Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/TNNWbrpoEJV_YrQxN7nVCXnpmm4.roa
File: TNNWbrpoEJV_YrQxN7nVCXnpmm4.roa (raw, json)
Hash identifier: wGH2UOah3YKTfm5K+audsOqZ7SPJs0/zwXmVktxIBVA=
Subject key identifier: 4C:D3:56:6E:BA:68:10:95:7F:62:B4:31:37:B9:D5:09:79:E9:9A:6E
Certificate issuer: /CN=e875464e89816ef00b0369502018a7e59ce2d36c
Certificate serial: 0185BA65A536A5D9A1F236C7E9D59D0FECCE
Authority key identifier: E8:75:46:4E:89:81:6E:F0:0B:03:69:50:20:18:A7:E5:9C:E2:D3:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6HVGTomBbvALA2lQIBin5Zzi02w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/TNNWbrpoEJV_YrQxN7nVCXnpmm4.roa
Signing time: Mon 16 Jan 2023 11:45:01 +0000
ROA not before: Mon 16 Jan 2023 11:45:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57304
IP address blocks: 87.245.192.0/20 maxlen: 20
139.45.224.0/19 maxlen: 19
Validation: Failed, certificate revoked on Tue 02 Jan 2024 14:35:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ba:65:a5:36:a5:d9:a1:f2:36:c7:e9:d5:9d:0f:ec:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e875464e89816ef00b0369502018a7e59ce2d36c
Validity
Not Before: Jan 16 11:45:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4cd3566eba6810957f62b43137b9d50979e99a6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:44:d1:ec:05:b9:7e:a2:84:69:59:54:9f:b6:
e1:12:ad:da:2f:a4:01:3c:f7:49:da:68:53:ba:97:
35:9e:dc:14:60:0a:c2:95:22:b5:b4:cd:02:3b:2c:
d1:a5:08:fe:72:a2:c2:8d:78:eb:6f:c0:9c:b5:1d:
ae:e4:98:77:5f:67:f9:73:a0:d5:a5:c0:6c:78:8c:
79:8a:a1:3e:58:c4:fd:86:46:8e:e0:ed:0d:77:cb:
48:58:b8:b6:24:bd:2b:28:24:5a:2a:89:f0:26:ea:
14:93:9b:b1:ec:1d:39:52:59:da:0b:ea:97:72:18:
37:27:e3:b8:d8:e1:af:30:16:49:79:ad:5d:c8:97:
d3:b8:ae:eb:01:38:ca:b1:2c:6d:d0:9f:1f:c1:74:
fa:1b:8d:b6:05:9c:e1:0d:4f:fa:56:29:7d:17:d2:
d4:5f:75:fc:59:73:0b:ea:d3:9c:e9:61:55:5a:b5:
68:c6:2c:f8:b6:06:65:c9:06:5b:85:4a:47:03:90:
18:26:5a:e7:3b:61:ad:7c:65:4b:3b:88:85:72:19:
76:4d:0d:7e:4f:4d:8b:76:32:ee:5a:0c:27:64:fc:
15:e4:a7:20:90:b1:e2:5a:ad:21:71:26:a3:45:0a:
2c:ec:e8:da:d0:d3:63:f6:bc:76:97:09:f1:b7:01:
36:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:D3:56:6E:BA:68:10:95:7F:62:B4:31:37:B9:D5:09:79:E9:9A:6E
X509v3 Authority Key Identifier:
keyid:E8:75:46:4E:89:81:6E:F0:0B:03:69:50:20:18:A7:E5:9C:E2:D3:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6HVGTomBbvALA2lQIBin5Zzi02w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/TNNWbrpoEJV_YrQxN7nVCXnpmm4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/6HVGTomBbvALA2lQIBin5Zzi02w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.245.192.0/20
139.45.224.0/19
Signature Algorithm: sha256WithRSAEncryption
9e:1a:b3:ad:42:eb:82:0f:8a:c7:88:9f:68:15:7b:31:c3:ef:
ef:7e:59:df:c8:be:99:a5:61:28:f7:3d:9e:5c:ba:8c:fd:6e:
a3:8c:55:00:5d:8a:a4:28:4b:95:86:c8:b5:1f:a5:3b:46:95:
16:68:12:c1:a1:36:92:b2:e1:95:74:0b:88:0b:5b:52:94:3f:
1f:ab:8b:15:82:71:03:1a:0d:15:e0:38:91:f5:24:c1:2d:b3:
00:dc:5c:7d:0e:a5:fb:8e:70:05:3b:23:b2:36:70:5a:2b:f2:
03:c8:df:26:b1:6c:4e:9d:4d:09:3f:15:9a:97:d0:59:de:39:
db:ae:25:27:23:9f:f6:9d:6d:ca:4b:21:46:09:54:d7:c2:69:
46:ff:5e:3a:9a:63:d8:55:c5:04:f7:ed:a6:c0:89:80:66:1f:
13:10:c5:47:f2:e2:7b:a1:fb:8f:01:06:3a:8a:1b:c5:a9:f0:
49:b2:66:af:d0:ac:96:c3:14:c6:6c:2d:42:ac:75:68:a5:3e:
af:2f:8f:c0:e2:dd:6d:24:02:c0:78:75:5f:c3:0e:4c:fc:c2:
2b:10:fb:ba:c5:95:50:15:4c:47:10:fc:4b:e5:8c:33:15:9e:
b1:76:26:06:82:44:65:f7:f9:9b:3c:b8:c2:a0:b1:d3:e5:32:
e6:62:9d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:14 2024 by rpki-client on console-ams.rpki-client.org