Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/741f06-c3d1-483b-b908-28a4953f0530/1/TM1_pX_WSffdT4egc9ZLTGz81U4.roa
File: TM1_pX_WSffdT4egc9ZLTGz81U4.roa (raw, json)
Hash identifier: P5A8FFUam3b5OrmIBFxMUgM62u6mVONBGgkws2O6Nfk=
Subject key identifier: 4C:CD:7F:A5:7F:D6:49:F7:DD:4F:87:A0:73:D6:4B:4C:6C:FC:D5:4E
Certificate issuer: /CN=f764eed15c52b4c8110a222963dc7b7d4ba2d146
Certificate serial: 01856F14ACA9E37DDC09F5DDCF325C15E498
Authority key identifier: F7:64:EE:D1:5C:52:B4:C8:11:0A:22:29:63:DC:7B:7D:4B:A2:D1:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/92Tu0VxStMgRCiIpY9x7fUui0UY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/741f06-c3d1-483b-b908-28a4953f0530/1/TM1_pX_WSffdT4egc9ZLTGz81U4.roa
Signing time: Sun 01 Jan 2023 20:45:03 +0000
ROA not before: Sun 01 Jan 2023 20:45:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203339
IP address blocks: 2a02:4840:1111::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:30:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:14:ac:a9:e3:7d:dc:09:f5:dd:cf:32:5c:15:e4:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f764eed15c52b4c8110a222963dc7b7d4ba2d146
Validity
Not Before: Jan 1 20:45:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4ccd7fa57fd649f7dd4f87a073d64b4c6cfcd54e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a4:cf:d0:fe:8b:ad:e0:05:dd:9d:cf:09:7b:
18:f8:a4:72:4b:4c:66:a7:a8:ef:2e:a3:82:df:1e:
91:6c:63:8b:1c:03:d3:1e:60:27:07:3a:e5:e3:2a:
82:5d:ca:1e:93:fb:51:4a:4d:8d:8a:36:08:a4:7b:
83:ce:82:44:89:85:26:b9:57:b5:56:3e:b8:4b:1a:
54:4c:05:21:64:80:39:8c:d7:fa:d6:1c:92:ea:f3:
37:55:1b:71:cc:31:56:a7:30:bb:65:23:36:51:41:
74:bb:d7:54:e1:c3:be:88:ea:ea:d2:63:d5:5c:70:
d3:fd:29:ab:81:f3:ec:b4:9d:47:df:21:c7:9e:63:
d1:e2:e0:0d:4a:da:ab:f1:9b:b8:38:b7:9e:ca:16:
cd:75:1e:e0:a0:af:28:3e:2c:aa:1f:d4:43:c2:e3:
35:f1:88:62:35:5d:4f:25:e2:1b:c6:55:c1:7b:a1:
31:52:89:8f:f0:ea:9e:87:e8:00:51:97:ae:63:78:
f5:4f:d6:65:59:ec:2a:9a:c6:e0:ef:aa:99:9d:bf:
4a:cb:f0:93:2a:21:d2:af:7b:eb:bc:70:80:73:41:
9e:a1:90:c6:62:d6:5a:99:d9:1f:3c:b6:c5:b2:9f:
64:89:15:f2:ac:01:0f:8b:ad:f7:20:16:9e:9a:53:
e7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:CD:7F:A5:7F:D6:49:F7:DD:4F:87:A0:73:D6:4B:4C:6C:FC:D5:4E
X509v3 Authority Key Identifier:
keyid:F7:64:EE:D1:5C:52:B4:C8:11:0A:22:29:63:DC:7B:7D:4B:A2:D1:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92Tu0VxStMgRCiIpY9x7fUui0UY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/741f06-c3d1-483b-b908-28a4953f0530/1/TM1_pX_WSffdT4egc9ZLTGz81U4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/741f06-c3d1-483b-b908-28a4953f0530/1/92Tu0VxStMgRCiIpY9x7fUui0UY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:4840:1111::/48
Signature Algorithm: sha256WithRSAEncryption
06:ad:cc:70:c5:51:82:89:ee:8b:b4:ee:65:65:1c:3b:dc:35:
0d:50:a9:8c:92:67:26:c3:cb:ff:e9:d0:56:08:44:16:7e:fe:
1c:5b:4f:3d:97:06:dd:27:9b:0b:4e:e9:cf:6b:c6:ee:48:ef:
58:74:b4:ea:71:28:e7:61:cc:f4:7a:78:19:f6:85:23:9f:e7:
38:78:f0:7d:04:25:43:56:9d:2b:7c:66:97:eb:d5:ef:99:f0:
e3:da:d3:05:bb:15:7d:f1:1e:b9:c8:90:f0:6c:4a:19:f1:1a:
94:5a:b9:ca:66:b5:9a:56:a9:73:12:a8:38:7b:d4:8a:f0:6a:
0b:a3:9a:1c:51:fe:55:64:dc:01:61:31:fd:20:87:f8:75:52:
38:ab:0a:71:9d:c7:e7:60:c5:cf:b3:e8:9f:a5:5b:ae:35:a7:
93:1c:c0:54:71:91:79:65:e9:84:31:76:71:c6:f3:7f:e0:3c:
06:bf:dc:67:5f:58:53:d1:01:bf:26:1f:e6:02:c0:ca:e0:ae:
eb:45:e1:e3:7f:d7:25:28:98:b3:50:0a:85:0f:3e:88:a8:bc:
ce:56:07:dc:b4:42:12:9a:89:4a:b4:37:96:7b:61:53:d1:bc:
33:f4:8b:dc:53:51:6b:8b:3c:39:9b:d6:d6:51:3f:1b:0b:0f:
a1:68:d4:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:58 2024 by rpki-client on console-ams.rpki-client.org