Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/tkqCgPXYlWPj1W1vB-xl7ltMwIs.roa
File: tkqCgPXYlWPj1W1vB-xl7ltMwIs.roa (raw, json)
Hash identifier: bWTW400czcpkgEg/Gu2s+M+XUlFDFmaUCLMtIkGCPHo=
Subject key identifier: B6:4A:82:80:F5:D8:95:63:E3:D5:6D:6F:07:EC:65:EE:5B:4C:C0:8B
Certificate issuer: /CN=c53f4388aadf0ae4ff5ee7bd37263c9f1e8467c7
Certificate serial: 01856FE70DA723EE72B151DC80FDD06D1205
Authority key identifier: C5:3F:43:88:AA:DF:0A:E4:FF:5E:E7:BD:37:26:3C:9F:1E:84:67:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/tkqCgPXYlWPj1W1vB-xl7ltMwIs.roa
Signing time: Mon 02 Jan 2023 00:34:51 +0000
ROA not before: Mon 02 Jan 2023 00:34:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213155
IP address blocks: 5.204.0.0/16 maxlen: 16
84.225.128.0/18 maxlen: 18
176.226.0.0/17 maxlen: 17
37.234.0.0/16 maxlen: 16
176.77.128.0/17 maxlen: 17
91.104.0.0/16 maxlen: 16
84.224.0.0/16 maxlen: 16
84.225.0.0/17 maxlen: 17
2a0a:f640::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:e7:0d:a7:23:ee:72:b1:51:dc:80:fd:d0:6d:12:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c53f4388aadf0ae4ff5ee7bd37263c9f1e8467c7
Validity
Not Before: Jan 2 00:34:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b64a8280f5d89563e3d56d6f07ec65ee5b4cc08b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:23:c8:f0:fa:be:8e:28:b2:9d:70:6e:60:17:
6b:23:63:cb:4a:79:da:3a:0e:98:e8:7e:91:fe:a0:
86:9e:7a:c5:79:33:db:8b:f1:27:9e:37:7e:4a:5b:
ca:70:c7:9c:b4:04:5f:f2:80:4a:0c:16:e5:da:a0:
fd:3b:f5:05:f2:67:71:f6:cb:62:2e:60:e8:33:3e:
ee:e5:e2:b6:b1:00:5d:7c:40:52:40:86:4a:9c:9b:
20:e4:cc:23:aa:b3:e7:cc:ba:ea:19:c7:15:89:07:
54:5b:d9:4d:5f:43:3d:c4:48:f5:4c:f8:44:78:0e:
a9:da:a8:73:a1:78:b4:6c:ec:be:b9:a7:7e:69:98:
1d:7c:62:af:89:94:10:2b:4b:60:6b:44:f0:f9:d3:
97:a3:4e:8d:52:e5:0c:2c:9a:8c:bb:46:dc:80:a8:
4e:4f:b4:fb:01:61:45:07:77:fd:9d:ca:76:3d:23:
f0:3b:86:3f:7d:50:0c:1a:a5:6e:0b:84:88:8e:bf:
02:05:8f:c2:ac:8e:bb:35:b3:d8:32:6c:b4:c4:0f:
7e:7a:8b:65:c2:4e:f8:3b:0d:c5:88:46:2b:bc:49:
0e:37:5a:0d:4f:33:44:aa:5e:bd:73:c2:d2:de:29:
02:0b:01:ab:1f:82:4d:97:56:ef:28:4b:d6:2e:26:
45:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:4A:82:80:F5:D8:95:63:E3:D5:6D:6F:07:EC:65:EE:5B:4C:C0:8B
X509v3 Authority Key Identifier:
keyid:C5:3F:43:88:AA:DF:0A:E4:FF:5E:E7:BD:37:26:3C:9F:1E:84:67:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/tkqCgPXYlWPj1W1vB-xl7ltMwIs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.204.0.0/16
37.234.0.0/16
84.224.0.0-84.225.191.255
91.104.0.0/16
176.77.128.0/17
176.226.0.0/17
IPv6:
2a0a:f640::/32
Signature Algorithm: sha256WithRSAEncryption
77:99:e3:77:04:1a:d9:ff:3d:3c:c9:ed:2f:80:17:9f:c3:2b:
4d:4d:e1:19:83:1e:91:f3:9b:c1:4a:46:6b:e3:69:9d:65:16:
4b:8d:9f:e5:b3:bd:56:d4:39:45:e5:6b:3b:74:36:ea:43:a5:
3d:6a:3a:a8:70:9e:f3:a3:41:19:f8:bc:05:23:37:66:13:a1:
4d:fe:52:e8:2d:f9:dd:08:8c:82:91:67:0d:8c:85:45:89:30:
25:9d:e0:c1:bb:43:bf:04:45:0b:1d:61:cf:0f:95:b3:3d:c9:
e3:60:92:0b:86:4a:f9:a5:0a:b8:f4:6d:2f:06:eb:8c:58:4d:
ae:d9:f1:9e:00:96:ed:90:a4:03:5c:cc:a9:40:b2:61:26:50:
84:1d:0d:28:a9:74:0d:c0:06:2a:0d:1e:b0:49:5a:e3:5c:52:
e9:e2:63:c3:17:c8:36:3d:fe:e6:31:3b:4e:57:a6:d3:23:32:
05:53:f6:b9:f4:9f:e5:eb:04:ed:ec:a6:a6:24:e5:92:05:40:
d8:a7:ca:1a:9c:62:ce:b2:07:ed:06:b2:d2:df:50:bd:a0:c6:
5a:d2:33:c7:f0:91:67:27:c1:2a:16:88:86:91:2b:51:c0:70:
3b:81:2b:db:a2:b6:11:99:b4:e9:6c:92:30:ea:29:9a:1d:e5:
75:8f:30:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:53 2024 by rpki-client on console-fra.rpki-client.org