Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/TA-aT_TCyXmCQENnYgSspZhT42Y.roa
File: TA-aT_TCyXmCQENnYgSspZhT42Y.roa (raw, json)
Hash identifier: DyoeBKTjdhKfhgSZQytlp7Om0C37wj5v7O2zP4OPNOM=
Subject key identifier: 4C:0F:9A:4F:F4:C2:C9:79:82:40:43:67:62:04:AC:A5:98:53:E3:66
Certificate issuer: /CN=a5c6373eab19cf43dd2f43111398383ee2bad030
Certificate serial: 01856FD52EC12B88CCD39C93FD01418A9565
Authority key identifier: A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/TA-aT_TCyXmCQENnYgSspZhT42Y.roa
Signing time: Mon 02 Jan 2023 00:15:20 +0000
ROA not before: Mon 02 Jan 2023 00:15:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 185.228.0.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Jul 2023 09:39:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d5:2e:c1:2b:88:cc:d3:9c:93:fd:01:41:8a:95:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5c6373eab19cf43dd2f43111398383ee2bad030
Validity
Not Before: Jan 2 00:15:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4c0f9a4ff4c2c979824043676204aca59853e366
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:3a:2e:ad:30:f2:54:64:a3:c5:f8:bc:d8:c1:
c7:d1:e4:f8:39:e4:cb:fe:ae:13:1d:5c:8d:b1:e7:
b9:ac:2a:90:7f:14:54:46:a3:9b:63:4b:8b:ef:8a:
f6:d4:f5:aa:1c:b8:65:98:dc:bd:e6:59:57:1d:c9:
29:32:e8:1f:1e:8f:ae:db:02:d7:11:05:bd:6d:fd:
7d:14:56:6d:8a:91:9e:de:b3:90:13:c2:6c:8a:81:
c0:2a:d3:9c:a5:89:bb:f2:ee:70:a1:b4:7e:eb:cf:
2b:e5:0e:55:8a:10:03:32:e2:55:3b:8a:5b:b2:a3:
c6:97:1f:91:51:1f:49:03:a3:9b:b6:2c:cd:3f:ff:
ed:5c:00:de:cf:45:e6:e2:cc:40:d9:db:bb:ad:9c:
b1:b1:d9:94:29:0f:05:ac:8e:cc:bc:77:da:ec:4c:
43:63:3f:ce:71:a5:8c:e6:ab:5e:b3:7e:85:b3:23:
f6:4b:9f:be:93:04:90:15:07:f6:b0:fe:f8:da:7a:
d6:3c:01:39:c6:5e:3b:da:69:8c:29:7c:33:33:b1:
67:49:76:66:92:91:46:50:f7:8b:ee:b5:c8:08:61:
de:bb:88:ca:ac:d0:ef:e1:ea:93:9e:98:13:37:0d:
f3:a3:e7:cf:b9:89:f2:81:81:dd:5b:68:62:19:f8:
15:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:0F:9A:4F:F4:C2:C9:79:82:40:43:67:62:04:AC:A5:98:53:E3:66
X509v3 Authority Key Identifier:
keyid:A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/TA-aT_TCyXmCQENnYgSspZhT42Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.228.0.0/22
Signature Algorithm: sha256WithRSAEncryption
21:94:03:36:3f:aa:d8:4d:ba:24:98:b7:bf:76:bb:9b:e4:da:
aa:84:82:69:b1:6b:86:7b:1d:76:dd:5c:19:e2:dc:90:78:81:
5f:a3:67:02:34:bc:7d:4e:9c:7f:3a:12:a9:cd:86:9e:fa:74:
32:05:d5:e9:bd:b1:3b:9f:34:20:a0:60:e2:40:55:e2:75:bd:
a0:a1:fc:b0:f3:28:0c:bc:6f:53:dd:46:4f:e5:26:c0:f7:f6:
24:74:72:c3:33:6a:3a:93:57:59:9f:a3:bd:e3:52:df:6f:59:
8a:f0:71:2e:2f:5e:cc:43:da:91:30:3b:9c:85:85:82:c0:61:
11:6e:c9:6d:c7:00:26:2f:1d:f0:04:b1:df:db:f2:92:1e:72:
8d:b4:79:bf:f5:9a:f4:37:7d:f7:69:e8:e0:a1:54:07:08:f3:
3b:2c:54:55:55:7b:9d:0c:cd:60:ac:08:6b:23:e9:e1:7e:d2:
ed:6f:06:89:c7:d0:d9:ae:5d:0d:68:1d:c1:28:e5:5d:b3:10:
8d:74:a2:2d:ef:17:f9:04:b4:b7:eb:43:e4:47:06:0b:77:23:
f6:08:48:1c:d7:b1:4b:8a:8a:eb:02:44:52:8c:27:77:e9:58:
65:55:8f:e4:f6:83:65:bd:b4:ee:a9:7c:99:c0:33:f4:a8:23:
95:be:b9:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:12 2024 by rpki-client on console-ams.rpki-client.org