Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/TUIc6BhkJ_oM54NB-su9ZuRiyx0.roa
File: TUIc6BhkJ_oM54NB-su9ZuRiyx0.roa (raw, json)
Hash identifier: QUimJLhyoiYIED/4gm8vg+YCb1/CPrjVT4YKhK/iLvM=
Subject key identifier: 4D:42:1C:E8:18:64:27:FA:0C:E7:83:41:FA:CB:BD:66:E4:62:CB:1D
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 0189817132CFE1D06C46E1309F9D39977F05
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/TUIc6BhkJ_oM54NB-su9ZuRiyx0.roa
Signing time: Sun 23 Jul 2023 06:30:26 +0000
ROA not before: Sun 23 Jul 2023 06:30:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42708
IP address blocks: 45.92.228.0/24 maxlen: 24
45.91.21.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:81:71:32:cf:e1:d0:6c:46:e1:30:9f:9d:39:97:7f:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jul 23 06:30:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4d421ce8186427fa0ce78341facbbd66e462cb1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a0:2a:79:e8:25:fc:08:8c:23:ae:2a:0a:3d:
1b:3e:5d:80:3a:8e:b0:4a:e9:4c:83:bf:13:72:78:
91:7e:f3:c3:8e:34:c9:5e:14:37:fb:f6:a7:05:a5:
b1:b6:83:24:9a:1f:41:d0:37:fa:de:c8:df:26:c8:
bf:8a:c1:85:6c:e0:84:5d:31:c9:5b:38:5c:fa:c6:
ee:5b:17:fb:ef:2a:a9:3c:f0:22:67:64:ee:99:11:
27:f6:55:31:57:f9:b3:6b:ba:d0:3f:b8:d5:b6:96:
c7:05:3e:81:0a:b8:3f:1e:37:96:3d:84:42:2f:2b:
ed:1a:25:b7:96:09:cf:aa:56:73:6d:de:8a:92:0d:
9f:e8:34:18:c9:4e:d1:20:35:d9:ec:bc:f2:43:3f:
00:3c:00:11:67:ef:5b:97:f9:a2:3b:8d:96:e3:8d:
05:22:38:46:8a:c0:d4:f9:76:bb:7d:4e:7d:45:e6:
d1:9e:e5:2b:c1:40:b1:fa:1a:d1:75:74:d4:14:5f:
42:31:40:3e:da:76:01:c4:eb:f9:70:cc:fd:cf:cf:
65:f9:b7:30:83:60:30:85:00:03:23:c6:b1:9b:24:
f0:42:4b:38:77:25:e0:2c:e9:22:12:e7:88:61:fd:
c2:3d:53:ab:4e:c8:02:8f:c0:29:cb:f7:99:3e:1d:
4e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:42:1C:E8:18:64:27:FA:0C:E7:83:41:FA:CB:BD:66:E4:62:CB:1D
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/TUIc6BhkJ_oM54NB-su9ZuRiyx0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.21.0/24
45.92.228.0/24
Signature Algorithm: sha256WithRSAEncryption
49:72:0c:97:db:03:2d:8c:de:e3:88:c9:4a:ca:03:d7:18:92:
cf:f1:6b:3c:ac:2e:4b:76:e1:2b:91:50:82:16:a6:cc:bc:32:
e0:da:d8:74:80:13:c9:13:7a:6d:ee:f7:9e:3d:f9:5a:cc:99:
28:7b:21:ac:46:6d:c8:9f:56:d2:37:4d:ab:53:b0:ce:73:e6:
a3:1c:3f:cc:bc:0a:b8:95:c3:c5:93:ca:49:fe:3c:2a:dd:b0:
10:f9:21:55:45:df:f8:52:49:c6:03:02:89:6a:a6:c2:96:12:
74:c7:ae:5c:92:7b:10:e5:09:3c:80:ae:89:b2:d1:f7:4a:43:
bf:d4:df:21:39:fe:20:7f:27:01:5d:19:ab:3e:04:ea:d5:c7:
54:65:60:3e:e8:30:62:36:bb:7d:f9:4d:f4:f6:90:e6:96:82:
1f:fe:7a:a6:6c:e5:b9:38:69:2c:48:30:29:94:f6:a0:6a:51:
22:6f:fe:8e:96:c5:42:97:8d:89:24:24:4e:ee:f5:e6:aa:c8:
fa:87:e1:25:5d:ca:58:c7:bd:e1:9b:c6:92:d4:9a:fb:46:fe:
60:f4:bf:d4:fc:a2:ef:0f:27:ba:43:9e:5a:22:cc:27:52:5d:
c1:89:54:25:94:91:9a:02:78:42:3e:f3:f8:43:30:19:fc:94:
c8:95:f5:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:51:57 2024 by rpki-client on console-fra.rpki-client.org