Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/Tk6efAbwobyUGBcjxqhxnjWBFRI.roa
File: Tk6efAbwobyUGBcjxqhxnjWBFRI.roa (raw, json)
Hash identifier: N8ql8GrLDFBNKJiWR3pOrqAazma0oqpAtdzV/TMSm0I=
Subject key identifier: 4E:4E:9E:7C:06:F0:A1:BC:94:18:17:23:C6:A8:71:9E:35:81:15:12
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 0191B993E49D420AAC26C5A5BCAC124EF8FD
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/Tk6efAbwobyUGBcjxqhxnjWBFRI.roa
Signing time: Tue 03 Sep 2024 20:29:22 +0000
ROA not before: Tue 03 Sep 2024 20:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21859
IP address blocks: 213.145.68.0/24 maxlen: 24
213.145.82.0/24 maxlen: 24
213.145.83.0/24 maxlen: 24
213.145.84.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Sep 2024 05:56:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b9:93:e4:9d:42:0a:ac:26:c5:a5:bc:ac:12:4e:f8:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: Sep 3 20:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4e4e9e7c06f0a1bc94181723c6a8719e35811512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:d0:4c:ab:d6:b0:3b:fe:24:12:30:a1:aa:5a:
21:b5:a3:0f:2a:a3:08:30:f9:42:d2:84:67:2f:25:
e4:ef:44:be:24:8b:c1:51:0f:51:b4:c2:9a:db:25:
8a:08:7d:8b:42:9d:ed:58:13:f9:df:48:4a:9f:26:
6a:89:6d:d8:bd:b6:75:ab:f8:f0:bf:e1:25:e1:a6:
98:81:d6:87:50:dd:5f:6a:a0:c6:79:7e:16:25:e7:
4d:09:60:ad:10:b4:b4:5c:4e:79:94:32:2c:57:07:
b0:68:f7:ea:40:01:1e:ef:f8:e8:d0:8c:f0:e0:3c:
b6:4e:da:e2:45:c3:7a:20:9a:f4:09:78:84:e1:04:
d1:a3:bd:22:7b:9f:fe:1a:9c:c1:7f:d6:18:49:e9:
02:bb:5f:58:0b:f3:ec:db:87:46:41:84:2b:5d:5a:
6a:32:99:06:8a:c0:52:72:cc:76:43:72:85:c3:ff:
63:fc:73:b9:7d:bb:9f:83:76:c9:ab:38:da:a0:4e:
f9:b9:7d:71:d3:2a:9f:22:ce:57:7c:1f:dc:1a:e5:
b4:f5:e5:50:58:54:bd:32:5b:d4:13:21:57:f1:f5:
9a:32:e5:9b:7a:89:dc:a6:8a:8d:08:15:25:60:7b:
58:63:e8:ce:0a:01:07:5e:41:f7:12:fa:5f:2e:47:
34:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:4E:9E:7C:06:F0:A1:BC:94:18:17:23:C6:A8:71:9E:35:81:15:12
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/Tk6efAbwobyUGBcjxqhxnjWBFRI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.145.68.0/24
213.145.82.0-213.145.84.255
Signature Algorithm: sha256WithRSAEncryption
4f:63:bf:63:8b:ac:f9:67:a6:37:9c:b6:6e:1b:ca:44:6c:3b:
59:d0:3e:7d:56:aa:77:9b:db:e3:84:22:40:97:cc:d3:45:b1:
1e:fc:b6:e4:fa:46:f9:79:2a:13:e2:df:d1:bb:c9:68:46:1d:
a9:d6:02:52:0a:35:48:4f:93:71:34:f7:38:c3:85:d9:88:3a:
4b:45:e4:fe:bb:e9:9d:0a:17:cd:3f:02:b6:06:92:1a:f9:b3:
d1:48:e8:01:58:74:25:ee:df:b1:86:46:d5:99:2b:b6:51:13:
40:99:91:81:37:71:b7:3c:3d:f8:11:d7:d8:63:65:11:15:91:
84:78:e2:5c:b8:d9:15:89:6c:49:4a:3f:f4:f7:62:5e:fe:2f:
84:fc:48:05:f9:77:0b:4a:e9:bb:f1:79:91:5d:a6:d9:11:41:
6f:d0:c0:cb:f0:07:bf:c0:4b:8b:77:f9:b4:07:59:96:24:fa:
38:30:ff:89:92:59:b9:09:0e:8e:d7:13:a5:e8:cd:e7:6d:19:
df:c3:ee:ca:81:ba:22:76:35:d9:ad:76:89:93:99:b2:63:8e:
33:ff:3c:4b:91:b6:57:bf:02:82:2f:67:f8:bc:12:77:a1:4f:
48:0d:99:e8:d2:68:2b:3b:17:1b:be:6c:4d:af:ae:8c:96:12:
0b:51:81:55
-----BEGIN CERTIFICATE-----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=
Generated at Thu Sep 5 07:58:47 2024 by rpki-client on console-fra.rpki-client.org