Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/Tgpx7E5DdWJJlr5e_ePB2DoAxNQ.roa
File: Tgpx7E5DdWJJlr5e_ePB2DoAxNQ.roa (raw, json)
Hash identifier: OcUw0003AtmJ1EV+oTDBKsGYVmDY89sJeCX80qRPvAc=
Subject key identifier: 4E:0A:71:EC:4E:43:75:62:49:96:BE:5E:FD:E3:C1:D8:3A:00:C4:D4
Certificate issuer: /CN=f970877985b0c5cf69167c91e837424c47d9a425
Certificate serial: 018571B0D118C127EC6D7D0A634D2759572B
Authority key identifier: F9:70:87:79:85:B0:C5:CF:69:16:7C:91:E8:37:42:4C:47:D9:A4:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/Tgpx7E5DdWJJlr5e_ePB2DoAxNQ.roa
Signing time: Mon 02 Jan 2023 08:54:51 +0000
ROA not before: Mon 02 Jan 2023 08:54:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35800
IP address blocks: 194.88.152.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:b0:d1:18:c1:27:ec:6d:7d:0a:63:4d:27:59:57:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f970877985b0c5cf69167c91e837424c47d9a425
Validity
Not Before: Jan 2 08:54:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4e0a71ec4e4375624996be5efde3c1d83a00c4d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:75:8e:73:ad:aa:49:43:f0:ba:ab:e5:27:db:
50:34:42:f2:5f:d3:30:83:21:be:22:cb:ef:c1:a6:
a0:28:a7:ee:11:dd:79:a7:d1:e6:70:7c:12:5f:6e:
93:30:5d:26:a6:fb:0c:55:19:09:93:aa:94:a5:0e:
e8:71:94:8b:70:42:3a:67:a3:bd:54:9e:4c:c2:0c:
2a:d1:d3:5c:d5:c2:36:48:e6:18:f3:2a:9e:b5:2b:
35:90:aa:62:28:ed:fc:98:8d:65:b3:f3:a3:7d:c9:
83:94:5a:18:31:83:f2:48:65:19:3e:b8:36:0c:51:
63:84:4a:46:33:c7:d3:49:6e:75:35:f8:7f:2a:37:
78:a2:53:f0:62:ab:69:a8:89:c3:34:3c:ff:8f:0a:
02:3e:f7:3b:fe:90:c3:28:15:6c:ca:51:89:b1:6f:
86:91:3c:36:52:b8:87:03:45:f7:93:a1:dd:51:43:
82:5b:eb:4d:ab:ea:9a:fd:d1:60:d2:9c:cd:2d:ea:
f8:23:19:e4:fe:c8:c9:bb:66:e3:36:fe:ab:23:97:
55:5c:7a:07:d0:0b:43:2d:99:30:79:95:fb:e2:fc:
84:26:e2:29:ab:eb:e0:d0:79:27:9b:95:41:21:17:
3f:b3:83:fa:05:ed:07:af:22:9a:ca:e4:6c:b3:43:
bc:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:0A:71:EC:4E:43:75:62:49:96:BE:5E:FD:E3:C1:D8:3A:00:C4:D4
X509v3 Authority Key Identifier:
keyid:F9:70:87:79:85:B0:C5:CF:69:16:7C:91:E8:37:42:4C:47:D9:A4:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/Tgpx7E5DdWJJlr5e_ePB2DoAxNQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.88.152.0/23
Signature Algorithm: sha256WithRSAEncryption
a2:b3:07:1a:28:d4:07:ee:2b:16:60:5b:f9:48:7f:c8:2b:ff:
b8:9c:e8:1c:75:35:f5:21:1d:73:f3:0e:0a:15:b6:44:0a:40:
04:71:fc:96:e7:33:d0:20:bc:33:69:b3:7c:fd:bd:39:2c:1f:
70:9f:23:ac:63:93:2d:05:07:b2:ea:88:d8:3d:6f:08:6b:8e:
d8:a5:9d:3e:22:9a:46:c9:b1:dd:9a:10:9a:9b:43:ce:a6:a6:
84:08:8c:cd:88:65:77:8b:92:26:2c:5e:31:a1:d8:32:a4:f7:
11:55:ed:6f:32:4e:41:10:7d:2c:f9:85:8a:2f:5d:a6:06:81:
dc:74:35:17:14:59:48:10:23:b5:89:22:3c:fd:52:f1:8f:e6:
3a:48:05:8a:87:87:55:b1:eb:0b:21:d1:14:c8:b4:fa:a6:4c:
1e:60:fa:5e:4f:fc:e6:f2:67:ee:54:4e:1e:8c:df:10:fa:9a:
3c:83:ec:6e:85:d3:dc:2d:01:4a:e7:e3:87:96:cc:2c:9b:74:
1d:e8:cc:ca:f4:1b:d1:d0:48:d0:28:fd:aa:cd:85:51:3a:b3:
41:d9:55:ba:69:cf:d5:b5:7a:69:99:33:d9:b0:49:c1:83:07:
3e:02:5f:03:08:86:6b:2b:32:39:63:0e:ae:7b:30:9b:d5:29:
2a:b5:a5:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:53:07 2024 by rpki-client on console-fra.rpki-client.org