Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/tmodr-XSRDTec9qUKQf8f3x_5iA.roa
File: tmodr-XSRDTec9qUKQf8f3x_5iA.roa (raw, json)
Hash identifier: vtIjJk5+9c2bJzIxb8mu2wUBefD8mnIyO8zUBsIl6RM=
Subject key identifier: B6:6A:1D:AF:E5:D2:44:34:DE:73:DA:94:29:07:FC:7F:7C:7F:E6:20
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 01889A1A81B772AA22F9790550CD2B7E5B53
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/tmodr-XSRDTec9qUKQf8f3x_5iA.roa
Signing time: Thu 08 Jun 2023 08:23:28 +0000
ROA not before: Thu 08 Jun 2023 08:23:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207084
IP address blocks: 85.133.199.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 19 Jun 2023 18:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:9a:1a:81:b7:72:aa:22:f9:79:05:50:cd:2b:7e:5b:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Jun 8 08:23:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b66a1dafe5d24434de73da942907fc7f7c7fe620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:68:75:6a:8d:cc:d7:86:a6:8a:39:fc:73:8f:
89:3f:57:db:cd:1f:28:ca:fa:f3:e1:f5:f4:8a:62:
41:ac:84:fa:44:20:eb:a9:49:89:7b:26:09:1b:61:
2c:31:08:bf:06:96:16:37:91:a4:eb:b8:20:5f:e1:
b6:3f:27:ca:1a:1d:9f:5c:37:a3:59:4c:2e:b2:38:
4c:b4:73:10:e0:94:fe:ea:64:8a:4e:92:28:46:a3:
d7:b7:d5:c1:ce:42:4f:e9:cc:3c:e6:6a:29:0e:39:
a1:e7:43:28:9b:ae:09:73:c2:59:c7:cd:40:2d:c2:
21:b4:be:f9:fd:dd:be:53:07:4a:c4:d6:42:01:16:
ff:d5:d2:5e:60:65:57:05:e6:1e:d6:15:d6:30:80:
85:f0:08:78:c8:0c:86:60:e1:ec:9d:e8:61:6c:a4:
ca:af:74:20:3b:83:11:64:da:a2:bb:e6:b5:28:2a:
2d:23:ad:0c:45:d0:2b:87:1e:cd:7e:87:9d:cc:7f:
ce:1f:1e:ce:a9:12:f2:96:ac:b2:ea:10:25:31:da:
d6:d0:bd:df:13:cc:10:1f:c7:cd:07:67:9e:a2:52:
42:83:ef:31:c2:8c:61:50:d4:cf:9e:75:43:ba:b3:
a0:b1:e7:da:18:9d:9f:cf:e3:11:c4:4e:d6:9b:7c:
a4:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:6A:1D:AF:E5:D2:44:34:DE:73:DA:94:29:07:FC:7F:7C:7F:E6:20
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/tmodr-XSRDTec9qUKQf8f3x_5iA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.199.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:73:9d:26:ff:f1:03:89:8b:4e:6f:57:99:60:08:8f:da:e7:
7c:88:f4:d7:19:83:71:a1:2d:40:a5:59:68:d2:3b:5a:bc:ef:
7e:01:08:67:a5:de:8a:69:bf:df:43:95:3c:64:05:b4:21:62:
98:b1:3c:ee:3e:ef:49:12:f6:6c:3e:63:f9:14:70:69:f6:41:
82:2e:bb:3d:27:6e:88:fe:9a:d9:a6:94:c8:53:77:41:93:d4:
bf:f6:b4:2c:b3:04:78:97:3a:ea:ff:c6:93:76:bb:e5:68:c1:
a0:5f:82:bf:8d:1e:96:1b:cd:f8:fc:4f:6e:6f:ee:82:7d:e3:
6c:b7:a5:07:62:0e:62:5f:57:43:0d:f5:bb:b1:7d:df:2e:24:
cd:b1:73:6d:3a:34:6a:b9:26:d6:e4:ca:18:e3:3a:45:e2:f5:
75:8c:b1:58:32:e8:9e:03:8f:b2:aa:20:b5:4d:03:c1:64:5a:
69:20:7f:5e:0e:9f:e9:11:93:49:3a:9f:6e:6c:97:43:7f:dc:
ae:ba:3a:b3:e4:e3:47:ff:d8:3b:4e:30:c7:b4:81:20:ed:17:
76:ad:ab:b6:be:8a:05:e3:c3:22:3b:c7:e5:5d:2e:84:17:73:
5d:d0:64:16:26:f7:06:8b:7f:40:07:04:24:57:e0:2c:97:a4:
b4:f0:37:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:02 2024 by rpki-client on console-ams.rpki-client.org