Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/TyxN4QCKziJx_tte_t8Bp0IyVJQ.roa
File: TyxN4QCKziJx_tte_t8Bp0IyVJQ.roa (raw, json)
Hash identifier: a3Pxh8G3iyeyeAQSJJFIE6LikjiGjie6q8Vko83TLJQ=
Subject key identifier: 4F:2C:4D:E1:00:8A:CE:22:71:FE:DB:5E:FE:DF:01:A7:42:32:54:94
Certificate issuer: /CN=e214eb35a35fd488860703b7990b8170af17912f
Certificate serial: 018891019FF3E2C9F9D5BC05E51692FC619A
Authority key identifier: E2:14:EB:35:A3:5F:D4:88:86:07:03:B7:99:0B:81:70:AF:17:91:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4hTrNaNf1IiGBwO3mQuBcK8XkS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/TyxN4QCKziJx_tte_t8Bp0IyVJQ.roa
Signing time: Tue 06 Jun 2023 13:59:42 +0000
ROA not before: Tue 06 Jun 2023 13:59:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12693
IP address blocks: 91.203.204.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 27 Sep 2023 12:49:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:91:01:9f:f3:e2:c9:f9:d5:bc:05:e5:16:92:fc:61:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e214eb35a35fd488860703b7990b8170af17912f
Validity
Not Before: Jun 6 13:59:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4f2c4de1008ace2271fedb5efedf01a742325494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:b6:f3:08:6c:6b:db:bc:a8:16:f6:92:43:1d:
1a:af:3b:e6:f1:78:7f:3a:16:8d:d1:cf:60:cc:d0:
d5:a8:d7:9a:eb:78:a6:e8:79:28:df:e2:06:4a:89:
5e:fb:22:1b:77:1a:1f:07:08:c9:90:9b:11:3c:af:
e0:2d:01:1e:f0:f2:dd:1a:c9:6c:64:45:9f:be:9d:
c7:9e:3c:18:72:6a:05:37:52:c2:c5:0f:97:f8:f5:
4f:3d:0c:8e:78:54:62:94:3f:ab:bd:57:39:eb:d8:
e1:05:7e:e9:48:ae:aa:b8:cb:f9:af:74:f9:60:4b:
b6:ac:c0:2b:0a:68:eb:c3:d9:e9:01:4e:c3:55:f6:
be:35:57:f6:a0:d9:6a:d5:f2:df:0d:aa:b9:e1:15:
f4:a8:8c:ce:78:70:d5:8b:bd:86:91:3e:d0:e1:38:
67:8e:4b:84:38:15:28:36:bf:6f:55:68:de:47:dd:
2b:98:5a:48:0d:22:16:51:7c:40:b5:38:d1:9a:39:
a9:e9:a6:5a:e8:23:ee:db:cc:b1:ce:83:52:d9:96:
89:f8:5f:2e:c1:01:07:f5:11:b7:f5:fc:57:fb:e7:
b2:dd:2a:4a:6f:69:d2:80:eb:69:66:bd:68:59:6e:
cb:e9:e7:17:39:8c:d4:c6:24:b8:28:f2:89:50:b9:
c0:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:2C:4D:E1:00:8A:CE:22:71:FE:DB:5E:FE:DF:01:A7:42:32:54:94
X509v3 Authority Key Identifier:
keyid:E2:14:EB:35:A3:5F:D4:88:86:07:03:B7:99:0B:81:70:AF:17:91:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4hTrNaNf1IiGBwO3mQuBcK8XkS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/TyxN4QCKziJx_tte_t8Bp0IyVJQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.203.204.0/22
Signature Algorithm: sha256WithRSAEncryption
a3:65:b3:b7:81:3a:89:a0:75:a8:85:17:12:1d:b4:f6:70:fc:
1e:29:6c:57:55:61:94:65:a6:f8:b2:78:1b:54:27:53:79:eb:
58:b5:78:e8:33:4d:08:77:c6:be:dd:f6:9f:1e:61:5d:bf:7c:
00:a6:16:e8:40:3c:b4:b2:19:18:5d:a8:9d:c9:c4:39:12:3c:
d4:fa:67:9e:53:3f:41:2c:1e:8b:61:1b:ba:ba:ee:78:6f:19:
26:68:e1:71:38:ce:34:6b:b7:50:c8:db:ce:6d:dd:35:37:98:
21:79:e7:22:e3:b0:15:1b:fe:b5:e3:ba:0f:df:70:dd:02:5c:
2b:91:8d:3b:c5:64:18:1c:e2:da:00:83:22:58:62:52:2d:6b:
aa:2a:80:ba:0b:f5:fe:3a:50:d2:07:18:f7:59:bb:78:c2:4b:
8e:a3:51:de:99:c9:41:c1:c9:6f:63:0d:d5:a8:a7:a5:7a:18:
2a:be:9d:d6:44:1a:0f:88:fc:36:e4:05:f0:aa:94:2e:15:de:
c7:c7:e4:42:60:e3:36:46:e8:b8:5d:6c:fa:ba:a6:6f:f8:73:
f5:cf:a8:66:a7:e0:15:3c:5c:93:de:de:ec:91:43:63:a1:be:
5c:9f:45:c9:95:4c:36:73:96:64:b8:da:fe:4e:fb:f7:e4:dc:
e0:0c:7d:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:21 2024 by rpki-client on console-fra.rpki-client.org