Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/TTepcv-N5KAAquoc84pvowzqvK4.roa
File: TTepcv-N5KAAquoc84pvowzqvK4.roa (raw, json)
Hash identifier: mCnXpq93alYk4+Wa5cIgJpB7ZKj438jrowBuswa8Fr8=
Subject key identifier: 4D:37:A9:72:FF:8D:E4:A0:00:AA:EA:1C:F3:8A:6F:A3:0C:EA:BC:AE
Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial: 0187B259CB27DEEFF88514CFB6E5D5B867DA
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/TTepcv-N5KAAquoc84pvowzqvK4.roa
Signing time: Mon 24 Apr 2023 08:20:41 +0000
ROA not before: Mon 24 Apr 2023 08:20:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 91.243.176.0/24 maxlen: 24
185.81.183.0/24 maxlen: 24
93.114.61.0/24 maxlen: 24
93.114.60.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b2:59:cb:27:de:ef:f8:85:14:cf:b6:e5:d5:b8:67:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Validity
Not Before: Apr 24 08:20:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4d37a972ff8de4a000aaea1cf38a6fa30ceabcae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1b:70:9e:07:d6:00:50:a4:f1:49:32:d5:a3:
22:32:3f:76:32:7a:e1:d7:a8:ae:e0:2e:9a:67:82:
73:b1:80:5f:60:fe:c4:e8:5b:6a:3f:a1:0f:54:70:
e9:22:5c:90:37:63:68:ca:f0:67:71:f4:76:f2:48:
ea:68:f9:18:9e:c4:28:ba:14:67:bb:4d:90:44:5f:
03:9d:d4:65:a4:80:27:1f:9f:78:02:c7:f5:73:f2:
b0:97:55:07:78:62:b9:c7:58:6f:eb:a8:9e:b5:3b:
ea:6c:d4:06:2b:a6:9c:f1:f6:17:76:77:33:7f:d2:
a1:4e:68:20:ad:ff:e6:75:ae:20:23:0c:0b:b6:67:
5e:bc:ad:ae:c5:64:b2:22:7e:c3:f0:29:a3:4c:75:
4c:66:b2:84:e4:8d:d1:dc:cd:52:c3:ad:bb:35:13:
42:f4:e9:8c:5a:44:fd:ec:1e:3a:f1:9e:d6:98:27:
5f:93:9c:e6:70:e9:9e:0f:f8:15:43:7b:96:44:80:
bc:64:e9:0e:33:33:3b:b3:e1:0d:2c:40:3c:ac:33:
c4:1f:82:8f:41:00:b9:1a:8b:92:9d:2d:88:e5:25:
43:27:dd:97:7e:cf:00:18:e5:ba:88:16:c8:5b:1c:
46:b8:78:a0:f2:d7:1c:0e:21:52:fb:d5:a6:c7:52:
65:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:37:A9:72:FF:8D:E4:A0:00:AA:EA:1C:F3:8A:6F:A3:0C:EA:BC:AE
X509v3 Authority Key Identifier:
keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/TTepcv-N5KAAquoc84pvowzqvK4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.243.176.0/24
93.114.60.0/23
185.81.183.0/24
Signature Algorithm: sha256WithRSAEncryption
44:05:43:ec:64:b0:3c:07:b7:1e:1a:95:2a:87:1a:ed:57:c8:
40:85:fa:89:e0:80:b2:ef:83:ef:85:b5:1e:90:bc:b6:d6:74:
3e:72:3d:be:39:b9:cc:12:2e:85:4c:06:b5:91:d0:a8:96:d7:
78:ee:0a:ae:0c:ad:b3:ef:5e:b4:65:41:29:31:7a:01:5b:c6:
a2:cd:a7:87:47:27:55:f4:e3:bd:56:bc:5a:b4:64:31:d4:3f:
29:09:fd:b3:a5:be:a5:df:1e:ec:90:9a:47:ba:e8:4f:c4:57:
1e:71:a8:4a:60:69:a7:db:fe:21:e8:79:5f:ff:af:2c:95:32:
8e:f0:ac:73:cf:cf:3c:d5:32:39:d0:b6:3b:50:98:2a:97:60:
56:86:23:88:9f:ed:b5:6b:56:d8:61:19:2e:c2:4a:c6:b5:b6:
46:72:75:fe:15:3d:76:3d:43:b2:7c:af:2d:81:2a:6d:21:96:
b1:a2:d5:24:9b:21:f4:4b:2b:ea:23:5d:7b:e3:bd:16:bb:87:
92:5c:97:c8:20:e4:8e:9c:ac:1f:9b:b4:d7:f1:83:f0:6a:23:
37:5c:88:af:d6:c7:00:10:5e:bc:5b:fb:e5:2a:30:61:f1:2b:
b7:67:1c:18:7d:ec:a4:36:28:2e:7c:f7:02:05:69:70:e9:db:
3d:08:1d:d1
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYeyWcsn3u/4hRTPtuXVuGfaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwYWZmNmI0ZWZmZTdjMzYzZWYyMDBmNmYzZTU4ODhiOTE1
YmE2ODEwHhcNMjMwNDI0MDgyMDQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZDM3YTk3MmZmOGRlNGEwMDBhYWVhMWNmMzhhNmZhMzBjZWFiY2FlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphtwngfWAFCk8Uky1aMiMj92Mnrh
16iu4C6aZ4JzsYBfYP7E6FtqP6EPVHDpIlyQN2NoyvBncfR28kjqaPkYnsQouhRn
u02QRF8DndRlpIAnH594Asf1c/Kwl1UHeGK5x1hv66ietTvqbNQGK6ac8fYXdncz
f9KhTmggrf/mda4gIwwLtmdevK2uxWSyIn7D8CmjTHVMZrKE5I3R3M1Sw627NRNC
9OmMWkT97B468Z7WmCdfk5zmcOmeD/gVQ3uWRIC8ZOkOMzM7s+ENLEA8rDPEH4KP
QQC5GouSnS2I5SVDJ92Xfs8AGOW6iBbIWxxGuHig8tccDiFS+9Wmx1JlBwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFE03qXL/jeSgAKrqHPOKb6MM6ryuMB8GA1UdIwQY
MBaAFACv9rTv/nw2PvIA9vPliIuRW6aBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUtfMnRPXy1mRFktOGdEMjgtV0lpNUZicG9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8wOThkMTMtNmQ2ZC00Mjk0LTk3NTMt
YTg3NzNkZTc2OGY3LzEvVFRlcGN2LU41S0FBcXVvYzg0cHZvd3pxdks0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC8wOThkMTMtNmQ2ZC00Mjk0LTk3NTMtYTg3NzNkZTc2OGY3
LzEvQUtfMnRPXy1mRFktOGdEMjgtV0lpNUZicG9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAW/OwAwQB
XXI8AwQAuVG3MA0GCSqGSIb3DQEBCwUAA4IBAQBEBUPsZLA8B7ceGpUqhxrtV8hA
hfqJ4ICy74PvhbUekLy21nQ+cj2+ObnMEi6FTAa1kdColtd47gquDK2z7160ZUEp
MXoBW8aizaeHRydV9OO9VrxatGQx1D8pCf2zpb6l3x7skJpHuuhPxFcecahKYGmn
2/4h6Hlf/68slTKO8Kxzz8881TI50LY7UJgql2BWhiOIn+21a1bYYRkuwkrGtbZG
cnX+FT12PUOyfK8tgSptIZaxotUkmyH0SyvqI117470Wu4eSXJfIIOSOnKwfm7TX
8YPwaiM3XIiv1scAEF68W/vlKjBh8Su3ZxwYfeykNigufPcCBWlw6ds9CB3R
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:04 2023 by rpki-client on console-ams.rpki-client.org