Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/TcUkHrbcQ37tLonA2Cv3U4jTqcE.roa
File: TcUkHrbcQ37tLonA2Cv3U4jTqcE.roa (raw, json)
Hash identifier: PGAKFyHj1gCCyEDYSn51CSSsujCeHzw5QelSr2AAeR8=
Subject key identifier: 4D:C5:24:1E:B6:DC:43:7E:ED:2E:89:C0:D8:2B:F7:53:88:D3:A9:C1
Certificate issuer: /CN=12ef9e49fecf2509eb6769eee2cdd4a5253b71c5
Certificate serial: 0185715E6D45C404357859324948E9279C42
Authority key identifier: 12:EF:9E:49:FE:CF:25:09:EB:67:69:EE:E2:CD:D4:A5:25:3B:71:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/TcUkHrbcQ37tLonA2Cv3U4jTqcE.roa
Signing time: Mon 02 Jan 2023 07:24:51 +0000
ROA not before: Mon 02 Jan 2023 07:24:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62323
IP address blocks: 77.78.148.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:5e:6d:45:c4:04:35:78:59:32:49:48:e9:27:9c:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12ef9e49fecf2509eb6769eee2cdd4a5253b71c5
Validity
Not Before: Jan 2 07:24:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4dc5241eb6dc437eed2e89c0d82bf75388d3a9c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:08:21:ab:59:f7:75:50:73:28:28:c6:e7:09:
37:be:14:bf:07:05:e5:bc:b9:db:ce:71:86:47:72:
84:b4:4f:66:b4:b3:cb:4a:8c:28:54:90:44:0b:c4:
64:75:50:93:07:57:7a:08:6f:54:71:2a:b9:67:55:
1c:d8:b4:5b:d3:0a:07:55:ab:37:2b:7d:66:7c:5e:
59:5e:de:f0:0d:e7:26:1b:9d:d6:c0:7c:63:a3:26:
51:cc:53:8e:8e:95:95:04:03:4a:be:3f:14:aa:3f:
f5:01:f9:73:d4:e7:05:55:01:73:47:5b:fe:1c:30:
a4:41:fd:94:cc:43:6c:5b:35:af:27:3e:69:e8:a9:
35:25:c5:bc:b2:0a:e1:51:ad:b1:81:51:04:57:86:
1f:5c:ad:66:b7:be:61:9e:31:6c:2b:d2:b1:5c:05:
4b:31:e7:83:e4:e0:80:e8:53:81:4f:72:89:85:1e:
0b:cf:4e:db:cf:cf:f7:e7:dc:5a:16:c9:fa:e4:ec:
43:40:6a:23:72:ce:38:9f:3a:76:4b:40:b4:f9:5a:
25:aa:62:dd:74:f9:12:98:6e:3c:f7:5e:cc:fe:c8:
2f:e5:16:2f:0c:60:4f:b6:5c:6e:44:61:4e:8b:3b:
57:84:66:bc:4a:e4:96:dc:73:dc:94:61:08:50:b2:
2f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:C5:24:1E:B6:DC:43:7E:ED:2E:89:C0:D8:2B:F7:53:88:D3:A9:C1
X509v3 Authority Key Identifier:
keyid:12:EF:9E:49:FE:CF:25:09:EB:67:69:EE:E2:CD:D4:A5:25:3B:71:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/TcUkHrbcQ37tLonA2Cv3U4jTqcE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.78.148.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:d9:61:67:77:36:6d:6c:96:0e:70:42:c2:86:48:d0:bc:61:
ec:de:19:0e:b7:5b:9f:2c:03:b2:b2:49:d3:a4:25:d8:86:06:
91:6c:38:46:cb:0f:cc:2f:37:51:0e:12:2e:6e:d0:d8:f0:7e:
5a:fe:ad:1c:6b:ad:02:6e:4f:95:39:8b:af:ce:d6:ab:eb:06:
fa:44:a4:96:de:50:ba:23:1d:b8:f4:2c:1e:75:3a:52:76:ef:
08:16:fa:a7:a5:66:e6:28:40:03:84:38:14:c2:fb:19:47:06:
0a:3b:fb:95:a4:28:49:1b:d7:3a:db:d1:eb:ad:b0:19:77:9c:
41:e9:54:48:3d:da:08:f7:12:e0:4b:54:01:e9:94:a3:f0:19:
27:0d:1e:ce:a8:5e:c9:07:46:c0:6d:2c:aa:13:8d:b6:28:5f:
17:ee:61:de:7b:d2:82:e5:db:7a:8b:1b:d1:de:d1:66:44:98:
0f:e5:19:4b:e8:ff:72:bd:c8:e2:b4:9e:31:e1:98:31:a2:94:
c8:7d:9d:27:cd:1b:8f:98:b9:0f:06:16:9d:c3:95:4c:e2:c5:
46:ed:f0:dc:d6:c2:37:00:6d:19:ee:44:be:f9:bb:97:2f:27:
e4:46:33:4e:8c:83:02:63:d4:70:89:81:db:82:5b:86:b0:0c:
7c:71:c6:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:28:38 2024 by rpki-client on console-fra.rpki-client.org