Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Ta80-SdCmLqgYpLE-Hz6R3-J7uk.roa
File: Ta80-SdCmLqgYpLE-Hz6R3-J7uk.roa (raw, json)
Hash identifier: 0Uh9USFINjSrguKM4hZR3Xq3LhUe9jVnOC4k5gN0QT0=
Subject key identifier: 4D:AF:34:F9:27:42:98:BA:A0:62:92:C4:F8:7C:FA:47:7F:89:EE:E9
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018943652DCB507B69C81CEEB09AE6E948D8
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Ta80-SdCmLqgYpLE-Hz6R3-J7uk.roa
Signing time: Tue 11 Jul 2023 05:20:51 +0000
ROA not before: Tue 11 Jul 2023 05:20:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400377
IP address blocks: 91.132.49.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Jul 2023 05:24:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:43:65:2d:cb:50:7b:69:c8:1c:ee:b0:9a:e6:e9:48:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jul 11 05:20:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4daf34f9274298baa06292c4f87cfa477f89eee9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7a:9d:44:be:3f:31:e5:5f:9c:06:07:f6:75:
e1:d4:e1:ca:52:a4:81:29:8b:c0:f0:d5:c1:a2:80:
2f:93:10:24:b7:7b:e0:65:47:7e:27:d6:5f:fb:f6:
53:da:99:5c:13:94:2a:0d:f4:1e:7e:a7:0c:f5:c4:
49:14:b3:e7:2a:65:7c:1a:f6:2c:a3:04:47:d2:de:
54:ff:44:2e:07:59:3f:69:14:c5:ab:b5:7d:6c:fa:
36:78:28:a4:90:a3:d4:52:d1:0b:61:62:f8:3a:aa:
52:b3:bf:23:3c:99:39:7a:63:0b:64:d8:09:3e:fe:
7e:a2:af:38:30:34:e4:e3:f3:5d:55:0f:dd:f9:3a:
3e:1c:b5:99:fc:41:9b:2f:6f:a5:0f:87:bc:1e:29:
f2:b2:b6:8b:37:8e:43:3c:77:59:77:98:c4:57:ee:
17:66:9f:8d:81:88:58:c3:38:54:d4:0a:07:b6:6b:
47:9e:3a:2a:fd:bb:32:26:d0:e4:78:84:2c:ef:a5:
a4:c9:cf:c5:f8:b2:6b:f6:ea:8a:54:76:ea:b3:5c:
a1:3f:52:6f:7f:3c:4c:0e:33:d1:a1:2f:ee:4f:d7:
f1:ca:13:d3:ad:e6:a8:60:7e:4e:26:56:47:d3:94:
29:9a:40:51:f0:ae:a1:f0:d7:b8:ec:3c:ee:04:ea:
19:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:AF:34:F9:27:42:98:BA:A0:62:92:C4:F8:7C:FA:47:7F:89:EE:E9
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Ta80-SdCmLqgYpLE-Hz6R3-J7uk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.132.49.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:64:62:b4:93:8a:79:59:73:93:da:0b:f9:44:a7:ac:b9:ce:
8a:96:22:53:2b:ea:ec:48:e5:cc:24:64:0e:d3:df:4e:3a:a8:
65:69:37:e6:7f:a3:de:d9:78:c2:a8:23:0c:76:8a:d3:34:48:
23:5c:4a:b6:99:bf:f6:12:81:04:7f:72:39:fd:12:17:cd:bf:
39:40:42:de:ee:89:5b:3b:51:be:53:68:79:a8:fe:c3:5d:90:
05:a7:d7:b3:ac:dc:c0:4c:52:30:02:92:bf:f6:2b:4f:d0:dd:
a7:d7:26:fa:7e:48:6f:1c:d8:ae:eb:ad:93:a9:39:66:ff:eb:
f4:59:00:1d:23:ec:4f:65:e8:be:7b:33:88:5e:15:e4:07:c4:
bb:ab:6c:ed:c8:9c:0b:4d:25:5d:8b:72:66:f6:ea:8f:d7:6c:
ad:6a:e7:52:3c:28:73:73:cd:8f:41:97:f6:0e:7c:91:6c:53:
c4:a2:c4:7a:a5:a4:86:9c:00:29:f8:8c:f1:93:ff:1b:ba:62:
a4:1b:74:10:02:b6:b2:d3:82:65:b9:31:cf:ad:e7:b9:2e:8a:
95:b6:f5:24:5c:4b:11:51:81:9c:a0:26:44:33:3b:2f:57:ce:
a9:5b:b0:64:4b:3e:f4:b7:f5:2e:5b:62:4f:8a:9d:65:93:fa:
de:cc:de:a8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYlDZS3LUHtpyBzusJrm6UjYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjMwNzExMDUyMDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZGFmMzRmOTI3NDI5OGJhYTA2MjkyYzRmODdjZmE0NzdmODllZWU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnqdRL4/MeVfnAYH9nXh1OHKUqSB
KYvA8NXBooAvkxAkt3vgZUd+J9Zf+/ZT2plcE5QqDfQefqcM9cRJFLPnKmV8GvYs
owRH0t5U/0QuB1k/aRTFq7V9bPo2eCikkKPUUtELYWL4OqpSs78jPJk5emMLZNgJ
Pv5+oq84MDTk4/NdVQ/d+To+HLWZ/EGbL2+lD4e8HinysraLN45DPHdZd5jEV+4X
Zp+NgYhYwzhU1AoHtmtHnjoq/bsyJtDkeIQs76Wkyc/F+LJr9uqKVHbqs1yhP1Jv
fzxMDjPRoS/uT9fxyhPTreaoYH5OJlZH05QpmkBR8K6h8Ne47DzuBOoZGQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFE2vNPknQpi6oGKSxPh8+kd/ie7pMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvVGE4MC1TZENtTHFnWXBMRS1IejZSMy1KN3VrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW4QxMA0G
CSqGSIb3DQEBCwUAA4IBAQBeZGK0k4p5WXOT2gv5RKesuc6KliJTK+rsSOXMJGQO
099OOqhlaTfmf6Pe2XjCqCMMdorTNEgjXEq2mb/2EoEEf3I5/RIXzb85QELe7olb
O1G+U2h5qP7DXZAFp9ezrNzATFIwApK/9itP0N2n1yb6fkhvHNiu662TqTlm/+v0
WQAdI+xPZei+ezOIXhXkB8S7q2ztyJwLTSVdi3Jm9uqP12ytaudSPChzc82PQZf2
DnyRbFPEosR6paSGnAAp+Izxk/8bumKkG3QQAray04JluTHPree5LoqVtvUkXEsR
UYGcoCZEMzsvV86pW7BkSz70t/UuW2JPip1lk/rezN6o
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:13 2024 by rpki-client on console-ams.rpki-client.org