Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/TqqJvO02GcLPhfLLQNRKKULPVR0.roa
File: TqqJvO02GcLPhfLLQNRKKULPVR0.roa (raw, json)
Hash identifier: JgYkCiLfUYtNW7/wbLPCdHMMKMf1Q8jpwg5QcM9W770=
Subject key identifier: 4E:AA:89:BC:ED:36:19:C2:CF:85:F2:CB:40:D4:4A:29:42:CF:55:1D
Certificate issuer: /CN=beba48c7e2c9e05eda546d899146b89f799df85d
Certificate serial: 0187DC1EDD7273FD373283F7DC22B9419110
Authority key identifier: BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/TqqJvO02GcLPhfLLQNRKKULPVR0.roa
Signing time: Tue 02 May 2023 11:00:22 +0000
ROA not before: Tue 02 May 2023 11:00:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56619
IP address blocks: 94.125.11.0/24 maxlen: 24
94.125.12.0/24 maxlen: 24
94.125.13.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:dc:1e:dd:72:73:fd:37:32:83:f7:dc:22:b9:41:91:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beba48c7e2c9e05eda546d899146b89f799df85d
Validity
Not Before: May 2 11:00:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4eaa89bced3619c2cf85f2cb40d44a2942cf551d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:65:b7:39:2d:04:14:8d:9c:90:77:a4:72:51:
c9:0e:d5:ab:16:d1:6a:3e:1b:ba:02:af:90:d3:53:
71:e5:04:70:18:36:2f:20:9b:dc:41:9a:ee:1f:6b:
ec:98:0c:36:02:8d:67:8d:76:9f:f2:8a:b8:fd:45:
3d:08:47:93:79:a0:b1:ba:89:56:3f:c9:f2:5b:eb:
fd:b5:68:4d:18:d2:50:f7:b0:3f:3f:66:89:4a:01:
4d:68:8d:10:29:64:12:6e:be:ed:45:1c:25:63:d0:
b3:d9:af:29:e7:a2:4d:5b:48:c8:71:5e:12:8d:f3:
7e:04:9a:f3:bc:93:96:2b:48:71:80:cd:e7:55:ef:
b7:c9:fe:c1:f2:69:b1:55:af:33:29:be:f1:30:87:
84:5c:79:2e:33:24:93:ac:27:07:07:97:78:d9:bd:
d5:a2:fd:e7:3e:fd:3d:df:33:2c:ca:72:5a:47:72:
cb:a7:14:27:f9:24:52:3e:e1:fd:a9:54:31:43:a3:
8c:ee:99:33:e7:4a:4c:39:79:3f:91:38:26:a6:fc:
d7:fe:88:dc:66:ac:ad:85:f8:c8:16:b1:9e:f1:12:
bd:06:78:15:14:01:a1:f6:3f:e5:80:98:c1:1a:8e:
1a:35:2a:f3:a0:cc:95:d0:ef:46:52:6d:29:3f:b2:
b6:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:AA:89:BC:ED:36:19:C2:CF:85:F2:CB:40:D4:4A:29:42:CF:55:1D
X509v3 Authority Key Identifier:
keyid:BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/TqqJvO02GcLPhfLLQNRKKULPVR0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.125.11.0-94.125.13.255
Signature Algorithm: sha256WithRSAEncryption
11:ee:e1:6c:7e:a6:09:b2:7b:09:17:05:23:cf:ca:93:cd:87:
09:a8:8e:52:dd:0a:60:4c:e4:62:10:b9:63:c5:aa:11:e1:a7:
a1:15:2c:5f:c1:41:e4:f6:29:71:a2:e7:1c:cc:34:39:75:0f:
07:a9:f5:3b:fd:f7:a6:66:e9:38:2f:54:13:d1:21:ac:53:30:
fd:a7:07:a7:54:ff:00:92:86:59:dd:43:70:f1:ca:8f:f0:bc:
4d:12:71:9a:ce:8e:9d:c8:ef:dc:d1:52:81:b9:f2:e6:99:02:
1a:6d:45:40:e7:b2:52:a9:08:10:8f:ef:e2:a7:79:9d:f8:f0:
f4:ea:80:f8:a5:17:f0:6c:bd:52:52:74:ec:b9:3e:31:e7:db:
3e:d3:bc:f4:2f:f8:f0:96:46:98:44:16:48:16:40:9d:fd:73:
50:0c:bf:df:9d:25:9b:ca:ba:1e:ba:15:4f:b5:4c:3a:30:e9:
a0:c9:8e:35:f0:91:b8:96:92:9c:88:5c:aa:e2:41:57:4c:68:
3e:6d:ab:a5:cf:ed:80:cd:56:c4:d8:0b:8f:e4:de:d7:c9:b8:
c5:89:ed:1c:9f:7c:30:d6:73:7d:71:5c:f7:23:38:37:f6:09:
cc:26:16:3e:db:c1:0b:19:6f:ad:38:d1:2c:d7:ed:cc:1b:4a:
f9:cf:4b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:48 2023 by rpki-client on console.sobornost.net