Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/TNGwUROiPfRNBWEjiSy4iIoCFoM.roa
File: TNGwUROiPfRNBWEjiSy4iIoCFoM.roa (raw, json)
Hash identifier: 7ppoI9hEjKPKZmHGHsTvwDnVxhAH91kwKmMCOq5lCLc=
Subject key identifier: 4C:D1:B0:51:13:A2:3D:F4:4D:05:61:23:89:2C:B8:88:8A:02:16:83
Certificate issuer: /CN=6689c3995e2461d5a52fd4f1000782f99a4d4822
Certificate serial: 018570DE51ED956098872E5CBF8EFB714462
Authority key identifier: 66:89:C3:99:5E:24:61:D5:A5:2F:D4:F1:00:07:82:F9:9A:4D:48:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/TNGwUROiPfRNBWEjiSy4iIoCFoM.roa
Signing time: Mon 02 Jan 2023 05:04:56 +0000
ROA not before: Mon 02 Jan 2023 05:04:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24577
IP address blocks: 185.108.68.0/22 maxlen: 22
91.187.224.0/19 maxlen: 19
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:de:51:ed:95:60:98:87:2e:5c:bf:8e:fb:71:44:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6689c3995e2461d5a52fd4f1000782f99a4d4822
Validity
Not Before: Jan 2 05:04:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4cd1b05113a23df44d056123892cb8888a021683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:37:d8:fe:08:08:ea:a8:cf:40:37:58:d4:20:
08:be:6d:ca:b8:22:d2:fb:f6:dd:55:62:64:d8:9a:
3b:b0:ed:d2:29:a5:36:32:0e:d2:30:b5:77:5c:ad:
98:00:5e:8c:cc:63:06:06:6c:93:4b:5a:82:00:36:
b7:3f:f1:16:3e:7b:da:ba:69:26:4d:4c:5c:af:99:
75:55:2b:67:1b:60:45:0f:4e:23:d4:ba:42:01:11:
82:10:3f:05:cf:09:ea:50:0d:ff:b5:62:86:4f:10:
2c:31:20:a6:03:61:5f:ef:77:c6:8a:f7:74:fd:d8:
ce:96:c3:fa:7e:b2:4c:77:00:e1:9a:67:3f:52:07:
bb:5d:5a:af:af:db:b1:43:cc:ad:28:4d:94:cb:f8:
86:ab:ab:51:79:64:8b:1f:fd:b0:43:14:c3:db:9a:
2c:af:e8:3e:7d:9f:d7:4a:3d:81:c2:9b:08:c7:f6:
9b:db:f4:04:ab:8d:14:d3:6e:d7:e6:65:1c:10:df:
4d:1b:15:ae:0d:56:62:f1:b7:87:cc:02:c9:b8:2c:
2d:e0:5e:37:56:35:c0:14:69:9a:48:86:67:da:10:
9c:26:26:9f:8e:ae:a5:2a:12:fb:e3:b0:6d:9e:12:
25:10:51:be:ed:19:1e:8d:71:15:64:60:29:50:09:
c2:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:D1:B0:51:13:A2:3D:F4:4D:05:61:23:89:2C:B8:88:8A:02:16:83
X509v3 Authority Key Identifier:
keyid:66:89:C3:99:5E:24:61:D5:A5:2F:D4:F1:00:07:82:F9:9A:4D:48:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/TNGwUROiPfRNBWEjiSy4iIoCFoM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.187.224.0/19
185.108.68.0/22
Signature Algorithm: sha256WithRSAEncryption
10:3a:8d:01:43:55:a6:22:fd:da:75:6d:48:06:31:85:8d:f9:
9d:3b:3f:c1:48:d8:e0:ec:8f:7c:04:dc:ce:a0:79:52:f3:ca:
4e:8a:27:29:19:b8:81:ba:7d:00:37:d3:d9:4e:02:0f:9f:84:
d9:f6:f7:91:46:de:93:2a:b5:7d:5b:cb:ff:85:96:ed:07:91:
8e:c4:f6:63:1c:b0:6b:db:3a:cd:18:30:d7:16:bd:f0:41:8e:
5d:a1:f4:2f:9d:d0:0e:dd:3d:7f:cc:93:87:61:48:a8:28:11:
74:ae:a9:c0:f6:a5:6d:76:75:26:f2:79:ec:99:bd:43:88:68:
7e:5a:6f:8f:b2:c6:9f:19:98:cc:3f:38:6e:63:a1:e1:d2:b3:
e6:62:e4:00:14:19:31:db:04:cd:a9:32:e2:dc:c8:d6:a0:5b:
09:99:71:19:3c:e8:20:cd:b6:9e:8f:dd:3f:07:9f:db:71:39:
4f:78:ed:56:99:6c:e5:92:7c:a2:62:0e:4a:2f:a0:94:d3:fd:
20:b9:c0:03:8e:07:55:26:14:8f:47:95:69:48:11:02:ab:f0:
55:2d:c6:e1:cd:2c:c0:6c:35:fc:34:04:0a:20:ec:99:02:1a:
53:05:59:71:44:80:1c:68:56:61:4d:3b:01:85:39:cd:4d:08:
da:ca:db:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 10 07:30:22 2023 by rpki-client on console-fra.rpki-client.org