Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/TqL5pQZrh5MQt_T-t49OTCWPNlE.roa
File: TqL5pQZrh5MQt_T-t49OTCWPNlE.roa (raw, json)
Hash identifier: 1cshm2EiZWiDFnPf3Y4K0g5Up2VZKgag8UZ2hOEICp8=
Subject key identifier: 4E:A2:F9:A5:06:6B:87:93:10:B7:F4:FE:B7:8F:4E:4C:25:8F:36:51
Certificate issuer: /CN=a6a0434bebe5dfa63dda78c24a4ebc1d2cd7369d
Certificate serial: 018C25D84C6540F4AB2C427CBF830DE276A0
Authority key identifier: A6:A0:43:4B:EB:E5:DF:A6:3D:DA:78:C2:4A:4E:BC:1D:2C:D7:36:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/TqL5pQZrh5MQt_T-t49OTCWPNlE.roa
Signing time: Fri 01 Dec 2023 14:46:21 +0000
ROA not before: Fri 01 Dec 2023 14:46:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42649
IP address blocks: 185.195.94.0/24 maxlen: 24
185.195.95.0/24 maxlen: 24
185.195.92.0/24 maxlen: 24
185.195.93.0/24 maxlen: 24
178.239.48.0/20 maxlen: 20
185.24.248.0/22 maxlen: 22
185.149.56.0/22 maxlen: 22
2a0a:56c0::/29 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:25:d8:4c:65:40:f4:ab:2c:42:7c:bf:83:0d:e2:76:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6a0434bebe5dfa63dda78c24a4ebc1d2cd7369d
Validity
Not Before: Dec 1 14:46:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4ea2f9a5066b879310b7f4feb78f4e4c258f3651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:3f:c5:f2:63:c5:56:b8:b7:12:14:64:3e:b5:
58:1a:ea:29:2e:13:d3:3f:8a:b6:1a:f1:bb:a2:95:
af:9a:ed:13:46:49:f3:2e:be:5c:a4:9c:f0:60:86:
02:94:5d:e5:b6:ab:08:97:8b:a1:8f:a7:b9:83:c5:
7c:06:b0:08:0a:98:5e:83:06:04:97:2c:00:67:2e:
18:d4:f9:12:d5:44:cc:1c:c4:99:90:0f:7c:c8:2f:
e8:c3:cd:54:e8:0c:9f:07:9a:23:93:a1:70:e3:fb:
45:63:c7:1e:83:da:86:4a:33:80:ab:10:cd:3f:22:
6d:95:7d:bf:c3:98:b2:e5:93:29:40:08:86:45:79:
63:c4:7a:7b:e9:cd:48:5f:3d:97:43:b7:12:30:da:
90:ea:ff:23:6b:7d:dd:1a:af:3d:3e:47:29:04:1d:
9f:eb:23:cb:21:18:82:27:c9:0e:37:74:34:6a:f5:
13:8f:75:01:d9:97:c5:c8:44:d3:35:8a:38:43:d4:
6a:26:29:02:15:6a:72:68:4b:a2:f7:75:4f:e0:10:
c5:eb:ac:06:31:21:83:63:f1:16:9c:12:7f:86:4f:
95:8c:83:44:5c:73:d7:7b:3a:c8:b0:97:3a:d1:b1:
1d:37:d1:a7:de:a3:96:31:dc:95:98:5d:89:52:f2:
3d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:A2:F9:A5:06:6B:87:93:10:B7:F4:FE:B7:8F:4E:4C:25:8F:36:51
X509v3 Authority Key Identifier:
keyid:A6:A0:43:4B:EB:E5:DF:A6:3D:DA:78:C2:4A:4E:BC:1D:2C:D7:36:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqBDS-vl36Y92njCSk68HSzXNp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/TqL5pQZrh5MQt_T-t49OTCWPNlE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d8398e-232c-45c2-b8e0-9ce4767da2c1/1/pqBDS-vl36Y92njCSk68HSzXNp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.48.0/20
185.24.248.0/22
185.149.56.0/22
185.195.92.0/22
IPv6:
2a0a:56c0::/29
Signature Algorithm: sha256WithRSAEncryption
ac:d4:98:da:ab:d4:34:91:2a:24:ef:c6:f9:53:f3:ac:fc:fb:
65:1b:89:b9:41:d8:3f:3a:4d:14:32:67:3e:9f:c6:6c:22:06:
2d:c7:57:eb:e6:0a:45:13:34:69:4f:31:39:3a:77:55:b3:4b:
45:24:df:1b:7b:a9:5c:c8:3d:19:e8:3a:4d:06:dc:56:79:89:
7f:15:88:50:c5:f3:42:e9:3f:60:3f:ba:aa:75:cc:48:3b:14:
fa:fe:e8:4d:1f:57:77:c4:3a:98:78:95:08:e1:c0:bf:d7:ac:
31:22:c0:43:c2:6c:44:33:43:13:0d:85:15:b7:55:ed:aa:35:
0e:f7:3b:6b:7a:a5:8b:04:4c:c4:60:9b:b1:35:d8:8e:3c:76:
bc:7a:59:34:ab:5d:63:5f:e2:b5:00:a8:5d:8c:38:da:e9:79:
ec:3d:29:8f:da:9e:cc:0c:24:81:82:1d:2e:94:6d:71:f3:ef:
10:6e:52:27:13:ed:8d:33:f8:ae:37:51:63:42:0c:d6:17:7e:
bd:0a:2b:14:7b:62:91:72:6a:88:e9:a5:21:ea:d9:a4:40:a7:
d9:48:0b:16:6d:c3:8d:06:f1:0a:a4:a7:7f:51:3a:fc:12:74:
d9:22:21:8d:b8:22:c9:bc:58:2b:eb:d6:03:50:38:95:c9:60:
76:88:e0:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:42 2024 by rpki-client on console-fra.rpki-client.org