Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/Tljy3jyAoQyJw55M80RLmxHbTj0.roa
File: Tljy3jyAoQyJw55M80RLmxHbTj0.roa (raw, json)
Hash identifier: 3sIaiQZyJEiHOFgdsthP20r1SsrLST2u/WHn55uqt1c=
Subject key identifier: 4E:58:F2:DE:3C:80:A1:0C:89:C3:9E:4C:F3:44:4B:9B:11:DB:4E:3D
Certificate issuer: /CN=d92cad11f12d86d18951cbd751ee5124f718951f
Certificate serial: 01856C1CB83599E3AA81FFAD3C01037A57EC
Authority key identifier: D9:2C:AD:11:F1:2D:86:D1:89:51:CB:D7:51:EE:51:24:F7:18:95:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2SytEfEthtGJUcvXUe5RJPcYlR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/Tljy3jyAoQyJw55M80RLmxHbTj0.roa
Signing time: Sun 01 Jan 2023 06:54:59 +0000
ROA not before: Sun 01 Jan 2023 06:54:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50629
IP address blocks: 193.3.128.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:1c:b8:35:99:e3:aa:81:ff:ad:3c:01:03:7a:57:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d92cad11f12d86d18951cbd751ee5124f718951f
Validity
Not Before: Jan 1 06:54:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4e58f2de3c80a10c89c39e4cf3444b9b11db4e3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:03:f0:f9:35:be:61:38:2a:6b:83:e5:79:ac:
5b:1d:af:6f:e5:3e:91:7c:2e:32:94:23:cb:2e:2a:
34:98:9a:70:a0:da:6f:91:db:b8:70:37:77:e1:18:
1b:67:8d:6b:e2:bd:09:c4:2b:67:15:bb:c3:b0:81:
26:07:2d:27:8a:8b:b7:3a:f6:b1:66:a1:2e:36:85:
89:eb:e4:92:cc:71:7b:78:cb:d0:21:c4:c9:3b:63:
82:9c:0e:c5:a1:d1:87:f9:e9:4a:aa:6d:3d:66:45:
6d:ae:71:2f:f9:89:20:e0:66:a4:8d:5d:15:d8:4b:
0c:1b:c9:7e:aa:b3:ed:97:4c:24:3c:8c:a1:f9:d8:
b2:67:c5:f8:d6:41:77:fd:e0:4f:24:05:a6:12:25:
3d:b5:4a:0f:28:75:0d:c8:6a:9e:a0:fa:73:9c:46:
16:06:4f:6a:d9:7a:3d:7e:ad:5a:ac:08:7c:22:9c:
0f:2a:67:71:6b:d2:d1:6d:73:e7:28:82:57:53:24:
b2:1b:3c:2f:1f:31:8e:c4:77:0d:7c:0b:a8:1d:37:
ca:de:cf:fe:a3:e9:4c:3f:eb:d6:46:41:ac:fa:d8:
c7:e3:3c:29:d6:cb:e7:58:23:12:9c:9c:79:b5:3f:
60:5f:d8:64:9c:c4:23:ac:a4:22:23:af:ee:fa:3d:
86:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:58:F2:DE:3C:80:A1:0C:89:C3:9E:4C:F3:44:4B:9B:11:DB:4E:3D
X509v3 Authority Key Identifier:
keyid:D9:2C:AD:11:F1:2D:86:D1:89:51:CB:D7:51:EE:51:24:F7:18:95:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2SytEfEthtGJUcvXUe5RJPcYlR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/Tljy3jyAoQyJw55M80RLmxHbTj0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/09bd91-5e18-4213-8053-1b03fdba0a24/1/2SytEfEthtGJUcvXUe5RJPcYlR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.128.0/24
Signature Algorithm: sha256WithRSAEncryption
97:a2:eb:1b:34:b2:18:18:d0:4d:f3:61:31:22:3d:24:1f:14:
da:1b:70:f4:17:27:52:71:dc:e1:3c:f5:df:5b:0c:ad:b0:8c:
21:7e:b7:81:74:fd:73:01:80:9e:4a:c0:bb:33:f0:cd:b7:6d:
94:ff:0a:a7:3d:ba:fd:14:35:ce:f7:2d:e2:1b:45:55:bc:19:
e3:cc:ef:4a:9d:35:e7:16:7a:2a:d5:6f:33:b8:fe:77:52:bc:
d4:0b:13:ee:1c:2c:17:d1:cd:52:66:2d:53:6a:f8:a9:61:63:
65:9c:8a:d4:55:c5:0a:42:e5:dd:3e:1f:0d:37:32:a2:6d:1b:
8e:8d:b5:b7:69:c1:43:cb:05:9c:c2:72:81:c8:7d:15:3c:12:
e1:60:93:e0:75:8e:99:65:4b:67:3b:9e:28:da:d5:a9:ce:61:
3e:e2:90:f2:ab:a7:8c:aa:1e:29:8d:99:f5:45:cb:4c:9a:cc:
9a:28:33:43:a8:1b:88:c9:24:9e:d3:e4:58:af:b0:f2:4a:89:
fb:b1:e8:c9:4a:1c:24:c9:4b:46:8e:8f:05:b1:85:08:ef:10:
70:43:58:92:21:c5:a5:1d:0e:11:86:36:63:f3:5e:69:72:69:
dd:0a:2c:c7:cd:3f:61:57:b9:ff:04:49:35:18:f7:b9:04:2a:
45:af:54:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:02 2024 by rpki-client on console-ams.rpki-client.org