Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/TRS9O6UC09qnm3xOo4NZv-2hgRc.roa
File: TRS9O6UC09qnm3xOo4NZv-2hgRc.roa (raw, json)
Hash identifier: SZoEU4ZJF4UdMkFLY7QszB4uETPnjmz0VG6zqtpYXqQ=
Subject key identifier: 4D:14:BD:3B:A5:02:D3:DA:A7:9B:7C:4E:A3:83:59:BF:ED:A1:81:17
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 018570F0B302C51E99D7C8DB06233CC9CD59
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/TRS9O6UC09qnm3xOo4NZv-2hgRc.roa
Signing time: Mon 02 Jan 2023 05:25:00 +0000
ROA not before: Mon 02 Jan 2023 05:25:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197142
IP address blocks: 82.177.195.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:f0:b3:02:c5:1e:99:d7:c8:db:06:23:3c:c9:cd:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 2 05:25:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4d14bd3ba502d3daa79b7c4ea38359bfeda18117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:fb:7c:8f:97:30:5e:8e:1f:25:8e:f5:70:ef:
f7:94:e8:76:5d:d5:dc:0a:56:d7:3d:40:43:98:e6:
fb:d1:e1:e5:9e:8d:f4:c6:28:cc:f1:2d:63:d3:42:
01:66:65:37:1b:fd:fa:d1:10:f3:00:d4:a3:3c:50:
67:be:72:44:f6:01:e6:48:36:64:59:71:11:d5:74:
9b:1c:79:e3:75:ce:69:a8:cb:e4:21:f1:e5:b6:c6:
2b:a3:64:32:55:f4:82:3c:5a:c7:2a:99:58:e4:dc:
e6:bb:33:6f:9e:32:e1:7e:d6:e7:cf:40:87:9d:bf:
d2:b3:e6:2c:68:98:df:98:af:ec:f8:d6:be:63:96:
1b:40:59:dc:20:21:59:60:b4:6c:55:42:12:ce:21:
b1:a5:91:09:f4:6d:12:e2:27:bc:c2:7f:a4:db:35:
97:78:20:b2:c1:65:d7:9c:ca:0b:1f:6f:fd:83:95:
08:f6:1c:65:5c:eb:87:83:c5:70:e3:5c:7c:5a:15:
ba:0c:35:f2:c8:53:ac:e0:26:b0:2b:e1:76:06:24:
b2:5a:e1:6e:8f:56:e8:77:63:b8:34:bc:f9:36:f5:
46:13:d9:8b:2b:e6:64:3d:d8:3d:c5:31:d4:90:e6:
00:5c:d5:1e:e0:60:b0:3a:7b:78:81:82:4d:01:b2:
77:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:14:BD:3B:A5:02:D3:DA:A7:9B:7C:4E:A3:83:59:BF:ED:A1:81:17
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/TRS9O6UC09qnm3xOo4NZv-2hgRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.177.195.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:61:d3:d6:2b:73:36:b3:74:d8:79:82:6e:62:c1:45:55:c9:
23:e5:48:44:ac:1d:34:48:d9:9d:e9:1f:5c:96:13:c9:9d:2b:
15:09:0c:ac:6f:c6:8a:14:ec:ee:05:14:33:e6:da:6f:69:4e:
f4:2f:a3:78:01:49:c0:a1:d5:6d:30:e3:c0:2f:15:4a:26:b4:
b8:91:e6:2d:fe:8a:04:82:e4:96:03:97:be:4e:aa:5f:7d:63:
2c:f3:ff:d7:24:28:d0:a1:fa:6e:10:d7:46:9f:16:55:e1:24:
d5:2c:14:aa:9a:fd:35:9c:62:1b:b3:3d:37:31:9c:6d:b9:49:
8c:33:58:03:8b:dd:30:48:9e:bd:49:51:9b:4d:34:8b:18:e2:
6a:23:fb:8f:ac:ab:e6:b2:2b:e9:7c:bf:6b:e4:f4:45:cc:2b:
68:89:b5:2b:d3:e9:ed:fa:b5:45:61:7a:49:7a:da:93:7c:cc:
28:a9:fb:dd:89:39:47:3e:03:ff:88:a8:c2:3f:70:6b:04:6e:
8e:f1:02:d1:28:84:27:42:d3:74:69:5e:1e:b2:6c:9e:08:bd:
f9:78:17:13:f0:c7:05:ad:87:5f:fa:61:45:63:c5:14:45:aa:
a4:e8:bd:eb:ca:17:16:ca:7f:c5:81:66:b0:d5:99:e8:bb:4a:
f2:e5:26:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:56:37 2024 by rpki-client on console-fra.rpki-client.org