Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/Tzji8VMoVcCzRwzyBfbBe0FSf98.roa
File: Tzji8VMoVcCzRwzyBfbBe0FSf98.roa (raw, json)
Hash identifier: kwaJcyXV0YLkISbr5Ca3pe493Py0sfnNMZdyZSPBcFo=
Subject key identifier: 4F:38:E2:F1:53:28:55:C0:B3:47:0C:F2:05:F6:C1:7B:41:52:7F:DF
Certificate issuer: /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Certificate serial: 018872E8139398C6995470A1CA4B79AA6623
Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/Tzji8VMoVcCzRwzyBfbBe0FSf98.roa
Signing time: Wed 31 May 2023 17:43:11 +0000
ROA not before: Wed 31 May 2023 17:43:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.84.242.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:72:e8:13:93:98:c6:99:54:70:a1:ca:4b:79:aa:66:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Validity
Not Before: May 31 17:43:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4f38e2f1532855c0b3470cf205f6c17b41527fdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:17:60:a8:fe:03:93:d8:a8:b9:0b:35:74:f9:
06:7b:89:09:45:00:7e:9c:49:55:71:61:ef:56:63:
5e:01:38:f5:63:a4:b8:a5:ef:f0:19:0d:55:ff:f3:
ea:b3:4f:7e:4c:71:5b:96:e0:30:20:50:26:f9:0c:
f5:b3:e4:79:51:56:b6:5b:07:65:04:74:d6:db:46:
bc:6a:6a:29:5f:ba:58:7d:f1:6e:81:e9:03:7d:ac:
1a:61:c8:81:ce:f0:b9:b0:c2:3e:95:dd:25:87:53:
e6:e6:b0:30:50:20:e1:70:81:a5:2c:98:c3:93:ed:
76:87:86:be:98:ee:30:bf:c9:7f:f6:df:a0:d8:a9:
91:c3:d0:1d:fa:3a:1b:65:56:62:b3:ed:7a:f6:e1:
3d:e6:e7:36:99:0e:87:38:0d:da:08:4a:a2:11:05:
33:28:ab:56:43:5e:68:90:29:4a:34:e0:ef:8b:53:
93:4e:05:04:77:ae:92:14:c9:54:a4:75:82:9c:d8:
73:45:2f:c1:c8:e2:8b:4d:86:ac:3d:1c:cc:d1:1e:
a6:f9:92:59:10:a6:d9:02:25:01:2d:bd:fe:9e:9a:
c0:45:19:3c:8b:54:64:b6:a3:3c:e2:0e:03:00:ba:
89:a4:31:78:95:53:1e:db:a0:1b:cd:5e:18:63:5f:
17:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:38:E2:F1:53:28:55:C0:B3:47:0C:F2:05:F6:C1:7B:41:52:7F:DF
X509v3 Authority Key Identifier:
keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/Tzji8VMoVcCzRwzyBfbBe0FSf98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.242.0/23
Signature Algorithm: sha256WithRSAEncryption
71:2c:1e:46:d9:26:7d:91:b5:cc:3f:66:41:59:8e:61:c6:fe:
80:e4:a3:37:ff:3f:e5:11:c7:34:08:8f:59:38:a0:f5:9b:0d:
75:4e:0f:46:9e:c5:65:71:93:76:7b:b3:4c:e5:36:f3:41:58:
e6:01:08:29:62:17:ec:7b:55:4c:f4:be:a0:4a:71:80:6c:e3:
be:2e:64:70:71:1c:5b:5f:61:d3:f2:d9:d9:77:94:69:ae:b9:
f3:58:b1:ae:05:85:93:bb:ff:88:0f:bb:54:1c:7c:bb:ec:6f:
25:13:8a:9a:a9:d9:82:18:44:ec:00:5b:05:89:88:1f:8c:e2:
e2:f1:52:1b:52:5b:47:36:9a:91:5f:9d:41:89:0e:02:62:15:
57:c0:bf:46:41:c0:cb:2f:90:40:73:92:a7:94:1d:5f:27:a5:
2e:3b:9c:06:dd:5f:2d:e4:ab:89:a8:9d:24:6f:29:9e:6a:17:
bd:35:ac:ce:f6:0b:96:e1:3f:23:1d:24:50:12:a8:c8:ec:9c:
1a:12:1b:1d:33:0a:b1:c0:83:1e:c7:9e:e2:42:16:60:ff:1c:
50:18:f0:cc:7b:6a:c3:06:6a:46:89:98:ed:04:80:2a:a5:e6:
75:2e:b0:4e:53:c2:29:55:59:58:a1:77:07:c7:1f:f4:5c:37:
69:86:cb:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:06 2023 by rpki-client on console-fra.rpki-client.org