Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/tjAkzoTMo8Uyy_AIUxHGEGYVSzM.roa
File: tjAkzoTMo8Uyy_AIUxHGEGYVSzM.roa (raw, json)
Hash identifier: c4xxH33R1zHbTWEj9Anit3aZTsT/I07nxg88orQ7Gec=
Subject key identifier: B6:30:24:CE:84:CC:A3:C5:32:CB:F0:08:53:11:C6:10:66:15:4B:33
Certificate issuer: /CN=8050504f4b1776e80b8ad9f8b356e613b585b35a
Certificate serial: 018CC5000F52B628D7A0248C20BF0495EF8E
Authority key identifier: 80:50:50:4F:4B:17:76:E8:0B:8A:D9:F8:B3:56:E6:13:B5:85:B3:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gFBQT0sXdugLitn4s1bmE7WFs1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/tjAkzoTMo8Uyy_AIUxHGEGYVSzM.roa
Signing time: Mon 01 Jan 2024 12:29:24 +0000
ROA not before: Mon 01 Jan 2024 12:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207143
IP address blocks: 193.135.58.0/24 maxlen: 24
2001:67c:3d4::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 27 May 2024 14:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:0f:52:b6:28:d7:a0:24:8c:20:bf:04:95:ef:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8050504f4b1776e80b8ad9f8b356e613b585b35a
Validity
Not Before: Jan 1 12:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b63024ce84cca3c532cbf0085311c61066154b33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:82:8f:18:ab:11:9a:b5:ee:69:b1:dd:ff:3c:
1a:8e:7d:23:2b:07:6c:1a:11:5f:70:fc:71:be:7b:
60:c9:62:fe:c3:46:17:92:41:7c:3f:6c:5c:e6:30:
fd:6a:6d:28:7f:ca:b8:64:74:4b:66:d8:08:f0:27:
20:b8:15:98:72:e5:9a:83:5f:78:cc:41:6f:7d:f5:
fa:a1:81:40:17:eb:e7:36:ab:74:7d:3e:ac:5d:02:
15:2f:ee:35:1f:3b:2e:70:60:c2:5f:45:60:08:bd:
fd:20:b3:1b:fe:cc:72:2e:d4:e9:a5:e1:96:3b:87:
5e:30:d5:36:68:17:3c:7c:9c:88:63:f4:2e:27:41:
02:21:a8:59:7c:5b:77:26:98:5f:94:0c:a2:4c:7f:
e5:89:1b:e5:86:d0:a5:dd:14:9b:71:2c:23:e6:32:
37:63:11:9e:cb:5e:92:86:dc:1a:55:01:9b:73:8e:
10:1e:8f:98:80:c5:52:c9:22:6f:1d:f2:a8:e1:7d:
cf:47:6d:f0:d7:cc:7a:5a:af:8c:03:2c:42:99:15:
1b:05:92:04:c1:1a:5b:99:2f:11:36:44:71:8d:39:
9a:64:d3:a9:c7:a7:d8:a9:3b:8a:77:81:8b:06:2f:
02:1e:b1:89:b4:52:3b:e7:da:87:91:d7:4c:b7:ad:
63:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:30:24:CE:84:CC:A3:C5:32:CB:F0:08:53:11:C6:10:66:15:4B:33
X509v3 Authority Key Identifier:
keyid:80:50:50:4F:4B:17:76:E8:0B:8A:D9:F8:B3:56:E6:13:B5:85:B3:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gFBQT0sXdugLitn4s1bmE7WFs1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/tjAkzoTMo8Uyy_AIUxHGEGYVSzM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/gFBQT0sXdugLitn4s1bmE7WFs1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.135.58.0/24
IPv6:
2001:67c:3d4::/48
Signature Algorithm: sha256WithRSAEncryption
02:bc:b0:fc:1c:47:f5:df:fe:36:1f:46:fd:f8:49:b7:1c:00:
73:cb:f6:a4:91:7d:41:af:cd:2d:30:aa:2b:4b:84:79:b5:18:
72:ee:d6:2a:7f:bb:08:9f:1d:b5:25:d1:55:b7:d4:e6:00:d9:
23:2b:f2:46:34:2e:64:9b:6f:19:94:77:23:3a:61:31:42:a4:
af:c6:b1:61:b4:8b:17:8f:0e:c9:2c:da:16:47:84:bc:b3:da:
c9:b4:98:2d:12:e7:00:41:75:b8:3e:19:62:42:fb:f6:47:c3:
8e:fb:82:b7:ef:b3:58:57:ab:01:30:ca:1f:54:66:b3:31:16:
c4:7c:d7:19:f3:83:45:a4:ba:a9:03:6e:dc:a9:be:88:96:35:
19:c8:4a:6e:3c:a1:3e:eb:c7:a5:2b:81:ab:5f:fc:6b:c2:f2:
dc:54:61:ec:e7:6b:5a:29:34:af:7b:0d:2f:0a:84:89:1e:81:
fd:e6:9f:ac:6a:19:46:99:13:0d:16:da:bd:d3:b3:34:df:8a:
ec:d4:94:48:cf:80:4f:fe:b4:30:51:04:12:88:0a:68:93:f3:
d3:e9:d4:0b:23:f2:af:83:e4:d0:e4:7f:c3:7f:7e:07:12:b1:
b0:22:a6:09:9f:d8:e3:d9:ce:0a:58:d9:07:f4:89:fe:f5:3e:
2a:f1:a5:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:15:13 2025 by rpki-client