Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/7468ff-2a6a-43cb-a67a-afbcd928b25b/1/trESys_8_dwhOu01xhcyD_gY3dk.roa
File: trESys_8_dwhOu01xhcyD_gY3dk.roa (raw, json)
Hash identifier: czpfRQr5SBqorwtQ8qY4z7PnfkIdpw0z0x5sNHbUqac=
Subject key identifier: B6:B1:12:CA:CF:FC:FD:DC:21:3A:ED:35:C6:17:32:0F:F8:18:DD:D9
Certificate issuer: /CN=496a77608f1f4472f6fc30273c5560e967caf273
Certificate serial: 0187EA5CA2E35A64385BA00EF411656885C0
Authority key identifier: 49:6A:77:60:8F:1F:44:72:F6:FC:30:27:3C:55:60:E9:67:CA:F2:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SWp3YI8fRHL2_DAnPFVg6WfK8nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/7468ff-2a6a-43cb-a67a-afbcd928b25b/1/trESys_8_dwhOu01xhcyD_gY3dk.roa
Signing time: Fri 05 May 2023 05:22:32 +0000
ROA not before: Fri 05 May 2023 05:22:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197328
IP address blocks: 91.246.50.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ea:5c:a2:e3:5a:64:38:5b:a0:0e:f4:11:65:68:85:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=496a77608f1f4472f6fc30273c5560e967caf273
Validity
Not Before: May 5 05:22:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b6b112cacffcfddc213aed35c617320ff818ddd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:27:2b:d6:a9:dc:b7:f4:eb:9c:54:1c:57:52:
a8:30:9b:1e:07:8e:4c:27:58:ac:0f:9c:d8:74:36:
69:56:af:7a:f0:f0:82:e3:2f:01:ca:cc:f9:7c:56:
67:46:b7:bf:51:7a:da:e0:60:8a:45:6b:f4:00:12:
3d:fc:b7:ec:71:ee:4a:fb:b5:cf:ac:6c:ff:db:be:
13:8d:00:5a:74:3c:87:33:c9:f6:02:d8:0e:60:05:
13:6b:c2:3a:89:1b:69:46:aa:a3:f4:73:3f:ec:df:
8b:0e:c9:b0:6e:4e:cb:f0:91:7b:1a:21:c3:ab:d4:
ce:4f:a8:6c:1c:5f:99:86:8c:7a:f8:87:1d:f6:f3:
59:ba:58:27:d3:63:ee:f2:bd:a4:1f:be:58:eb:b1:
2c:1f:d4:87:bf:b7:d8:de:6b:6a:df:87:45:6d:0d:
ab:b8:a1:6a:47:27:ba:19:55:0c:9e:5f:f1:d4:f6:
13:13:5e:d5:d6:3c:7e:90:2f:27:fd:12:a4:b3:55:
56:d7:c3:19:99:e4:d5:c8:ff:96:c0:0e:ba:0b:e7:
79:b1:70:d1:f9:a4:cd:f0:1c:39:fe:9f:b2:9c:6b:
71:5b:e0:2c:18:08:4b:5e:39:f7:8a:1e:69:ed:13:
b2:55:1b:9d:50:04:1b:f2:ba:0f:9b:4b:8c:24:53:
2a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:B1:12:CA:CF:FC:FD:DC:21:3A:ED:35:C6:17:32:0F:F8:18:DD:D9
X509v3 Authority Key Identifier:
keyid:49:6A:77:60:8F:1F:44:72:F6:FC:30:27:3C:55:60:E9:67:CA:F2:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SWp3YI8fRHL2_DAnPFVg6WfK8nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/7468ff-2a6a-43cb-a67a-afbcd928b25b/1/trESys_8_dwhOu01xhcyD_gY3dk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/7468ff-2a6a-43cb-a67a-afbcd928b25b/1/SWp3YI8fRHL2_DAnPFVg6WfK8nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.246.50.0/24
Signature Algorithm: sha256WithRSAEncryption
71:8c:d8:3d:a1:30:e2:b9:2e:c1:db:5a:3a:dc:f1:bc:1a:05:
4e:04:90:01:2e:60:c1:33:55:5f:c2:59:f3:24:06:ce:47:9d:
f9:2d:33:0a:08:66:9e:e1:3b:f8:7d:3b:e0:ae:e9:a5:76:a9:
e7:8f:20:00:a0:9a:75:42:87:f2:03:0c:11:1e:7a:e1:bb:57:
3b:a8:37:0c:44:80:98:b0:3d:92:e5:aa:06:7b:2f:26:10:95:
29:5f:c7:6a:c4:f9:db:66:fd:6b:8c:70:b2:85:80:2f:a9:31:
b3:4e:9b:48:53:3a:9b:67:af:06:db:89:ba:41:28:03:d1:ed:
41:e3:ce:1d:b2:3f:f1:c2:9c:ad:ee:53:06:d2:53:b1:27:0e:
91:13:a8:15:d4:6a:2a:a2:20:a4:f8:f0:8a:ca:8b:05:cc:e1:
b6:8e:ca:de:bf:53:13:b8:ee:2d:3e:fc:43:ce:0b:c7:0d:b7:
97:33:51:8b:d5:a1:c1:b2:84:ad:b4:bb:c6:2e:49:b0:97:91:
76:b3:8b:47:37:cc:31:5b:49:da:9a:96:84:73:06:62:04:ea:
83:e5:54:0e:e9:08:c1:13:cb:48:23:2e:f8:8b:bd:c3:16:05:
21:b9:83:d5:4d:1e:58:cc:e6:45:b4:da:8b:4b:55:fa:10:81:
8b:87:93:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:12 2023 by rpki-client on console-fra.rpki-client.org