Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/TWXDUvqgKCJH37hmcHRcBzUS6M8.roa
File: TWXDUvqgKCJH37hmcHRcBzUS6M8.roa (raw, json)
Hash identifier: drCdxG3ONBNzb321BrlWUcYwo8gvfg1hUvFwR2/6/UM=
Subject key identifier: 4D:65:C3:52:FA:A0:28:22:47:DF:B8:66:70:74:5C:07:35:12:E8:CF
Certificate issuer: /CN=411dea53467b6c7143eb23d284569a8183b2e82f
Certificate serial: 0185E56758CAEA0CE5E6898945E20604A4B5
Authority key identifier: 41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/TWXDUvqgKCJH37hmcHRcBzUS6M8.roa
Signing time: Tue 24 Jan 2023 20:10:33 +0000
ROA not before: Tue 24 Jan 2023 20:10:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21294
IP address blocks: 84.239.16.0/23 maxlen: 23
84.239.24.0/24 maxlen: 24
84.239.23.0/24 maxlen: 24
84.239.22.0/24 maxlen: 24
84.239.20.0/24 maxlen: 24
84.239.19.0/24 maxlen: 24
84.239.31.0/24 maxlen: 24
84.239.29.0/24 maxlen: 24
84.239.28.0/24 maxlen: 24
84.239.26.0/24 maxlen: 24
84.239.25.0/24 maxlen: 24
84.239.53.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e5:67:58:ca:ea:0c:e5:e6:89:89:45:e2:06:04:a4:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411dea53467b6c7143eb23d284569a8183b2e82f
Validity
Not Before: Jan 24 20:10:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4d65c352faa0282247dfb86670745c073512e8cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:5b:51:ee:47:fe:2b:43:23:39:06:ac:03:4a:
be:33:b9:cb:e5:0e:56:a1:21:65:66:cd:94:94:4e:
36:b8:63:01:d8:c6:b7:40:00:a4:9a:12:86:ad:57:
ed:3c:fe:8e:fd:ab:2b:8f:bd:62:50:b8:a7:3e:2c:
77:a6:18:a4:0d:5e:5a:f9:dd:52:b8:ac:7d:db:22:
8d:71:8f:11:67:70:3a:15:44:4b:21:29:5c:00:a2:
73:86:ca:37:d8:7d:8c:0f:16:c9:7c:65:50:c8:e4:
a0:a5:77:c6:16:3a:6b:0d:a9:d4:b1:c4:4a:f8:5c:
cd:b6:0d:49:3a:d1:6f:f3:dd:8f:73:6b:85:d6:58:
81:6e:3e:5d:cb:55:38:75:ed:cc:47:5b:1b:13:d6:
66:a7:00:63:f6:bb:08:6c:d1:03:01:21:e8:33:c0:
c6:5c:26:11:42:ce:1b:bc:5c:a9:cc:b5:39:07:69:
ef:fe:82:90:a7:8b:54:00:5b:81:89:b2:81:c6:b2:
72:21:c1:e0:8e:42:2b:86:a5:35:da:36:47:da:0f:
50:73:74:59:bf:e2:5e:be:fe:3b:03:89:28:b3:51:
60:8c:66:31:f1:df:62:46:14:ae:13:c5:97:eb:36:
fd:73:56:ba:56:e9:0d:3b:02:03:db:8b:f9:06:86:
01:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:65:C3:52:FA:A0:28:22:47:DF:B8:66:70:74:5C:07:35:12:E8:CF
X509v3 Authority Key Identifier:
keyid:41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/TWXDUvqgKCJH37hmcHRcBzUS6M8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.239.16.0/23
84.239.19.0-84.239.20.255
84.239.22.0-84.239.26.255
84.239.28.0/23
84.239.31.0/24
84.239.53.0/24
Signature Algorithm: sha256WithRSAEncryption
87:4e:8b:0d:2f:56:28:6d:29:5e:7f:3d:0c:94:41:3a:f1:da:
f9:35:ec:d8:82:28:ed:7f:da:f5:fd:a2:20:95:af:c9:fd:04:
aa:a9:3e:9f:bc:6f:77:d5:65:0a:d8:69:62:a4:67:aa:e0:55:
f2:0c:2f:c0:74:23:4f:88:7b:e0:c1:b0:37:4d:19:ae:c3:03:
d0:04:45:c3:e0:77:cb:57:85:7f:ca:80:95:2d:b8:3d:64:07:
dd:7d:d9:86:84:dd:cf:32:c9:70:f9:d8:f5:d0:fa:2d:d8:b3:
a9:d7:c0:32:ab:6c:07:6d:d9:1f:1d:db:fd:cc:57:b5:4e:a9:
6d:15:d7:75:30:eb:aa:b0:90:7e:03:1b:1e:b0:b0:49:37:9f:
a5:43:64:75:12:0d:00:4f:39:38:61:1f:3c:e5:d5:23:93:c4:
6d:e2:51:ea:01:e7:7f:65:56:73:cc:70:81:d8:d6:b0:e4:f2:
da:65:84:d5:cf:c3:34:f8:50:48:6e:81:d1:38:1d:8c:fa:66:
f2:e6:c6:db:4f:e4:be:66:37:aa:cb:db:db:4d:72:e0:93:ff:
bb:c7:51:f1:c9:76:2f:79:d8:e1:a5:3b:ea:08:24:e7:5e:46:
29:b0:d6:f3:e7:45:e9:ba:e9:0e:14:61:a8:51:30:db:6e:3f:
ba:d5:5e:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:06 2023 by rpki-client on console-ams.rpki-client.org