Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/TigUD4jsKi50cBjdWyTA17G0yO8.roa
File: TigUD4jsKi50cBjdWyTA17G0yO8.roa (raw, json)
Hash identifier: s4EyN/A4Xiano3IhZJR1b8x7T8yn4GH9pHG1yMljl0I=
Subject key identifier: 4E:28:14:0F:88:EC:2A:2E:74:70:18:DD:5B:24:C0:D7:B1:B4:C8:EF
Certificate issuer: /CN=df7f5eb8817f2da97f665507683b5c45a74d0ca0
Certificate serial: 01856F54B1365F0C471FCC5603B7AF09B448
Authority key identifier: DF:7F:5E:B8:81:7F:2D:A9:7F:66:55:07:68:3B:5C:45:A7:4D:0C:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/339euIF_Lal_ZlUHaDtcRadNDKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/TigUD4jsKi50cBjdWyTA17G0yO8.roa
Signing time: Sun 01 Jan 2023 21:54:59 +0000
ROA not before: Sun 01 Jan 2023 21:54:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35635
IP address blocks: 80.243.208.0/20 maxlen: 20
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:54:b1:36:5f:0c:47:1f:cc:56:03:b7:af:09:b4:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df7f5eb8817f2da97f665507683b5c45a74d0ca0
Validity
Not Before: Jan 1 21:54:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4e28140f88ec2a2e747018dd5b24c0d7b1b4c8ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f7:41:be:d9:e9:9e:2d:7e:18:b9:6b:36:4d:
df:39:a4:4f:f8:e4:f7:2d:33:68:ff:80:f2:e5:e0:
b0:38:0e:49:4f:e3:36:41:55:a9:06:4d:be:1b:43:
68:23:ac:36:2e:17:da:bc:24:30:85:26:49:21:f2:
5b:18:04:12:9d:1c:01:60:03:ec:9b:e3:eb:81:dd:
54:67:3d:e0:60:dc:8d:3d:fd:f4:dd:ab:18:e9:57:
ee:d4:59:75:c4:06:0d:64:05:33:6a:8f:c0:61:bc:
7c:52:7b:a4:75:34:01:18:19:66:48:85:6f:1f:f3:
4e:44:ea:fe:df:6d:70:69:ed:cf:ee:11:d6:47:a9:
fa:dc:ff:dc:18:4b:7a:05:aa:6b:e6:95:ef:e9:17:
4c:43:07:f1:2c:98:4f:ef:a4:18:cc:dc:f8:4c:50:
50:8d:92:dd:c4:5d:44:30:2c:54:cd:f7:a6:41:a1:
9d:4d:02:8e:a9:c3:fd:ee:c3:a6:dd:d9:ac:7f:25:
91:2b:0a:ec:81:31:b2:c6:38:da:4e:55:08:8d:2f:
48:59:38:62:7d:28:1d:cb:af:38:01:fd:66:8e:54:
61:2b:3b:5d:59:55:40:19:96:1b:e0:25:54:74:8b:
87:a0:54:68:fc:f5:ff:32:98:6e:18:fd:fd:cf:33:
8d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:28:14:0F:88:EC:2A:2E:74:70:18:DD:5B:24:C0:D7:B1:B4:C8:EF
X509v3 Authority Key Identifier:
keyid:DF:7F:5E:B8:81:7F:2D:A9:7F:66:55:07:68:3B:5C:45:A7:4D:0C:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/339euIF_Lal_ZlUHaDtcRadNDKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/TigUD4jsKi50cBjdWyTA17G0yO8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/857d9c-596e-4b89-9f1c-f92128be8b79/1/339euIF_Lal_ZlUHaDtcRadNDKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.243.208.0/20
Signature Algorithm: sha256WithRSAEncryption
41:e3:69:48:24:e7:af:96:ed:03:1a:ff:b4:d6:3d:8c:42:b3:
18:41:f9:d1:1f:2d:2b:21:23:c1:09:54:82:d6:08:6b:52:96:
45:10:61:c6:b2:2d:d7:54:4b:26:39:3b:35:79:6e:df:e7:00:
35:5f:d2:5e:c0:13:6a:d1:3d:db:88:8b:8a:42:46:31:cd:02:
c3:85:86:8b:03:37:1f:94:18:3b:91:27:7d:c2:d2:22:f2:e6:
34:d2:bf:37:15:26:b6:42:1d:98:da:93:19:d1:09:fb:e7:d3:
08:57:fe:86:f7:33:3c:bc:ff:f8:c5:81:41:e6:b3:d5:44:96:
fb:e3:cc:70:29:82:68:3c:ad:af:b4:fd:57:5e:74:1b:34:9b:
ff:33:36:08:cc:37:54:89:e0:16:f4:87:d2:a5:f1:ae:bb:76:
6c:28:67:88:45:ea:e2:03:c0:02:58:ff:1b:c3:15:b1:b5:97:
09:9c:1a:5d:a4:50:88:ae:87:8a:97:db:d7:50:5b:7e:ca:e3:
29:fc:94:a6:62:76:a3:f7:8f:bb:c7:f8:f0:5c:56:73:43:cf:
71:7a:33:ef:a9:62:bf:d0:1c:87:92:9d:45:ca:aa:63:e5:e3:
aa:b3:b8:3e:56:14:3f:81:9d:7b:a9:e8:3a:25:60:60:bb:e3:
a5:8e:01:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:55:35 2024 by rpki-client on console.sobornost.net