Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/TvKMrPYa87QZC-b5GQyZHPX_oxM.roa
File: TvKMrPYa87QZC-b5GQyZHPX_oxM.roa (raw, json)
Hash identifier: WgIqdtwQfojswIDBTMCv4gUvL2D6wopYyMP9M2EgPCY=
Subject key identifier: 4E:F2:8C:AC:F6:1A:F3:B4:19:0B:E6:F9:19:0C:99:1C:F5:FF:A3:13
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0187E5085B99DFFC594DF1BEDAB5A2FB29F0
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/TvKMrPYa87QZC-b5GQyZHPX_oxM.roa
Signing time: Thu 04 May 2023 04:32:22 +0000
ROA not before: Thu 04 May 2023 04:32:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208485
IP address blocks: 91.132.49.0/24 maxlen: 24
91.132.48.0/24 maxlen: 24
91.132.51.0/24 maxlen: 24
91.132.50.0/24 maxlen: 24
77.81.65.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 Jun 2023 10:26:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e5:08:5b:99:df:fc:59:4d:f1:be:da:b5:a2:fb:29:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: May 4 04:32:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4ef28cacf61af3b4190be6f9190c991cf5ffa313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:85:35:67:5f:16:0d:fd:29:ac:2e:22:d0:82:
c7:14:95:26:bd:cb:c7:04:a0:8b:56:93:93:98:0c:
8d:3a:38:6d:8d:57:dc:10:df:c7:9f:80:25:ff:56:
5c:5f:99:e0:21:d9:c1:53:1c:e4:60:d4:35:7c:5b:
88:8f:1c:70:20:02:f1:de:81:f0:44:e6:06:19:aa:
ac:12:d0:28:a2:0e:d5:27:6c:0e:e1:70:05:28:d4:
6f:d0:a7:5b:9f:93:16:a4:3e:43:61:46:bb:bb:fb:
67:33:e3:31:f7:7c:42:f4:c8:62:2a:68:30:92:6a:
c2:f9:9d:19:f7:63:ee:22:1d:83:d0:1e:bb:9a:14:
06:cc:de:04:67:21:08:e9:fc:c5:9a:55:34:e1:d7:
c1:da:25:b4:c0:ea:86:b0:1a:96:49:41:89:1a:0e:
4a:02:fa:81:79:9e:4c:7e:cf:33:99:96:cc:be:54:
1a:fc:07:51:0e:39:6b:f3:ba:8e:59:3b:58:d0:9c:
13:67:ac:4f:1a:5c:15:2a:74:5f:f8:f7:a7:f2:d6:
82:3d:59:fd:a8:57:6b:ba:20:1d:41:26:3a:b2:ab:
ff:de:52:e2:97:9f:d0:52:6f:46:d5:cf:a2:02:06:
fa:80:36:7a:e2:ae:64:26:95:d8:12:58:e1:7c:8e:
49:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:F2:8C:AC:F6:1A:F3:B4:19:0B:E6:F9:19:0C:99:1C:F5:FF:A3:13
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/TvKMrPYa87QZC-b5GQyZHPX_oxM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.65.0/24
91.132.48.0/22
Signature Algorithm: sha256WithRSAEncryption
30:20:8f:35:d9:02:36:0b:6f:bf:9c:95:51:8a:98:15:10:29:
7a:b9:4f:86:5d:74:41:97:18:fb:82:c8:14:6b:08:38:18:62:
f8:9a:c7:e5:cd:22:27:03:d1:4c:8e:0e:64:9e:11:1d:5c:1b:
9b:93:5e:61:c8:a6:09:64:4a:6b:1a:eb:e8:06:9f:ef:56:71:
85:40:99:85:7a:d9:1f:9b:71:07:c5:6c:4c:ad:09:f9:df:4c:
13:5e:2a:d6:52:66:b7:29:c7:df:62:36:0e:9d:39:78:8e:69:
6c:a6:10:1e:3a:50:c3:7b:36:15:45:92:f2:0b:fc:a7:dc:b8:
53:58:61:e1:ec:7d:a4:28:b7:6f:8a:18:03:22:dc:4a:5c:34:
21:82:eb:d7:90:ff:4a:73:a0:aa:00:69:33:7a:59:f1:4e:a9:
3c:1d:f2:e2:f6:e7:9b:06:b9:ea:16:10:3c:ff:12:dd:d0:ff:
78:e1:1f:65:87:76:52:85:1d:30:fc:fc:8d:c1:e0:24:0f:9f:
66:f3:a1:80:dc:9e:e9:07:f0:91:ed:5d:d6:f5:ed:af:98:a8:
4f:90:dd:70:25:a6:a9:af:6f:6f:39:5c:a1:8d:27:db:6c:4a:
b3:33:e4:c7:96:9e:94:5b:d3:f3:76:af:69:15:55:b9:e5:93:
31:42:5c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:13 2024 by rpki-client on console-ams.rpki-client.org