Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/Ic9ZtyvtSTbnXeXTu2ofugncihA.roa
File: Ic9ZtyvtSTbnXeXTu2ofugncihA.roa (raw, json)
Hash identifier: tYr8rs9w9plZzbwY6Kx+Zhdbu5PrsMjaQyeVA5L81Bk=
Subject key identifier: 21:CF:59:B7:2B:ED:49:36:E7:5D:E5:D3:BB:6A:1F:BA:09:DC:8A:10
Certificate issuer: /CN=b5cafe1e3aea2f6d911ed107a08aafee979a4f51
Certificate serial: 0186DB17C7F1AC572A273B92F9AC3F5BB1AF
Authority key identifier: B5:CA:FE:1E:3A:EA:2F:6D:91:1E:D1:07:A0:8A:AF:EE:97:9A:4F:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcr-HjrqL22RHtEHoIqv7peaT1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/Ic9ZtyvtSTbnXeXTu2ofugncihA.roa
Signing time: Mon 13 Mar 2023 13:10:14 +0000
ROA not before: Mon 13 Mar 2023 13:10:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20634
IP address blocks: 195.234.0.0/23 maxlen: 23
91.207.134.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:db:17:c7:f1:ac:57:2a:27:3b:92:f9:ac:3f:5b:b1:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5cafe1e3aea2f6d911ed107a08aafee979a4f51
Validity
Not Before: Mar 13 13:10:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=21cf59b72bed4936e75de5d3bb6a1fba09dc8a10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:22:54:49:dc:de:6f:b2:76:a3:98:38:0c:e6:
4c:84:57:ea:10:f2:4a:62:9a:7c:96:06:c7:5d:8b:
c1:56:10:fd:c2:e0:44:9d:8d:20:a0:08:8e:a3:fb:
47:3c:c9:d1:52:84:86:19:a1:34:09:28:95:fb:f3:
33:60:4e:71:b6:12:96:b7:5f:58:81:6d:a8:33:2e:
3b:7f:b4:af:02:61:4b:b0:c3:89:e5:2f:eb:9e:77:
9d:b5:06:97:0b:e2:50:3c:a8:aa:df:80:a0:66:67:
1f:ec:52:b3:8c:11:73:cc:17:a8:72:f4:5f:ca:f9:
f5:47:9f:9e:7b:c7:d6:ea:45:1f:34:66:2e:99:ec:
3f:9f:db:93:29:77:61:6a:dc:2b:a0:ce:f0:8c:46:
f9:5f:0e:34:c3:06:f3:73:17:e3:c0:e1:7a:04:ca:
93:4f:09:ca:21:44:ad:f0:76:e7:ed:b4:1e:4d:e3:
2b:67:26:57:e4:3c:c1:53:11:c1:7b:93:31:5e:c0:
99:40:f0:95:b6:ba:58:99:f5:a1:ee:a2:2c:11:6c:
44:04:25:53:0b:f6:c2:72:56:94:02:90:9b:d7:d1:
7f:f5:b3:fb:de:da:f9:2b:1c:54:83:3f:51:cc:87:
3c:93:bb:40:e0:1d:6a:b4:4c:25:f4:da:7a:c9:fb:
32:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:CF:59:B7:2B:ED:49:36:E7:5D:E5:D3:BB:6A:1F:BA:09:DC:8A:10
X509v3 Authority Key Identifier:
keyid:B5:CA:FE:1E:3A:EA:2F:6D:91:1E:D1:07:A0:8A:AF:EE:97:9A:4F:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcr-HjrqL22RHtEHoIqv7peaT1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/Ic9ZtyvtSTbnXeXTu2ofugncihA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/tcr-HjrqL22RHtEHoIqv7peaT1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.207.134.0/23
195.234.0.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:23:a4:1b:00:bb:73:8f:98:ad:33:78:de:75:08:c2:5e:e5:
e1:b7:a7:4f:09:20:21:8d:b4:c2:3d:ce:c6:ef:11:11:9f:ab:
db:19:73:e6:79:29:93:d8:12:99:44:fe:bc:d5:8c:05:fb:6e:
23:fb:a3:4f:3c:bd:c0:24:a8:b9:0d:11:52:5f:c6:e7:f9:11:
7c:23:54:20:c7:1c:d5:95:e9:ca:53:fb:20:38:80:f7:c0:a9:
1f:29:f5:a8:7d:6a:6e:40:05:5d:c1:e3:de:ff:3a:e7:a9:15:
4a:ed:b3:53:c5:cd:ea:e8:03:9d:ec:27:13:09:dd:7c:d7:2b:
2e:1c:4f:79:ae:fe:6e:8b:63:42:df:c7:27:57:ba:b2:81:5e:
0d:2d:08:b3:eb:57:bd:51:c1:ee:b7:ec:f2:72:e5:f9:30:21:
0f:36:5c:f8:4e:28:1d:c6:cd:dd:6c:71:bc:cf:ff:3e:0d:9d:
e2:52:0c:9b:c7:e7:47:49:57:3e:ca:1c:6e:b3:82:0e:98:69:
ec:74:2e:47:90:94:c1:81:ab:03:50:0d:ce:d5:ea:9d:25:d1:
0d:6f:26:c0:ed:6e:ee:bf:a5:40:f6:42:89:a3:64:73:b5:d0:
b9:8c:85:ac:ee:72:84:b4:59:bf:07:60:95:df:14:ce:22:bb:
de:47:af:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:43 2024 by rpki-client on console-fra.rpki-client.org