19:94:
cf:86:3f:47:38:f1:14:10:16:b3:92:b6:b7:be:ff:22:57:ea:
38:4b:0f:76:14:60:9d:f8:6c:e2:c1:06:6c:9d:f4:29:a2:27:
a9:5a:d6:ba:a0:9f:c9:f5:51:5b:f5:23:e5:1c:12:30:d5:a1:
a5:0e:6a:08:0d:d2:fc:90:e0:78:66:5b:57:37:33:69:12:98:
0e:66:69:49:79:8c:c9:9f:0d:be:69:37:3a:06:34:a4:4e:86:
c2:d8:21:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:55 2024 by rpki-client on console-ams.rpki-client.org