Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/bf70d3-70fa-4a32-809f-2a591c149d7a/1/TPLV5-67zU1XShcGr8vip1yggvM.roa
File: TPLV5-67zU1XShcGr8vip1yggvM.roa (raw, json)
Hash identifier: ysfxB8Ye1/CaYMeVhxw7cSs4R0dAjfMAOoEUW3Qy8dU=
Subject key identifier: 4C:F2:D5:E7:EE:BB:CD:4D:57:4A:17:06:AF:CB:E2:A7:5C:A0:82:F3
Certificate issuer: /CN=96199360259fa5b35b82953c5ed97999228341ac
Certificate serial: 01866144633204B75B35C778807055E4E497
Authority key identifier: 96:19:93:60:25:9F:A5:B3:5B:82:95:3C:5E:D9:79:99:22:83:41:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhmTYCWfpbNbgpU8Xtl5mSKDQaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/bf70d3-70fa-4a32-809f-2a591c149d7a/1/TPLV5-67zU1XShcGr8vip1yggvM.roa
Signing time: Fri 17 Feb 2023 21:25:17 +0000
ROA not before: Fri 17 Feb 2023 21:25:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212986
IP address blocks: 91.212.96.0/24 maxlen: 24
2a12:7cc0::/29 maxlen: 29
2a12:7cc0::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 17 Feb 2023 21:45:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:61:44:63:32:04:b7:5b:35:c7:78:80:70:55:e4:e4:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96199360259fa5b35b82953c5ed97999228341ac
Validity
Not Before: Feb 17 21:25:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4cf2d5e7eebbcd4d574a1706afcbe2a75ca082f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:9f:eb:54:e2:06:e0:0b:e6:34:31:fa:3a:09:
8c:8e:33:ac:f5:e6:c7:60:d8:6a:63:6d:da:b0:fa:
79:a4:85:a7:6c:88:80:9b:68:b3:b8:06:52:ef:83:
d0:c4:29:c8:25:c2:38:ec:e6:70:29:7e:e7:56:da:
24:f2:dd:30:74:0a:c8:5e:bb:bc:1c:3e:75:d4:d1:
2c:2d:60:55:c1:c7:b8:36:85:d8:9f:a4:c9:89:ce:
a4:70:9b:b9:a3:2f:84:bb:a6:e4:3a:43:35:50:a2:
32:2a:c9:81:d8:63:b7:b6:63:ca:c8:79:69:d8:a2:
da:39:be:51:d4:ce:a8:31:be:f8:21:0a:4f:71:56:
12:36:59:3a:de:0d:47:02:c2:0d:de:91:07:40:8d:
7a:91:4f:f5:21:ec:4c:32:7f:c5:bf:1f:40:e5:79:
c2:99:b4:42:8a:0a:47:d7:34:df:b9:93:42:67:bc:
2e:92:c2:f7:76:d9:bb:00:cc:2c:46:14:9a:e7:b3:
9e:5c:83:56:88:e5:41:9e:ce:36:65:b7:aa:86:6e:
69:84:62:de:eb:e2:ce:5d:e6:c2:2a:da:a9:d7:23:
45:f6:50:70:d4:e4:d1:9f:7f:68:91:10:fa:7a:21:
3d:28:3c:e9:e0:9f:6f:93:85:5c:aa:38:2f:5d:14:
cc:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:F2:D5:E7:EE:BB:CD:4D:57:4A:17:06:AF:CB:E2:A7:5C:A0:82:F3
X509v3 Authority Key Identifier:
keyid:96:19:93:60:25:9F:A5:B3:5B:82:95:3C:5E:D9:79:99:22:83:41:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhmTYCWfpbNbgpU8Xtl5mSKDQaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/bf70d3-70fa-4a32-809f-2a591c149d7a/1/TPLV5-67zU1XShcGr8vip1yggvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/bf70d3-70fa-4a32-809f-2a591c149d7a/1/lhmTYCWfpbNbgpU8Xtl5mSKDQaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.96.0/24
IPv6:
2a12:7cc0::/29
Signature Algorithm: sha256WithRSAEncryption
23:91:61:72:6b:83:43:b7:30:39:3a:78:10:b9:90:9f:91:d0:
10:84:56:fc:9f:e9:e2:2c:49:05:13:6e:eb:6b:13:c3:a7:87:
bb:bc:cc:41:be:fe:27:36:54:7f:63:bf:6c:b3:1e:9a:58:f6:
8f:d0:e1:bd:10:3d:90:1b:02:4c:25:01:24:c1:53:e8:8a:09:
7a:4e:68:b0:d7:b7:f5:80:87:ac:05:99:dd:89:42:30:9d:ed:
e7:90:59:73:f9:4f:f5:da:d8:f3:34:87:6c:a7:a9:36:2e:14:
2c:1b:17:45:a9:08:a0:2a:5d:ed:91:24:cd:5b:be:d4:b7:6f:
23:ba:bb:4c:36:1e:37:ab:98:2c:69:8f:ca:6f:cd:fd:af:53:
c0:6c:5d:18:bc:ff:bf:c1:21:e3:70:8d:2f:a3:32:40:7a:02:
ca:58:8c:99:0b:53:ef:e3:87:91:7c:5a:d2:8f:48:e2:38:ab:
11:e1:a0:35:dd:6d:7f:99:d3:ce:03:19:ca:2d:58:5c:37:90:
2c:51:d5:2f:90:f0:a0:fe:7a:bc:63:08:4e:a8:1e:7e:34:ab:
01:63:81:92:bc:9e:10:07:42:21:c9:a0:1b:a3:37:d7:32:20:
66:99:19:40:2d:69:b0:08:2d:18:40:57:28:d8:13:bf:f9:83:
73:77:ab:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:54 2024 by rpki-client on console-ams.rpki-client.org