Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/Twjmbq-5GARIveLz9eW9tVn06Dg.roa
File: Twjmbq-5GARIveLz9eW9tVn06Dg.roa (raw, json)
Hash identifier: 2yMzUp1GH/1KAvLX03rUTmkFj7/nysKOZP6o0AdSH9E=
Subject key identifier: 4F:08:E6:6E:AF:B9:18:04:48:BD:E2:F3:F5:E5:BD:B5:59:F4:E8:38
Certificate issuer: /CN=3e43277b7ca79d0e9e07fc4a4b318041df415cb3
Certificate serial: 018CC50056182358139FA8326658D3C1B471
Authority key identifier: 3E:43:27:7B:7C:A7:9D:0E:9E:07:FC:4A:4B:31:80:41:DF:41:5C:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PkMne3ynnQ6eB_xKSzGAQd9BXLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/Twjmbq-5GARIveLz9eW9tVn06Dg.roa
Signing time: Mon 01 Jan 2024 12:29:42 +0000
ROA not before: Mon 01 Jan 2024 12:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61400
IP address blocks: 195.93.173.0/24 maxlen: 24
195.14.123.0/24 maxlen: 24
2001:678:cfc::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 27 Mar 2024 19:04:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:56:18:23:58:13:9f:a8:32:66:58:d3:c1:b4:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e43277b7ca79d0e9e07fc4a4b318041df415cb3
Validity
Not Before: Jan 1 12:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4f08e66eafb9180448bde2f3f5e5bdb559f4e838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:32:7f:47:0d:e9:4d:16:44:10:a7:10:6c:20:
0f:60:91:50:22:da:7c:73:bd:d4:1a:44:8b:f9:24:
15:8e:72:03:f3:47:42:50:a7:6d:16:b3:8f:ac:97:
fb:51:48:48:16:86:8a:be:85:32:fe:42:23:3e:f3:
fc:e3:4d:ee:3f:3a:a5:7e:67:ee:1c:ba:65:7c:cd:
85:bc:5b:e7:c9:05:0f:ec:af:60:3b:46:c7:bc:2a:
c5:7c:14:31:6e:c3:69:c6:1a:22:bb:ec:ce:21:8b:
7a:df:5e:cb:05:ee:89:e8:07:60:cb:97:8b:1a:cd:
60:63:8c:fa:5a:be:41:c8:ad:35:d6:56:51:b4:5e:
d7:67:4a:cb:91:bf:58:d2:d4:b3:df:25:ca:de:bc:
21:39:5a:34:f4:49:96:0f:90:ef:1b:b5:3b:64:3d:
d9:e5:7a:c0:11:b4:54:02:aa:66:17:b8:6f:03:5c:
c8:f7:c2:3e:82:b6:54:1d:cc:75:70:4a:c1:d4:78:
b9:6c:25:f1:31:d1:1a:f0:bc:a8:a9:dd:40:ef:27:
12:b5:fa:ab:54:db:25:70:ed:f8:a8:ee:80:9c:e9:
b4:fd:8d:a3:c8:31:bf:47:b6:e3:e6:37:de:08:fb:
81:8e:0e:93:52:a6:17:ca:aa:bf:87:51:5b:16:fd:
e7:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:08:E6:6E:AF:B9:18:04:48:BD:E2:F3:F5:E5:BD:B5:59:F4:E8:38
X509v3 Authority Key Identifier:
keyid:3E:43:27:7B:7C:A7:9D:0E:9E:07:FC:4A:4B:31:80:41:DF:41:5C:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PkMne3ynnQ6eB_xKSzGAQd9BXLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/Twjmbq-5GARIveLz9eW9tVn06Dg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.14.123.0/24
195.93.173.0/24
IPv6:
2001:678:cfc::/48
Signature Algorithm: sha256WithRSAEncryption
15:b4:9e:aa:a9:74:23:23:07:f6:b9:2e:46:84:cd:55:79:a9:
fa:34:2a:48:9d:f3:c4:de:78:4d:c2:65:9d:1f:cb:7f:d1:10:
7d:3f:13:cd:b9:86:b2:f3:02:8b:c2:54:0c:41:0a:b8:62:d3:
6d:b0:d1:1d:55:5b:08:0f:fd:18:3d:b5:c8:ec:c0:69:3b:68:
92:59:60:73:b3:55:69:7a:4d:35:6b:c3:e3:a5:6b:2a:97:bd:
58:ec:41:47:47:c8:9b:80:5a:3b:80:b3:c5:c3:f4:3a:d3:a7:
18:47:e0:3c:f1:26:00:53:61:33:4e:2d:b3:5c:f2:56:2c:8e:
27:63:14:87:ad:af:47:16:3c:67:18:cd:2a:8c:2b:74:04:c8:
ea:f8:6a:91:40:d8:38:6f:85:8c:5a:22:5e:e3:ce:6d:63:4b:
bc:86:96:4c:4a:d4:51:3a:74:91:b1:25:30:24:4f:27:0c:df:
30:5c:b2:98:d3:81:a2:73:ef:5d:f2:76:82:3b:94:20:25:7e:
79:0f:f8:e0:7b:e7:4e:33:55:f9:9e:58:54:ca:c0:03:c4:c2:
40:19:c3:95:d3:a3:30:fb:91:cf:a6:4f:9b:2e:43:42:39:6d:
2c:4c:78:49:42:4f:1b:86:cb:f2:12:68:d5:3c:ad:b1:c0:3a:
cc:a4:64:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:37:29 2025 by rpki-client