Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/Twss-TryDikQLZnY_3MWiCt6C5I.roa
File: Twss-TryDikQLZnY_3MWiCt6C5I.roa (raw, json)
Hash identifier: Hvqvdaup0yAMEHuIIQr6yVydO+LOLcWJUxHRQ5r2yPg=
Subject key identifier: 4F:0B:2C:F9:3A:F2:0E:29:10:2D:99:D8:FF:73:16:88:2B:7A:0B:92
Certificate issuer: /CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Certificate serial: 018BB05EAF409EBE3EB04EB22AC4C533BB8E
Authority key identifier: 89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/Twss-TryDikQLZnY_3MWiCt6C5I.roa
Signing time: Wed 08 Nov 2023 19:17:57 +0000
ROA not before: Wed 08 Nov 2023 19:17:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 45.151.97.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b0:5e:af:40:9e:be:3e:b0:4e:b2:2a:c4:c5:33:bb:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Validity
Not Before: Nov 8 19:17:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4f0b2cf93af20e29102d99d8ff7316882b7a0b92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:75:76:d6:64:e5:87:64:0d:29:8f:7b:e2:25:
b5:72:5d:34:a6:6a:b8:9d:c6:4f:66:fe:ce:cc:f9:
0a:62:eb:2c:0a:d5:a1:6c:ec:ae:6d:7d:23:65:d3:
47:7a:b7:31:0f:46:d3:09:51:a4:3d:b3:d1:20:85:
67:7f:46:a1:8d:12:c4:d6:0b:25:5e:2a:9d:ee:87:
b6:f9:3e:70:1e:3b:ad:23:11:88:5c:0c:b1:8f:fa:
e1:da:24:5b:99:0a:ac:5f:a1:76:81:41:00:35:dc:
4b:47:6c:2e:4f:65:60:2f:0d:cf:7c:8c:3b:fe:e5:
13:30:4b:28:59:98:7c:53:45:19:55:95:3d:d9:06:
e0:50:d7:7f:34:18:59:50:a6:ee:b9:78:dd:6d:96:
2a:58:e2:94:28:1b:46:06:13:2c:f4:e4:83:cb:ce:
49:85:dc:82:14:98:59:c4:e8:e7:17:3e:70:4f:45:
c2:5a:aa:3b:1b:2a:73:1a:92:fe:76:08:bb:e2:e0:
5f:31:92:ae:96:16:cf:51:98:ca:54:26:d6:68:0c:
33:cd:fb:a3:e9:a0:09:18:a0:83:87:1c:15:b0:96:
fc:93:fd:48:80:73:c1:fc:44:da:e6:ef:0d:df:23:
8d:1a:1e:63:54:1e:d6:69:02:bb:06:3a:dd:00:ae:
88:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:0B:2C:F9:3A:F2:0E:29:10:2D:99:D8:FF:73:16:88:2B:7A:0B:92
X509v3 Authority Key Identifier:
keyid:89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/Twss-TryDikQLZnY_3MWiCt6C5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.97.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:be:48:87:77:e8:c2:7e:a3:b8:16:38:aa:f2:55:e2:9c:c2:
38:2e:9b:dc:8d:6d:a6:70:be:2c:72:5b:60:eb:0b:da:05:af:
33:7e:35:40:e2:09:15:17:30:c2:d6:0b:f3:fa:ed:e1:7f:9e:
ac:92:3b:39:ed:af:7d:20:71:99:03:5c:ca:f8:34:8e:a3:90:
37:6e:cb:a2:5b:98:69:4a:c1:1c:23:a5:07:03:bc:be:91:03:
d3:4b:d6:0b:33:50:c7:cd:69:e2:c1:14:09:e9:3c:97:fa:43:
95:d3:db:04:15:7a:48:53:f1:d3:77:ee:b3:72:58:a0:ae:36:
9f:56:5e:8d:0d:f4:89:f9:af:2d:a5:7b:00:3a:a8:f7:36:e5:
4d:09:59:be:9c:1a:07:a7:99:64:b7:22:03:6f:ef:18:58:e4:
0e:6f:74:6a:c6:e8:96:dd:74:db:5b:22:26:2d:71:35:79:f1:
26:df:15:79:96:fd:40:84:37:98:8b:a9:35:59:1f:b8:b1:02:
8f:4e:a8:ca:66:cf:b4:c3:35:ce:8d:7c:ec:0e:55:43:1e:a0:
3c:d3:be:8b:2d:09:ad:ec:fc:39:fa:a8:dd:fb:ff:61:0c:70:
91:cb:39:0e:96:f8:3f:4c:9c:cb:76:19:c7:fa:05:7d:89:97:
41:ac:d0:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 8 20:20:57 2023 by rpki-client on console-ams.rpki-client.org