Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/939e00-3bd9-435b-8f8b-bcddc44b03ab/1/tmrbYfLEj-gUmKyUre7I4U45HzA.roa
File: tmrbYfLEj-gUmKyUre7I4U45HzA.roa (raw, json)
Hash identifier: OzPsNBlaCVPEkJteusDzpBL9EJTz/4HR4iROdkxCPs0=
Subject key identifier: B6:6A:DB:61:F2:C4:8F:E8:14:98:AC:94:AD:EE:C8:E1:4E:39:1F:30
Certificate issuer: /CN=9957a15aa9893f1c915b4497ebf92a8a33d5e439
Certificate serial: 018570FBC5C60875E8EB4A94687A2CD654C8
Authority key identifier: 99:57:A1:5A:A9:89:3F:1C:91:5B:44:97:EB:F9:2A:8A:33:D5:E4:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mVehWqmJPxyRW0SX6_kqijPV5Dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/939e00-3bd9-435b-8f8b-bcddc44b03ab/1/tmrbYfLEj-gUmKyUre7I4U45HzA.roa
Signing time: Mon 02 Jan 2023 05:37:06 +0000
ROA not before: Mon 02 Jan 2023 05:37:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43713
IP address blocks: 91.198.119.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:fb:c5:c6:08:75:e8:eb:4a:94:68:7a:2c:d6:54:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9957a15aa9893f1c915b4497ebf92a8a33d5e439
Validity
Not Before: Jan 2 05:37:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b66adb61f2c48fe81498ac94adeec8e14e391f30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:49:59:3c:7c:e8:5a:71:66:65:81:98:28:64:
e6:4c:bb:45:1b:c1:d3:bb:ce:f9:70:6f:2e:90:d0:
c9:1c:32:c9:73:6f:cd:95:e7:53:c0:c1:fb:ad:37:
ab:4f:90:19:1b:18:af:6c:87:be:9e:5b:99:75:33:
76:46:d0:e6:18:0f:f9:15:a4:a3:bb:3c:2b:cf:1b:
49:50:3e:3e:63:cb:48:74:92:5c:ef:84:2b:2b:1a:
d4:13:a0:1f:e5:fc:3c:47:3a:00:7b:ca:1d:dd:f1:
90:f2:d9:f6:6a:1f:e1:6f:27:ce:43:a4:52:65:f2:
54:e3:f0:b3:da:0d:dc:e1:93:f7:67:ab:7b:42:21:
7e:2c:93:be:1b:cd:3d:d0:9c:97:1d:ca:28:b6:74:
dd:55:4b:97:a8:93:c3:ef:1b:32:03:b0:10:62:49:
ed:9a:0a:8d:96:78:9b:88:9d:d4:ad:76:65:7a:96:
38:84:0f:eb:4b:08:9a:5f:a0:f8:39:1a:96:ff:0a:
a7:c5:bf:5b:fa:42:7f:b1:25:6c:dd:28:59:1d:21:
e7:b5:1c:f8:22:48:2a:f5:35:de:04:5f:2d:af:1c:
6e:6c:11:bd:2a:ff:52:56:9a:31:58:10:cc:be:08:
ce:4c:a3:de:ff:0b:c7:15:a1:64:48:d5:aa:4f:fa:
d8:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:6A:DB:61:F2:C4:8F:E8:14:98:AC:94:AD:EE:C8:E1:4E:39:1F:30
X509v3 Authority Key Identifier:
keyid:99:57:A1:5A:A9:89:3F:1C:91:5B:44:97:EB:F9:2A:8A:33:D5:E4:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mVehWqmJPxyRW0SX6_kqijPV5Dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/939e00-3bd9-435b-8f8b-bcddc44b03ab/1/tmrbYfLEj-gUmKyUre7I4U45HzA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/939e00-3bd9-435b-8f8b-bcddc44b03ab/1/mVehWqmJPxyRW0SX6_kqijPV5Dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.119.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:d7:99:1f:6c:45:87:c2:9e:6f:ba:01:a2:2b:93:21:a7:d0:
47:56:2f:a7:c9:d5:f2:c4:40:c6:c8:c0:25:76:49:50:f7:f2:
26:e1:b5:05:dc:5c:0f:0b:de:00:ce:ce:2f:8a:c0:af:82:df:
e1:db:1e:02:42:56:7f:20:12:6c:5d:fc:ec:5c:d0:6d:1f:70:
8c:f4:ff:b0:25:7f:ae:ac:10:5a:39:22:f8:c8:72:76:91:8d:
e3:2a:da:14:e7:aa:db:42:2f:77:2a:f5:95:50:79:e1:42:84:
e2:8e:dd:d3:14:61:a2:8b:4c:97:53:2a:80:0a:9c:f3:f6:e2:
d0:8a:e7:2f:fb:5d:cc:e1:7a:53:63:05:2f:61:70:f3:23:d3:
10:b3:29:08:2f:e1:b8:90:5e:55:e3:4c:eb:f9:7a:ef:7e:fb:
94:89:6b:79:1c:8a:1f:9f:74:a9:57:f3:64:46:0f:ab:1e:3b:
fb:06:1c:b8:a5:97:5b:8a:2e:82:92:33:28:8e:ec:26:77:98:
4a:11:62:cc:7c:a9:da:75:2b:c5:04:4e:af:7f:41:45:52:c2:
24:36:92:ab:4b:08:c8:77:3c:e2:09:26:09:c3:45:96:b6:37:
31:57:ce:07:44:d5:d7:c8:cb:64:23:c6:5f:e7:43:da:91:9c:
a8:94:bf:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:43 2024 by rpki-client on console-fra.rpki-client.org