Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/TSLl_OmcnYGqjdJdHlv4wT9EyP8.roa
File: TSLl_OmcnYGqjdJdHlv4wT9EyP8.roa (raw, json)
Hash identifier: MPE3DYJ6rRt3YowmwnDQM1sauN3KllVmTwwdzFUnBWE=
Subject key identifier: 4D:22:E5:FC:E9:9C:9D:81:AA:8D:D2:5D:1E:5B:F8:C1:3F:44:C8:FF
Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial: 019424448F311743BCF464283CC106AE5D3C
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/TSLl_OmcnYGqjdJdHlv4wT9EyP8.roa
Signing time: Wed 01 Jan 2025 23:47:40 +0000
ROA not before: Wed 01 Jan 2025 23:47:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44928
IP address blocks: 37.148.128.0/21 maxlen: 21
93.88.144.0/20 maxlen: 20
95.155.128.0/19 maxlen: 19
95.155.160.0/20 maxlen: 20
95.155.176.0/21 maxlen: 21
152.89.84.0/22 maxlen: 22
2a00:c0c0::/32 maxlen: 32
2a02:520::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 03 Jan 2025 12:57:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:8f:31:17:43:bc:f4:64:28:3c:c1:06:ae:5d:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Validity
Not Before: Jan 1 23:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4d22e5fce99c9d81aa8dd25d1e5bf8c13f44c8ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:23:ec:3f:a5:b9:1c:5a:9d:db:61:c0:ff:0f:
22:13:dd:b1:87:b9:f2:ee:a1:77:c6:2e:02:df:9e:
0b:e5:13:3b:4a:f3:dc:e4:62:4c:1b:b6:ca:95:f3:
71:94:0d:78:aa:5d:d6:e2:09:f3:fd:81:41:8b:46:
f3:c7:e4:66:54:2b:87:71:e6:d9:20:bc:b9:4a:d1:
61:1c:61:bf:0e:3c:42:b0:5a:fc:0a:9e:9a:54:5b:
72:fe:cd:7f:4c:4e:20:07:9b:48:f6:07:bf:8b:41:
40:60:86:a0:7a:aa:e4:30:0a:9b:fc:c5:17:95:55:
c8:8f:ea:a8:67:9a:20:45:40:46:98:40:7f:be:3e:
78:10:10:66:ac:b3:65:26:86:f2:b3:d3:a3:6c:f2:
0a:ca:72:5d:50:4b:90:f0:9f:35:8c:98:60:47:23:
87:15:fc:10:97:f4:a7:74:d5:cc:1a:55:26:29:db:
97:a7:de:f0:eb:75:a1:0c:d3:69:c8:b3:da:28:e9:
53:bf:0e:3a:2b:2f:8f:ee:b7:4a:cb:c4:d6:55:12:
e0:fd:10:d5:7a:98:3c:71:c2:14:c6:a6:ba:da:c9:
4e:3a:80:6e:d0:8d:c8:62:83:60:04:2a:0d:e4:f7:
78:e0:07:5c:81:61:8e:cf:a0:c7:0a:b3:c7:a1:bd:
55:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:22:E5:FC:E9:9C:9D:81:AA:8D:D2:5D:1E:5B:F8:C1:3F:44:C8:FF
X509v3 Authority Key Identifier:
keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/TSLl_OmcnYGqjdJdHlv4wT9EyP8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.148.128.0/21
93.88.144.0/20
95.155.128.0-95.155.183.255
152.89.84.0/22
IPv6:
2a00:c0c0::/32
2a02:520::/32
Signature Algorithm: sha256WithRSAEncryption
89:81:1e:07:0b:8e:5e:10:c5:91:f4:16:ff:b1:fe:99:b6:c7:
8b:7e:ab:1c:3c:9c:29:f1:28:59:8c:61:2b:8d:33:04:81:27:
4b:90:42:c2:48:2b:05:a4:15:ee:10:60:7b:9b:de:c7:cd:f8:
f7:61:64:19:9a:b5:c2:fe:b9:57:47:ba:56:09:37:26:6d:d4:
34:ae:b4:db:2e:99:61:0c:a9:a7:09:8c:f4:38:a1:05:09:e6:
3a:9d:e8:a0:61:56:0d:f0:50:04:d7:f1:ad:07:bf:f3:47:f8:
4f:85:dd:0d:fb:4f:62:64:ce:da:f4:bc:a3:11:50:fc:d4:1e:
1c:f3:20:62:b9:95:8f:4a:3f:90:73:fc:48:41:66:19:a1:55:
9c:0e:85:fb:6e:f8:90:3c:ed:bd:13:f8:77:a6:5a:8b:29:63:
bd:1c:d7:db:1b:cb:a7:14:35:f4:1f:0b:a1:a2:28:05:0b:f2:
f9:70:30:8c:3c:41:4f:2d:ab:49:6d:4c:c1:bd:f8:48:81:d5:
7b:14:4b:a5:a2:8f:c5:28:2e:22:0b:14:36:66:96:dc:3c:e9:
77:48:f9:05:1d:be:39:b1:d3:0e:4c:0e:0e:ca:13:09:46:92:
ce:1c:54:3a:8b:bb:f0:99:7c:a8:17:83:bd:82:50:2c:88:4c:
9f:65:9c:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 08:26:05 2025 by rpki-client