Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/TNRtycJE8IhA3dgqFft8dVEvZ1I.roa
File: TNRtycJE8IhA3dgqFft8dVEvZ1I.roa (raw, json)
Hash identifier: VXCSBrR8UpaI61RkxFVgQJe2AVL+S2vktW/U5rNFzD0=
Subject key identifier: 4C:D4:6D:C9:C2:44:F0:88:40:DD:D8:2A:15:FB:7C:75:51:2F:67:52
Certificate issuer: /CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
Certificate serial: 01860C53EEFD05DEF10E9C84A99E0A2413CF
Authority key identifier: EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/TNRtycJE8IhA3dgqFft8dVEvZ1I.roa
Signing time: Wed 01 Feb 2023 09:34:32 +0000
ROA not before: Wed 01 Feb 2023 09:34:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3316
IP address blocks: 194.190.138.0/24 maxlen: 24
194.190.141.0/24 maxlen: 24
194.190.142.0/24 maxlen: 24
194.190.145.0/24 maxlen: 24
194.190.148.0/24 maxlen: 24
194.85.105.0/24 maxlen: 24
194.85.106.0/24 maxlen: 24
194.85.117.0/24 maxlen: 24
194.85.118.0/24 maxlen: 24
194.85.31.0/24 maxlen: 24
195.208.22.0/23 maxlen: 23
195.209.4.0/24 maxlen: 24
195.209.8.0/24 maxlen: 24
193.232.85.0/24 maxlen: 24
195.209.146.0/24 maxlen: 24
194.85.119.0/24 maxlen: 24
194.226.29.0/24 maxlen: 24
194.226.44.0/24 maxlen: 24
195.19.26.0/24 maxlen: 24
212.193.118.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:0c:53:ee:fd:05:de:f1:0e:9c:84:a9:9e:0a:24:13:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
Validity
Not Before: Feb 1 09:34:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4cd46dc9c244f08840ddd82a15fb7c75512f6752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3e:ec:9c:f1:c8:49:92:c5:7c:ed:89:4d:68:
1c:db:e6:9c:ad:0b:4e:8d:c1:f8:2c:2a:ba:da:cc:
7a:03:ec:3e:43:05:e3:30:6d:e7:57:5d:97:fd:d8:
10:78:ac:f6:9d:f6:a4:c5:e1:64:cc:f4:de:56:fa:
fe:13:4d:4f:b3:08:33:33:10:34:d7:af:a8:d6:95:
e0:34:5f:e5:f4:95:24:47:c2:88:9c:ae:17:15:90:
8a:af:90:f6:85:57:40:2d:80:bb:64:01:09:37:e4:
56:bc:4c:c8:63:b9:17:b2:d3:48:fa:c3:df:99:12:
50:ed:69:d4:d3:55:d9:37:b5:93:2f:d4:7c:11:62:
a7:fe:16:a6:ad:5b:58:71:e7:cd:f8:53:20:c0:ae:
8d:6e:73:da:9e:50:76:2f:b8:42:9d:d5:34:47:4e:
37:cc:9d:93:ef:9b:cc:e6:92:a1:aa:ba:ef:7b:22:
95:5d:08:c7:42:f4:5d:51:c3:1d:9a:40:fd:b1:e6:
80:da:cd:bd:4d:55:e3:78:04:44:82:2d:6c:dd:77:
94:ef:81:56:5a:45:3f:76:70:5f:2d:6f:30:30:dc:
55:f8:1a:d2:d9:05:5e:a6:b7:e1:de:eb:a5:3d:f2:
a7:66:70:c9:86:62:08:a8:73:c9:f0:8f:c5:d5:0d:
df:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:D4:6D:C9:C2:44:F0:88:40:DD:D8:2A:15:FB:7C:75:51:2F:67:52
X509v3 Authority Key Identifier:
keyid:EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/TNRtycJE8IhA3dgqFft8dVEvZ1I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.232.85.0/24
194.85.31.0/24
194.85.105.0-194.85.106.255
194.85.117.0-194.85.119.255
194.190.138.0/24
194.190.141.0-194.190.142.255
194.190.145.0/24
194.190.148.0/24
194.226.29.0/24
194.226.44.0/24
195.19.26.0/24
195.208.22.0/23
195.209.4.0/24
195.209.8.0/24
195.209.146.0/24
212.193.118.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:f9:8e:89:8a:51:bd:6b:5c:34:ba:c0:58:5e:39:bb:0b:3b:
2b:c0:ce:70:bf:66:0e:ac:84:36:66:da:d0:c0:fb:7a:18:b9:
38:48:3d:b3:6b:f1:47:b2:96:f2:c1:83:8b:a3:0d:79:2e:f9:
30:6b:31:aa:0c:35:c8:8a:7c:d2:8e:97:f9:0a:06:f2:e0:f8:
10:50:ec:82:8d:20:0e:64:09:61:3c:b2:a9:c6:24:a2:4d:4f:
6f:bc:40:89:6a:f3:2f:4e:db:b0:39:63:4b:2c:a6:a6:a2:18:
21:56:b1:31:7e:e7:e4:c6:ce:6c:99:50:74:8d:ca:6e:0e:cc:
0c:f5:bf:45:b3:9b:c5:a8:e8:2b:ea:2b:ec:29:fc:3b:fe:97:
08:65:2e:ae:6f:48:a5:0e:86:59:b0:31:ed:27:55:44:cd:3d:
ba:06:46:74:1a:7b:76:b2:2d:5b:4d:65:00:90:eb:1c:19:99:
5e:67:f7:a7:36:9e:ac:ea:71:57:79:1c:4a:c2:86:b2:5b:21:
f9:cf:f6:84:a3:e7:a5:b6:f3:d1:f9:a8:b9:1f:fb:30:0e:c7:
89:92:3a:1c:28:48:3a:5e:e4:1b:99:75:cb:a6:0d:ef:23:89:
b0:0d:00:7e:84:c0:d4:09:91:4b:5a:7c:52:a6:4a:04:c2:05:
1c:c3:53:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:50 2023 by rpki-client on console.sobornost.net