Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/dd7beb-6f78-419b-957d-37a60c335a5d/1/tauZb0K9e2sDXdF_wLbpOBF3pxs.roa
File: tauZb0K9e2sDXdF_wLbpOBF3pxs.roa (raw, json)
Hash identifier: a6e6xqLn7Y2fpA38TdEjdC+K0nCuh85vz3zNlpN/vxE=
Subject key identifier: B5:AB:99:6F:42:BD:7B:6B:03:5D:D1:7F:C0:B6:E9:38:11:77:A7:1B
Certificate issuer: /CN=7e45a9a0353a33c6a4f93608f9d25f27c85948b7
Certificate serial: 01856B77A945B113C1ECE0572E9FA8ADEFFE
Authority key identifier: 7E:45:A9:A0:35:3A:33:C6:A4:F9:36:08:F9:D2:5F:27:C8:59:48:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/dd7beb-6f78-419b-957d-37a60c335a5d/1/tauZb0K9e2sDXdF_wLbpOBF3pxs.roa
Signing time: Sun 01 Jan 2023 03:54:42 +0000
ROA not before: Sun 01 Jan 2023 03:54:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5089
IP address blocks: 91.209.142.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:30:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:77:a9:45:b1:13:c1:ec:e0:57:2e:9f:a8:ad:ef:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e45a9a0353a33c6a4f93608f9d25f27c85948b7
Validity
Not Before: Jan 1 03:54:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b5ab996f42bd7b6b035dd17fc0b6e9381177a71b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a1:4a:28:c9:5e:cd:09:4b:63:af:76:d0:0e:
0b:f7:07:d5:d2:ff:3d:0e:0b:a0:bb:76:98:0d:e4:
b7:4a:43:d0:4e:c8:70:c3:e9:22:ec:f7:a6:a9:41:
80:37:1e:c8:3e:2c:c7:9d:9e:cf:ea:11:c7:be:b5:
36:fd:b6:7a:a5:5c:9c:2e:99:9c:bc:6c:e9:de:41:
82:b2:dd:d7:64:61:ba:f8:13:5f:ad:85:18:11:ad:
72:e4:ea:89:b4:ec:d1:b0:99:87:28:df:2c:a8:cc:
d3:6f:8a:ea:7b:4b:8a:32:d8:23:d1:16:6f:09:65:
12:f5:bf:bf:61:4c:0d:52:63:d2:f2:6b:0c:ae:5d:
9b:ee:04:d0:96:13:97:de:7e:83:e5:ce:6a:ec:ae:
c2:c7:ab:f1:ee:92:03:00:2d:e1:21:87:82:e2:1e:
86:6d:31:41:3a:12:06:40:29:9b:ad:48:39:11:c3:
b1:b7:3d:85:2a:85:de:f2:82:52:a6:aa:2d:b1:67:
1b:4a:ec:ec:93:c5:4c:9a:a4:bb:f1:e8:43:c5:7c:
4b:90:09:41:74:b1:2a:27:b3:c9:77:78:27:ab:c2:
09:e2:bd:5a:8e:d5:b3:d2:27:4a:7e:9f:39:59:21:
6e:89:6b:45:0d:36:12:4c:aa:7b:5f:d5:30:fc:e8:
d1:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:AB:99:6F:42:BD:7B:6B:03:5D:D1:7F:C0:B6:E9:38:11:77:A7:1B
X509v3 Authority Key Identifier:
keyid:7E:45:A9:A0:35:3A:33:C6:A4:F9:36:08:F9:D2:5F:27:C8:59:48:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/dd7beb-6f78-419b-957d-37a60c335a5d/1/tauZb0K9e2sDXdF_wLbpOBF3pxs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/dd7beb-6f78-419b-957d-37a60c335a5d/1/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.142.0/24
Signature Algorithm: sha256WithRSAEncryption
82:9b:cb:af:9f:8a:ba:8a:62:19:0e:8f:1c:ef:10:26:c3:94:
14:45:6c:81:91:70:ed:a2:18:9e:d3:cd:7b:74:4c:ee:91:2f:
3b:7d:14:7a:63:dd:3d:58:24:29:96:57:f8:d4:33:52:01:fb:
9d:8a:4b:1b:d6:f3:b1:e5:46:a5:34:42:73:eb:bc:35:3a:6e:
90:84:61:6e:36:1f:4f:6b:98:5f:e7:4c:14:42:a4:f0:2b:89:
b5:77:0e:1d:0f:3f:05:0a:52:66:b8:52:35:1b:2f:a1:4a:6d:
84:1d:85:9d:05:77:b7:c2:9d:bb:81:43:d2:5b:d9:c3:5f:9d:
31:5b:c1:d1:57:50:44:f7:99:43:30:61:53:72:8f:d3:15:e1:
b3:f2:a8:7c:03:a1:9d:97:11:87:57:ae:f0:b5:03:fc:b0:72:
51:d6:9a:1b:fc:6f:60:5a:5f:2f:41:ba:9e:0f:ee:ba:08:f5:
49:b8:87:d2:ad:76:9d:c1:9f:ad:c0:ce:7e:63:33:1c:c1:60:
14:c7:bc:10:ce:0d:0d:63:f5:e1:53:8d:f8:8f:06:da:d9:b4:
1e:2a:6c:e6:cc:cc:ce:e2:f9:cd:5d:1a:12:57:05:d0:9d:1a:
16:71:1d:66:8e:d2:d3:1f:15:5b:09:0e:8e:9e:00:66:e2:fa:
11:10:7e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:04 2024 by rpki-client on console-ams.rpki-client.org