Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/toznVnTSAFWnLgxXCY0rYTBKo8U.roa
File: toznVnTSAFWnLgxXCY0rYTBKo8U.roa (raw, json)
Hash identifier: cnNVrDNa4PPLnZN8v58GZyt/fqbsO+zcEt1h2bGFcYQ=
Subject key identifier: B6:8C:E7:56:74:D2:00:55:A7:2E:0C:57:09:8D:2B:61:30:4A:A3:C5
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0191E4E9BD497ADBA3D95D55F6F87654DA5B
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/toznVnTSAFWnLgxXCY0rYTBKo8U.roa
Signing time: Thu 12 Sep 2024 06:26:49 +0000
ROA not before: Thu 12 Sep 2024 06:26:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58212
IP address blocks: 5.83.150.0/24 maxlen: 24
77.90.7.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 07 Oct 2024 19:19:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:e4:e9:bd:49:7a:db:a3:d9:5d:55:f6:f8:76:54:da:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Sep 12 06:26:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b68ce75674d20055a72e0c57098d2b61304aa3c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:fd:94:8e:0c:8c:d0:59:0d:e1:9c:44:9b:ae:
f1:4b:99:a7:e3:d3:9d:f4:4e:e4:fb:d1:b7:72:06:
9b:57:23:a9:26:f5:28:a0:f0:d1:4d:f4:68:50:7f:
e6:06:85:35:87:08:f3:f1:05:a2:34:7a:59:bb:9b:
4f:e3:64:32:94:18:db:a5:23:a1:54:30:b1:20:3b:
6a:8c:02:c5:45:f2:7c:6f:de:30:f2:0e:16:3c:54:
9b:3e:7f:70:6b:2e:f2:41:53:84:0e:54:8c:53:43:
23:1d:e4:6f:2c:ce:39:ee:87:d4:71:d3:73:ba:1b:
9a:3b:cf:62:ff:b6:59:5a:3d:36:03:f9:f6:26:99:
7c:34:f1:9e:1e:52:82:cb:c2:42:6b:00:f5:3c:91:
f0:78:8c:b5:68:7a:fb:f7:ea:0b:2f:ce:de:19:0d:
ce:d6:f2:28:17:e6:63:00:41:ef:fc:a7:50:1a:0f:
6f:cf:76:6d:2b:62:0a:d4:c8:fa:50:b7:53:96:9e:
d1:25:66:70:fb:b3:7d:f9:fc:a0:f6:30:89:e9:02:
c0:d8:76:6e:c5:d7:fe:ea:30:0a:96:fa:cd:11:b4:
6c:76:e0:ed:87:af:f4:27:cc:7e:4d:af:4d:05:1d:
f8:37:00:01:d8:d0:54:9a:63:ce:2e:3e:71:dd:cc:
7c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:8C:E7:56:74:D2:00:55:A7:2E:0C:57:09:8D:2B:61:30:4A:A3:C5
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/toznVnTSAFWnLgxXCY0rYTBKo8U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.150.0/24
77.90.7.0/24
Signature Algorithm: sha256WithRSAEncryption
98:c5:4a:7e:1c:64:3a:bf:b7:de:0b:15:19:c5:0b:c4:46:65:
b1:0d:b2:db:d4:02:d6:05:74:b6:de:57:e5:2a:dd:ba:b7:70:
7c:59:33:ba:ea:a9:1f:f5:39:9e:a2:5e:af:1e:27:8a:2c:3d:
39:cd:60:38:b7:30:75:f6:b7:15:cc:ec:68:b6:98:cf:6c:62:
0f:f2:a7:7b:6d:4f:ef:a8:3b:b4:40:02:1f:07:73:e3:82:8b:
f6:04:3c:2b:84:f5:5a:93:c0:d2:7f:c1:ad:9f:e9:5d:01:23:
c1:25:df:70:4c:d6:df:53:a3:f9:84:28:39:48:69:53:63:fb:
0e:e1:77:60:31:97:49:ae:62:ec:82:da:5e:38:ac:a3:b2:d8:
fc:97:a7:1d:46:92:c0:cd:e1:23:49:b6:cb:29:3e:4a:5a:12:
0c:de:50:39:d3:e1:86:32:f1:9d:42:2e:6b:7f:06:b5:8f:40:
6e:98:9c:6b:2c:b2:7f:a1:83:37:38:c5:b7:4d:18:4a:1b:83:
1d:e2:b9:c7:bf:5b:e1:36:f3:4a:60:ed:20:b0:0c:6f:d8:5f:
11:ca:bb:c0:4d:cc:f6:ec:64:d3:c8:a2:c2:89:ee:5c:01:5c:
24:fc:0a:12:df:3b:0c:cc:09:c1:72:a3:56:b0:c0:18:bf:d2:
36:ea:95:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 8 00:11:48 2024 by rpki-client on console-fra.rpki-client.org