Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/vwFDB1xdroz0mYwgBvRbozu_TPA.roa
File: vwFDB1xdroz0mYwgBvRbozu_TPA.roa (raw, json)
Hash identifier: EnxfcVvlw12S2uv7/K5cGohue8uvA+CYCO+yze59qHU=
Subject key identifier: BF:01:43:07:5C:5D:AE:8C:F4:99:8C:20:06:F4:5B:A3:3B:BF:4C:F0
Certificate issuer: /CN=2ac64dc21cb5fd4d0bcb02cc2b43fd751fd91e1e
Certificate serial: 01856F2FE41F604C2A5DAC1136AC4CC374D9
Authority key identifier: 2A:C6:4D:C2:1C:B5:FD:4D:0B:CB:02:CC:2B:43:FD:75:1F:D9:1E:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/vwFDB1xdroz0mYwgBvRbozu_TPA.roa
Signing time: Sun 01 Jan 2023 21:14:47 +0000
ROA not before: Sun 01 Jan 2023 21:14:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204444
IP address blocks: 80.94.27.0/24 maxlen: 24
80.94.28.0/23 maxlen: 24
213.155.167.0/24 maxlen: 24
212.14.60.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:2f:e4:1f:60:4c:2a:5d:ac:11:36:ac:4c:c3:74:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac64dc21cb5fd4d0bcb02cc2b43fd751fd91e1e
Validity
Not Before: Jan 1 21:14:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bf0143075c5dae8cf4998c2006f45ba33bbf4cf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:fb:1e:4c:19:14:e2:86:fc:f9:44:56:a2:5a:
63:77:a8:10:c8:0a:97:6b:ac:a6:7c:1e:19:b9:ba:
bb:5e:be:17:43:6d:18:3b:e2:fb:dd:43:d1:76:81:
8a:ae:7b:43:14:99:05:60:4b:32:b6:48:89:22:4f:
20:7c:21:a4:7f:9c:ad:f7:8d:e9:e6:17:ee:8f:1d:
b7:08:97:24:ec:50:05:69:f1:b1:71:82:40:a9:be:
aa:4e:c4:36:e7:33:fc:65:30:f0:1e:ce:57:32:08:
0b:b7:b7:a4:96:18:25:55:2d:ea:a6:6e:65:10:56:
d2:7e:97:58:fb:68:16:92:28:4b:31:46:86:c1:4e:
7d:6d:dc:7c:52:99:8c:7e:78:df:bc:01:ed:95:14:
8a:c4:d1:0d:2f:47:a3:a1:d6:54:b9:94:28:6d:b8:
11:92:67:7e:3f:b5:37:6a:c9:51:32:ab:93:d6:d3:
e9:7d:61:cf:2d:ee:6f:ec:d0:1f:a4:6c:7d:ea:a7:
dd:12:89:9c:4e:c0:97:62:8c:58:df:1d:7d:08:75:
da:3e:11:fc:ae:5b:62:37:00:12:fb:c4:b4:d1:be:
1c:51:c8:1d:f4:b4:c8:c3:b2:7c:8c:9e:e3:48:e8:
11:d6:d4:ad:e5:5f:7d:0f:40:85:21:ff:8b:89:5b:
a0:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:01:43:07:5C:5D:AE:8C:F4:99:8C:20:06:F4:5B:A3:3B:BF:4C:F0
X509v3 Authority Key Identifier:
keyid:2A:C6:4D:C2:1C:B5:FD:4D:0B:CB:02:CC:2B:43:FD:75:1F:D9:1E:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/vwFDB1xdroz0mYwgBvRbozu_TPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.94.27.0-80.94.29.255
212.14.60.0/24
213.155.167.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:41:a7:1a:cc:24:e7:46:1a:04:0e:18:90:83:12:be:29:66:
84:44:8c:0a:21:e0:6a:d3:3a:e4:c7:98:3d:cb:ab:93:3b:d5:
02:8c:46:57:0d:c6:51:18:e6:ef:f5:49:b2:96:79:4c:97:67:
04:40:04:e4:01:6e:da:4f:8d:d4:b3:26:18:6e:5a:4b:49:e0:
44:fa:ec:61:5a:26:12:44:a8:08:26:20:2f:7d:bd:fe:0d:df:
8f:96:2d:b0:ea:99:b8:1a:a3:e1:91:60:2e:35:ae:1b:ee:13:
34:47:5f:26:2f:a1:56:87:9f:d6:70:dc:83:e4:63:41:0d:15:
94:ef:fa:8d:f7:6b:38:12:14:56:8b:54:30:d7:d3:4e:7e:17:
e4:62:75:01:d4:dd:bd:c6:1a:08:22:c4:c8:7c:9b:40:a3:18:
09:97:05:91:5b:2d:93:ac:d7:13:54:b9:8e:a0:f5:7b:18:20:
2e:be:26:13:28:1d:6a:5b:5c:11:54:d4:52:59:86:9e:a8:c9:
6a:84:d3:6c:7d:2d:3c:cb:4b:39:eb:6c:ff:c7:9a:7d:0b:69:
f0:ab:7b:b3:81:fe:b4:2c:07:bd:3f:6f:e7:c0:36:2d:4b:61:
dd:82:0c:96:9a:f2:9a:bb:78:31:ea:e0:61:f1:7a:d7:a6:8f:
b0:57:b6:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 08:10:24 2024 by rpki-client on console-fra.rpki-client.org