Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/5cf9a5-11e0-4876-9fe4-f50f71d5e0c8/1/TumHhBeH-p48cL7t16dDQM6Sikk.roa
File: TumHhBeH-p48cL7t16dDQM6Sikk.roa (raw, json)
Hash identifier: h/2M6l8E8hsl2X8OJ34aoFujZMVlXL1HmdeiuyOvpyQ=
Subject key identifier: 4E:E9:87:84:17:87:FA:9E:3C:70:BE:ED:D7:A7:43:40:CE:92:8A:49
Certificate issuer: /CN=c60ffca9d8ca08f213e60a0048c17fbb0bf60e7c
Certificate serial: 01856F14DF494D665199E50B88F8158DFFD6
Authority key identifier: C6:0F:FC:A9:D8:CA:08:F2:13:E6:0A:00:48:C1:7F:BB:0B:F6:0E:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xg_8qdjKCPIT5goASMF_uwv2Dnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/5cf9a5-11e0-4876-9fe4-f50f71d5e0c8/1/TumHhBeH-p48cL7t16dDQM6Sikk.roa
Signing time: Sun 01 Jan 2023 20:45:16 +0000
ROA not before: Sun 01 Jan 2023 20:45:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50628
IP address blocks: 193.35.156.0/24 maxlen: 24
193.35.98.0/24 maxlen: 24
193.35.101.0/24 maxlen: 24
193.35.145.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:14:df:49:4d:66:51:99:e5:0b:88:f8:15:8d:ff:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c60ffca9d8ca08f213e60a0048c17fbb0bf60e7c
Validity
Not Before: Jan 1 20:45:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4ee987841787fa9e3c70beedd7a74340ce928a49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:48:c5:6e:55:a2:54:60:3e:c9:51:8b:c9:93:
2d:e9:d9:ee:34:18:15:66:81:40:1e:00:bc:52:71:
d6:65:bc:28:17:fb:cc:58:0e:d7:51:1e:b9:ae:67:
98:5c:90:ad:52:01:9a:9f:2a:e1:f1:d3:58:3a:e4:
5a:f7:fd:d5:84:b2:32:92:bd:14:46:c2:0a:9c:dc:
3d:6c:01:46:ab:0d:ea:80:1f:8f:87:6d:37:e2:39:
31:34:18:41:d6:41:92:58:e7:c7:3c:64:fa:25:32:
03:c7:da:03:b6:c2:9a:5e:33:d3:79:1d:d4:48:1e:
01:b3:68:26:51:fd:82:13:77:36:e3:93:6f:fc:d3:
24:c2:4e:9d:ac:7e:4b:1e:df:6f:2e:3d:94:ff:49:
6c:76:a8:14:bb:f4:03:ac:47:80:ad:c7:e2:c5:b7:
d8:37:ba:59:5f:1b:0f:a7:d0:0e:aa:87:f4:f1:79:
92:a9:98:ad:cb:af:6d:4d:92:45:f9:4f:8c:f0:ec:
66:e0:2d:d9:ee:29:e3:08:93:f3:c8:52:d5:f8:95:
61:9f:65:22:25:10:54:a7:98:7d:cf:cb:c3:8d:9f:
c8:1b:ec:ca:da:51:d7:ae:b7:9e:5c:9d:0e:38:6e:
21:df:fa:76:16:13:a0:e9:5c:c8:43:78:88:98:00:
19:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:E9:87:84:17:87:FA:9E:3C:70:BE:ED:D7:A7:43:40:CE:92:8A:49
X509v3 Authority Key Identifier:
keyid:C6:0F:FC:A9:D8:CA:08:F2:13:E6:0A:00:48:C1:7F:BB:0B:F6:0E:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xg_8qdjKCPIT5goASMF_uwv2Dnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/5cf9a5-11e0-4876-9fe4-f50f71d5e0c8/1/TumHhBeH-p48cL7t16dDQM6Sikk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/5cf9a5-11e0-4876-9fe4-f50f71d5e0c8/1/xg_8qdjKCPIT5goASMF_uwv2Dnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.35.98.0/24
193.35.101.0/24
193.35.145.0/24
193.35.156.0/24
Signature Algorithm: sha256WithRSAEncryption
33:d4:bf:c8:01:8b:08:2e:85:ae:72:af:2e:14:4d:c5:ff:42:
4a:12:72:4b:18:e2:68:64:4d:ca:b3:5c:7f:9d:dc:3e:6a:98:
14:1f:cd:9f:e4:c6:39:21:cc:64:21:5d:64:ff:68:6f:77:ef:
0b:b4:ad:dd:8d:28:0c:e3:8e:24:bb:25:7a:ff:29:9a:a2:c8:
a6:9b:f2:6c:98:ea:40:f7:84:01:ab:0c:eb:d1:2d:96:d0:5f:
fb:23:d1:e7:f8:8b:7b:38:3c:64:89:e6:05:a7:18:f9:ef:3d:
5e:97:f6:e9:44:be:84:dd:9e:9d:e8:9e:fd:62:6e:b5:0b:d0:
96:b9:a0:da:f1:a8:92:a6:d4:e3:ce:a5:0a:f9:45:c4:62:13:
56:21:c3:c2:6a:b6:86:f2:84:fe:dc:1e:f9:48:25:cf:47:0f:
b5:78:89:43:e6:12:1d:66:44:f0:35:25:13:d9:1c:5e:4b:c9:
97:b2:eb:05:aa:c1:3b:4e:56:e1:49:e0:22:16:85:7a:99:62:
63:1b:b1:79:e8:ee:ad:a6:f1:05:f1:42:de:3b:8a:55:cb:af:
28:6a:56:e2:52:e0:f3:82:03:a1:20:7b:76:84:d9:17:04:50:
37:cb:06:79:fd:98:63:57:e6:59:a5:b9:86:26:8d:64:e8:f3:
b4:5a:ed:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 07:05:05 2024 by rpki-client on console.sobornost.net