Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/e7d974-e258-41fe-880a-4ec2d94e2ede/1/TFFrITr7rfwlrFq_bqJydB5a7Zk.roa
File: TFFrITr7rfwlrFq_bqJydB5a7Zk.roa (raw, json)
Hash identifier: Yqji+WMgVo6ozLGOuqEh+gzeck2/xcAqe/PHlsS8Qtk=
Subject key identifier: 4C:51:6B:21:3A:FB:AD:FC:25:AC:5A:BF:6E:A2:72:74:1E:5A:ED:99
Certificate issuer: /CN=e7c3ab96b74c2ac4f04ae62ab7e82cdf1988ed40
Certificate serial: 0189D9226A95266468BA8E8D1051DEBC71DA
Authority key identifier: E7:C3:AB:96:B7:4C:2A:C4:F0:4A:E6:2A:B7:E8:2C:DF:19:88:ED:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/58OrlrdMKsTwSuYqt-gs3xmI7UA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/e7d974-e258-41fe-880a-4ec2d94e2ede/1/TFFrITr7rfwlrFq_bqJydB5a7Zk.roa
Signing time: Wed 09 Aug 2023 07:10:58 +0000
ROA not before: Wed 09 Aug 2023 07:10:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212552
IP address blocks: 91.228.186.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d9:22:6a:95:26:64:68:ba:8e:8d:10:51:de:bc:71:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7c3ab96b74c2ac4f04ae62ab7e82cdf1988ed40
Validity
Not Before: Aug 9 07:10:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4c516b213afbadfc25ac5abf6ea272741e5aed99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c2:d4:99:e7:12:f2:0a:dd:f9:64:cd:df:21:
c6:6d:37:40:12:c3:74:ed:ca:b7:60:b6:59:1f:42:
65:63:93:a9:14:09:94:13:0a:51:08:27:00:39:b5:
d6:00:e2:e0:82:ce:b9:e0:3f:18:b8:74:46:ba:29:
5b:88:dd:05:dd:26:6e:b1:70:7b:cb:8d:a0:e4:55:
29:86:22:88:4a:b3:03:fa:33:fa:c3:20:74:08:f2:
f8:79:7c:ee:7c:ee:88:f0:82:3e:97:37:85:52:e8:
4a:20:11:9f:bd:7d:ff:c5:c5:2d:d3:94:64:22:6d:
85:1a:47:b3:b9:06:e2:48:eb:81:7d:33:d0:10:cf:
36:77:b1:95:93:ee:03:e4:dd:d8:15:08:86:4b:d5:
77:a8:cf:98:d8:4c:64:a6:89:a7:4d:79:e8:10:3d:
2a:cc:83:9d:e9:2e:00:39:74:f5:0e:22:10:b7:2d:
e3:44:47:79:ea:dc:95:30:39:37:66:88:9e:ab:54:
94:ed:ae:b0:72:5f:df:cc:a1:36:2c:a1:a7:5d:f3:
2d:18:f7:7c:54:65:8b:9b:e1:60:2c:fa:52:02:c8:
5e:5a:b2:62:fb:92:82:7b:23:e9:bc:9f:dd:61:d2:
49:40:8c:42:0e:3b:a5:7a:68:a7:52:18:f2:f1:02:
05:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:51:6B:21:3A:FB:AD:FC:25:AC:5A:BF:6E:A2:72:74:1E:5A:ED:99
X509v3 Authority Key Identifier:
keyid:E7:C3:AB:96:B7:4C:2A:C4:F0:4A:E6:2A:B7:E8:2C:DF:19:88:ED:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/58OrlrdMKsTwSuYqt-gs3xmI7UA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/e7d974-e258-41fe-880a-4ec2d94e2ede/1/TFFrITr7rfwlrFq_bqJydB5a7Zk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/e7d974-e258-41fe-880a-4ec2d94e2ede/1/58OrlrdMKsTwSuYqt-gs3xmI7UA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.186.0/24
Signature Algorithm: sha256WithRSAEncryption
04:eb:34:71:bc:16:8d:ca:22:af:56:d8:90:4c:96:38:a9:7f:
db:0e:a6:91:72:96:67:cb:c0:dd:d8:55:8a:aa:20:14:30:cc:
04:1e:da:b4:16:02:3b:1b:27:b1:79:02:fb:bd:a1:7e:95:d1:
32:77:09:d6:44:ac:09:1c:ca:ef:43:a6:a9:d7:67:b2:e5:9a:
37:82:49:81:15:19:a6:e6:73:e5:6e:84:ea:09:69:c7:bd:79:
ff:73:38:ba:39:97:06:49:72:84:86:d9:2c:e1:da:a0:11:db:
75:a0:f4:fe:57:9e:28:d0:a0:50:54:40:9b:7b:d8:35:17:ae:
37:65:1f:f5:01:61:a9:87:4a:17:c0:2d:08:5d:61:f6:18:a7:
42:d8:28:29:a7:a3:e0:33:50:5d:c9:0b:63:c6:8c:67:97:11:
10:1b:a3:d0:7d:ef:b7:04:d1:d7:52:fa:66:6e:a4:c5:56:ef:
29:e2:11:cc:1b:8d:27:64:49:fa:a9:42:15:41:91:7f:fe:37:
d9:ee:85:c2:a2:29:5a:28:6f:65:68:f9:9f:6e:1e:e2:4c:22:
ce:71:a1:61:99:a1:04:34:d6:9d:ac:14:e6:4f:cb:21:72:11:
ce:46:ce:c1:4c:55:30:12:ad:ec:45:08:bf:d0:58:81:8d:ed:
7d:e0:3d:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:12:18 2024 by rpki-client on console-ams.rpki-client.org