Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/Tmg3kf5fV2mkDKD-K1fXF3N29wg.roa
File: Tmg3kf5fV2mkDKD-K1fXF3N29wg.roa (raw, json)
Hash identifier: 5eoznEL24bVWkpAjKvUfq4oB4/gF/A66mwOTuLhsJWE=
Subject key identifier: 4E:68:37:91:FE:5F:57:69:A4:0C:A0:FE:2B:57:D7:17:73:76:F7:08
Certificate issuer: /CN=7e1167886da81524431bbf2efb0572914b686ebc
Certificate serial: 01856C78118C0159E0D2304C0EA053A1E910
Authority key identifier: 7E:11:67:88:6D:A8:15:24:43:1B:BF:2E:FB:05:72:91:4B:68:6E:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fhFniG2oFSRDG78u-wVykUtobrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/Tmg3kf5fV2mkDKD-K1fXF3N29wg.roa
Signing time: Sun 01 Jan 2023 08:34:46 +0000
ROA not before: Sun 01 Jan 2023 08:34:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5610
IP address blocks: 193.17.13.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:78:11:8c:01:59:e0:d2:30:4c:0e:a0:53:a1:e9:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e1167886da81524431bbf2efb0572914b686ebc
Validity
Not Before: Jan 1 08:34:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4e683791fe5f5769a40ca0fe2b57d7177376f708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:45:bc:d9:c7:04:85:f4:77:06:b6:cd:bb:41:
bf:7e:cb:5f:e4:c3:0f:db:af:ca:0a:cf:a4:af:62:
8f:a4:40:19:f9:38:a9:7c:6a:f5:0d:1d:1a:d8:40:
81:e4:e2:a7:23:3f:d9:e5:23:cd:db:98:42:9b:c6:
d3:3b:1c:2f:90:b7:f6:ba:cd:81:0a:51:5e:f7:a9:
dc:84:8f:b2:d9:a3:e6:bf:d8:0b:be:38:e2:94:94:
6a:1d:0f:a7:cc:62:20:83:32:34:0c:4f:c1:ec:dc:
a7:1d:06:b7:99:f6:59:35:fd:96:8e:82:08:5c:b3:
d9:98:1d:72:f3:80:32:6b:cc:f5:b3:8a:ad:97:d4:
4b:41:8b:7e:7d:b9:72:41:67:4b:5b:8e:c5:bb:39:
9e:23:44:e4:54:e4:12:07:6a:cc:c0:c6:b1:ce:47:
8d:48:a5:4e:c4:06:08:c9:0c:83:a3:16:b8:07:75:
03:c7:f2:d8:c9:4a:ba:b3:9c:d9:94:6a:9e:77:02:
a8:51:09:79:83:45:ce:dc:2d:69:03:2b:29:e3:2b:
6b:c2:25:a5:da:9c:a7:a3:05:a6:3a:d6:9a:b5:49:
26:21:fe:9c:e0:8b:f8:ef:ac:c2:39:ed:6a:79:d8:
16:53:5b:66:98:53:5a:40:c4:15:29:87:93:a8:cf:
3f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:68:37:91:FE:5F:57:69:A4:0C:A0:FE:2B:57:D7:17:73:76:F7:08
X509v3 Authority Key Identifier:
keyid:7E:11:67:88:6D:A8:15:24:43:1B:BF:2E:FB:05:72:91:4B:68:6E:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fhFniG2oFSRDG78u-wVykUtobrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/Tmg3kf5fV2mkDKD-K1fXF3N29wg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.13.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:62:3c:67:12:8f:e5:6a:d2:81:e4:14:ed:83:e9:ce:96:27:
a6:a3:16:d2:de:2d:9e:01:55:a4:d8:1b:1d:8f:88:09:05:ed:
e3:31:e7:7b:cc:ba:6e:1c:b4:47:74:bd:dc:3b:91:40:76:a5:
a8:e3:e0:fb:b1:4f:a6:85:cf:59:8c:23:c8:7e:9d:16:66:93:
e8:53:99:bd:7f:b0:b3:65:2d:92:d8:f7:2c:19:a1:8f:dd:28:
24:9f:77:7b:d4:d8:9d:83:66:c2:8a:cd:15:85:84:44:ed:d2:
95:c4:1c:23:3d:67:06:97:f0:31:79:5f:1d:04:dc:11:2b:99:
86:7f:63:ab:6d:91:84:07:b8:03:5e:16:c2:b7:1b:b7:66:19:
60:31:ad:cb:bc:d4:d6:bb:26:0b:eb:18:d0:f5:7a:28:f7:a9:
29:67:12:0d:2c:7a:4f:37:ba:ef:cb:a5:38:64:e4:f2:ac:d5:
a1:4c:41:92:92:1a:6f:97:69:b4:88:17:8e:34:a0:c8:58:d7:
16:ad:b5:cf:bb:e4:f2:a2:fd:43:39:ef:92:4f:48:65:39:53:
34:0f:71:6d:9e:49:80:6d:9a:3b:24:2a:ba:b4:6f:7d:a7:02:
9b:a9:bc:b8:fb:c1:f8:93:c1:c2:61:f3:de:05:13:a0:b6:96:
1b:51:3f:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:12 2024 by rpki-client on console-ams.rpki-client.org