Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/011b5d-652e-452a-96c9-d8ec2cbcad26/1/tgCktML3IJPFlHtOQ71nWGp-otk.roa
File: tgCktML3IJPFlHtOQ71nWGp-otk.roa (raw, json)
Hash identifier: FWjiQyVyyu9+dKa2Zc0UQ/7YQ5JGm5d7FTneQF9ZdV4=
Subject key identifier: B6:00:A4:B4:C2:F7:20:93:C5:94:7B:4E:43:BD:67:58:6A:7E:A2:D9
Certificate issuer: /CN=577c0cd5a4cfd83d491d627d8b0fccb670e81534
Certificate serial: 01857246C456E4B650864A0FC903EB4F85CB
Authority key identifier: 57:7C:0C:D5:A4:CF:D8:3D:49:1D:62:7D:8B:0F:CC:B6:70:E8:15:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/011b5d-652e-452a-96c9-d8ec2cbcad26/1/tgCktML3IJPFlHtOQ71nWGp-otk.roa
Signing time: Mon 02 Jan 2023 11:38:38 +0000
ROA not before: Mon 02 Jan 2023 11:38:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43766
IP address blocks: 91.147.128.0/23 maxlen: 23
91.147.131.0/24 maxlen: 24
91.147.130.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:c4:56:e4:b6:50:86:4a:0f:c9:03:eb:4f:85:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=577c0cd5a4cfd83d491d627d8b0fccb670e81534
Validity
Not Before: Jan 2 11:38:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b600a4b4c2f72093c5947b4e43bd67586a7ea2d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:cb:2f:51:04:bf:88:97:0f:d5:6a:6f:40:f6:
0a:a2:d2:3c:03:20:d0:24:77:d8:97:ec:00:45:d9:
75:f1:ed:77:3d:b5:f7:a2:49:6b:78:78:64:86:56:
2f:55:3b:f2:e3:f0:1e:e7:79:e8:eb:85:c6:85:cf:
1c:b6:bf:80:e0:b0:69:de:8a:46:45:34:9f:dd:a8:
37:e6:27:2c:d9:78:31:7d:8b:e6:29:5f:1c:a1:07:
6f:bd:56:b4:36:51:6a:7a:be:ce:1a:12:1d:42:ee:
d1:e8:17:46:c9:9f:ca:57:49:14:9f:ab:cc:02:f8:
ab:45:3c:41:29:50:b9:37:fc:4a:40:28:e2:e1:61:
54:b4:a9:86:26:c3:c0:ac:f4:5c:14:1e:88:cb:22:
5a:77:80:9a:d0:48:b6:8f:b6:6a:3c:73:b6:b7:28:
1d:1d:a1:eb:3b:4f:b4:f1:e9:10:51:9c:5b:36:7a:
7e:2c:23:8f:f9:1c:de:ea:e6:5b:39:63:84:96:75:
ff:ff:f8:17:e2:eb:1f:51:07:c4:c8:97:7d:79:26:
2f:c1:fd:14:8d:3f:67:4e:8d:b0:b2:59:0d:79:0c:
1d:05:89:2a:0b:16:3a:c4:4a:62:30:5f:52:7b:9c:
ef:93:a1:94:75:77:f0:c8:2f:4e:ad:95:c6:4a:78:
ef:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:00:A4:B4:C2:F7:20:93:C5:94:7B:4E:43:BD:67:58:6A:7E:A2:D9
X509v3 Authority Key Identifier:
keyid:57:7C:0C:D5:A4:CF:D8:3D:49:1D:62:7D:8B:0F:CC:B6:70:E8:15:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/011b5d-652e-452a-96c9-d8ec2cbcad26/1/tgCktML3IJPFlHtOQ71nWGp-otk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/011b5d-652e-452a-96c9-d8ec2cbcad26/1/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.147.128.0/22
Signature Algorithm: sha256WithRSAEncryption
01:50:c8:36:9f:b7:04:4c:86:f3:7d:1b:ad:e6:24:b7:0c:da:
a6:ae:20:10:64:09:fe:ab:53:c0:3f:3e:6a:30:0b:35:ff:4f:
78:29:f6:f3:2b:b3:f4:1c:31:f1:63:94:e7:25:4c:a4:fa:e1:
cb:68:d3:b0:db:d5:ce:bd:3b:29:87:fd:9a:c1:38:54:08:b9:
41:ec:70:76:c8:9b:44:98:2a:8e:b3:18:31:69:e2:13:0b:15:
9d:65:d8:26:0b:81:17:a3:3f:11:a3:da:4b:c8:2a:5c:79:16:
1f:b4:7d:63:9e:76:f6:ef:a2:ce:b1:49:e0:aa:b2:35:c5:19:
e7:a2:48:38:af:d5:35:80:24:9a:93:18:e9:f5:de:ea:53:b1:
51:28:19:b1:e7:ce:be:12:53:8c:d0:5f:0c:de:ac:67:28:61:
74:35:f5:31:87:00:b7:82:a1:41:3b:e0:fc:ea:a5:04:52:1a:
95:a6:13:46:25:14:63:ce:0d:23:dd:14:dc:1a:21:48:b5:95:
29:03:fb:36:5b:50:25:61:ed:46:bc:df:b7:0b:cb:bc:33:b5:
ef:ba:41:3b:90:4a:43:11:16:be:e9:76:f2:54:bc:68:67:30:
50:e4:57:30:ad:02:dc:9d:5b:dd:3f:3e:dc:8f:f6:cb:f3:39:
ec:20:eb:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:02:16 2024 by rpki-client on console-ams.rpki-client.org