Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/Tfb-bo3GUwH0mLQI_RP0O0Kh6Vk.roa
File: Tfb-bo3GUwH0mLQI_RP0O0Kh6Vk.roa (raw, json)
Hash identifier: uj3cmLB77eA4zGEyHk8crmvoZaZ9ArcyQhemYvMf0HE=
Subject key identifier: 4D:F6:FE:6E:8D:C6:53:01:F4:98:B4:08:FD:13:F4:3B:42:A1:E9:59
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 01857195534DE9168866E60B752295219538
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/Tfb-bo3GUwH0mLQI_RP0O0Kh6Vk.roa
Signing time: Mon 02 Jan 2023 08:24:49 +0000
ROA not before: Mon 02 Jan 2023 08:24:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 979
IP address blocks: 46.3.112.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:95:53:4d:e9:16:88:66:e6:0b:75:22:95:21:95:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jan 2 08:24:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4df6fe6e8dc65301f498b408fd13f43b42a1e959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:72:cd:b3:48:3f:9a:0f:e5:a3:aa:f0:1e:09:
53:28:25:fa:86:26:95:69:a9:33:2a:59:00:1c:97:
f6:1d:ba:a7:1a:97:83:ee:9c:78:c5:fb:50:15:6a:
5c:2a:22:9b:c0:96:57:d8:35:33:9f:11:8e:b9:99:
59:d1:b6:60:5c:20:31:d8:91:6e:8f:8d:7c:12:40:
aa:80:f3:24:ad:b7:cb:48:6d:da:14:37:48:97:5a:
1a:fc:c0:ae:8c:d0:29:a3:56:0d:7f:c0:4b:99:5c:
85:69:53:04:b0:47:d2:0a:ca:0f:b2:f9:24:44:41:
fc:5e:ff:60:12:ab:9e:a6:15:ea:93:7f:97:d0:1b:
a4:2a:9d:de:f1:3c:00:65:6b:23:dd:cd:92:7c:24:
9c:cf:76:cb:5e:05:b2:4e:6e:02:c5:c2:10:af:cb:
cc:d1:54:c4:14:d6:19:cc:85:ac:6f:e4:68:ac:ae:
ba:83:3f:90:8f:c5:68:5b:c0:12:56:fa:1b:0c:3c:
d7:1e:e5:e8:46:90:5a:29:ad:27:fa:54:bb:e0:60:
f3:aa:a3:02:96:56:32:17:77:e2:f6:1c:2f:15:7d:
50:78:26:e4:bf:bb:c0:16:10:83:d7:46:64:08:56:
71:de:80:96:74:4f:47:c8:17:98:43:cc:72:8a:29:
b4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:F6:FE:6E:8D:C6:53:01:F4:98:B4:08:FD:13:F4:3B:42:A1:E9:59
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/Tfb-bo3GUwH0mLQI_RP0O0Kh6Vk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.112.0/23
Signature Algorithm: sha256WithRSAEncryption
67:8c:43:a1:50:f9:de:6b:a9:2a:74:6c:6e:d0:e6:34:6a:76:
b7:20:0b:86:b5:ae:a1:f0:17:ca:e5:b0:fb:bc:e3:3d:cf:fb:
2a:14:1f:c6:2f:fa:42:6b:86:7a:d4:57:1f:52:d3:cb:1d:9b:
c4:8c:c0:ea:05:79:27:aa:82:ef:6d:ed:3e:ca:cf:40:67:1b:
e4:40:77:d2:fd:c6:bf:59:0b:88:91:f2:f8:df:7a:e8:5a:e9:
b1:f8:14:87:1a:42:9c:c8:d2:3a:d1:01:46:ca:fd:71:51:4b:
96:ce:a4:56:2e:3e:f1:22:ea:c4:d4:e3:b8:e8:92:3a:fd:f4:
fa:a3:34:a6:f6:df:99:2d:02:1b:3f:12:b1:57:39:26:d3:ad:
b1:4d:dd:c7:50:1e:45:d7:ca:a5:77:77:cf:76:04:86:b7:79:
3f:ed:0e:9c:3c:11:74:2e:00:52:1b:12:65:56:08:fc:27:89:
a4:8f:0c:12:70:7c:8c:71:a3:5d:4a:f3:3e:97:2e:b3:47:c8:
ac:da:7f:25:d5:f1:7c:9f:ee:b8:10:3a:91:e3:6e:ab:e8:06:
1b:58:5d:50:fc:72:b2:c8:0f:2c:61:97:1d:f8:1a:bb:f9:af:
08:bc:78:37:66:f8:e7:d7:ab:44:28:7b:dc:9d:8b:b8:5f:61:
ff:f2:0f:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:52:59 2024 by rpki-client on console-fra.rpki-client.org