Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/150b88-88ee-4234-a5e8-aa7730b2b4f3/1/TRWhOEPXmjRQLE_mrcYlUFkLkks.roa
File: TRWhOEPXmjRQLE_mrcYlUFkLkks.roa (raw, json)
Hash identifier: 2wchLg4sDi+Xqp48qMuq36uuSwdCXV0kYqNi5iJaJtU=
Subject key identifier: 4D:15:A1:38:43:D7:9A:34:50:2C:4F:E6:AD:C6:25:50:59:0B:92:4B
Certificate issuer: /CN=63c657190fed73f6bbe765f4b68201fd5555e3c8
Certificate serial: 01856B37C5CBDAA112778869D98A07375A52
Authority key identifier: 63:C6:57:19:0F:ED:73:F6:BB:E7:65:F4:B6:82:01:FD:55:55:E3:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y8ZXGQ_tc_a752X0toIB_VVV48g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/150b88-88ee-4234-a5e8-aa7730b2b4f3/1/TRWhOEPXmjRQLE_mrcYlUFkLkks.roa
Signing time: Sun 01 Jan 2023 02:44:55 +0000
ROA not before: Sun 01 Jan 2023 02:44:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198356
IP address blocks: 91.234.24.0/24 maxlen: 24
91.234.24.0/22 maxlen: 22
91.234.26.0/24 maxlen: 24
91.234.27.0/24 maxlen: 24
91.234.25.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Jan 2023 10:40:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:37:c5:cb:da:a1:12:77:88:69:d9:8a:07:37:5a:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63c657190fed73f6bbe765f4b68201fd5555e3c8
Validity
Not Before: Jan 1 02:44:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4d15a13843d79a34502c4fe6adc62550590b924b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:89:ac:35:9c:ba:6d:53:d7:ad:83:d9:2a:23:
5e:23:92:63:dc:77:8a:aa:d9:df:c8:30:2e:7d:6b:
ac:2b:f7:da:15:09:3b:f7:dc:7c:a8:9d:a0:c3:33:
53:82:cd:75:ed:95:05:82:f8:53:aa:ee:64:ba:5d:
d7:53:d9:14:e9:b0:82:f3:66:ba:e6:5b:f4:b4:22:
12:0a:8e:a7:ce:8a:b1:a2:7a:b4:4e:05:b7:7b:cb:
80:a2:fc:02:ba:12:86:c6:be:83:2f:ca:df:9a:35:
3c:2d:b7:f1:2e:f6:15:c3:d9:5f:6d:5f:6b:3b:51:
34:27:57:c6:21:94:d6:8f:66:c7:da:cc:7a:ed:6f:
33:4f:73:55:7e:b6:25:60:ae:7a:73:e7:b2:57:3c:
dd:6c:3a:60:e2:66:0a:ef:47:cc:59:fc:37:60:a8:
b3:39:04:23:2a:16:03:ec:5e:53:c1:c5:8b:a6:68:
9d:c3:43:85:32:d8:a8:a9:c1:53:2c:bd:46:76:71:
a2:13:fe:10:c6:29:83:1d:d9:86:b7:2b:8f:10:e4:
0e:1f:02:e8:12:37:d5:a2:06:e8:4f:1a:75:71:16:
57:f0:03:06:f5:04:0e:20:3b:7c:12:55:1a:1c:bc:
18:b3:fc:fb:e7:22:21:4e:9a:9b:29:e5:ae:2b:56:
73:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:15:A1:38:43:D7:9A:34:50:2C:4F:E6:AD:C6:25:50:59:0B:92:4B
X509v3 Authority Key Identifier:
keyid:63:C6:57:19:0F:ED:73:F6:BB:E7:65:F4:B6:82:01:FD:55:55:E3:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y8ZXGQ_tc_a752X0toIB_VVV48g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/150b88-88ee-4234-a5e8-aa7730b2b4f3/1/TRWhOEPXmjRQLE_mrcYlUFkLkks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/150b88-88ee-4234-a5e8-aa7730b2b4f3/1/Y8ZXGQ_tc_a752X0toIB_VVV48g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.234.24.0/22
Signature Algorithm: sha256WithRSAEncryption
35:72:c9:70:be:4d:70:38:93:24:f3:50:57:32:73:b6:a9:06:
3d:3d:fe:29:de:fc:b3:b6:2f:b4:1f:f3:38:56:04:27:40:4b:
e9:4f:ef:08:81:50:fd:ac:74:a1:ec:c1:94:ce:a9:2c:79:4b:
08:3c:9a:77:8e:53:be:1d:28:85:d8:d2:f6:34:3c:b5:94:20:
22:e7:29:f6:1a:ef:e3:a0:a0:21:7c:f5:03:1a:6d:42:ee:50:
ba:4b:c4:8d:7f:b8:a6:73:2e:ca:f7:80:62:5d:82:35:36:7f:
f5:c2:08:87:f4:31:7a:21:d0:ce:44:d5:21:98:88:17:a2:8b:
f6:68:d1:57:1a:3a:0b:ee:d0:d9:d7:48:28:df:62:a7:e3:e1:
84:74:2f:5d:64:18:54:dd:2f:39:de:b4:15:01:69:da:a4:57:
fc:f1:47:85:7d:2c:7b:dd:da:9e:22:86:69:b3:01:18:6e:65:
f7:57:47:84:69:54:57:f4:3d:31:08:1c:12:da:54:4d:6e:03:
ab:62:fb:20:b1:44:5c:88:30:29:8d:6d:34:64:83:c9:74:b5:
3c:93:6e:b9:4d:24:b1:8b:25:32:10:6c:e8:7c:e6:32:92:6c:
a9:bf:be:b3:fa:f8:8d:ab:ea:3c:32:b6:19:de:96:14:78:46:
ea:5d:38:8c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVrN8XL2qESd4hp2YoHN1pSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzYzY1NzE5MGZlZDczZjZiYmU3NjVmNGI2ODIwMWZkNTU1
NWUzYzgwHhcNMjMwMTAxMDI0NDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZDE1YTEzODQzZDc5YTM0NTAyYzRmZTZhZGM2MjU1MDU5MGI5MjRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4msNZy6bVPXrYPZKiNeI5Jj3HeK
qtnfyDAufWusK/faFQk799x8qJ2gwzNTgs117ZUFgvhTqu5kul3XU9kU6bCC82a6
5lv0tCISCo6nzoqxonq0TgW3e8uAovwCuhKGxr6DL8rfmjU8LbfxLvYVw9lfbV9r
O1E0J1fGIZTWj2bH2sx67W8zT3NVfrYlYK56c+eyVzzdbDpg4mYK70fMWfw3YKiz
OQQjKhYD7F5TwcWLpmidw0OFMtioqcFTLL1GdnGiE/4QximDHdmGtyuPEOQOHwLo
EjfVogboTxp1cRZX8AMG9QQOIDt8ElUaHLwYs/z75yIhTpqbKeWuK1ZzYQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFE0VoThD15o0UCxP5q3GJVBZC5JLMB8GA1UdIwQY
MBaAFGPGVxkP7XP2u+dl9LaCAf1VVePIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWThaWEdRX3RjX2E3NTJYMHRvSUJfVlZWNDhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS8xNTBiODgtODhlZS00MjM0LWE1ZTgt
YWE3NzMwYjJiNGYzLzEvVFJXaE9FUFhtalJRTEVfbXJjWWxVRmtMa2tzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS8xNTBiODgtODhlZS00MjM0LWE1ZTgtYWE3NzMwYjJiNGYz
LzEvWThaWEdRX3RjX2E3NTJYMHRvSUJfVlZWNDhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW+oYMA0G
CSqGSIb3DQEBCwUAA4IBAQA1cslwvk1wOJMk81BXMnO2qQY9Pf4p3vyzti+0H/M4
VgQnQEvpT+8IgVD9rHSh7MGUzqkseUsIPJp3jlO+HSiF2NL2NDy1lCAi5yn2Gu/j
oKAhfPUDGm1C7lC6S8SNf7imcy7K94BiXYI1Nn/1wgiH9DF6IdDORNUhmIgXoov2
aNFXGjoL7tDZ10go32Kn4+GEdC9dZBhU3S853rQVAWnapFf88UeFfSx73dqeIoZp
swEYbmX3V0eEaVRX9D0xCBwS2lRNbgOrYvsgsURciDApjW00ZIPJdLU8k265TSSx
iyUyEGzofOYykmypv76z+viNq+o8MrYZ3pYUeEbqXTiM
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:45 2024 by rpki-client on console-ams.rpki-client.org