Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/TPx_SYPMlQeuM9e9hVIoLiulQGg.roa
File: TPx_SYPMlQeuM9e9hVIoLiulQGg.roa (raw, json)
Hash identifier: E2mvbVL5rN8jVkpS3vgrofJ/YHQ2qZ23a4sgQVc6FF8=
Subject key identifier: 4C:FC:7F:49:83:CC:95:07:AE:33:D7:BD:85:52:28:2E:2B:A5:40:68
Certificate issuer: /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Certificate serial: 01856D9D3A4359124DC106819206EF1AEAF8
Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/TPx_SYPMlQeuM9e9hVIoLiulQGg.roa
Signing time: Sun 01 Jan 2023 13:54:58 +0000
ROA not before: Sun 01 Jan 2023 13:54:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 133861
IP address blocks: 91.208.240.0/24 maxlen: 24
91.208.236.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:9d:3a:43:59:12:4d:c1:06:81:92:06:ef:1a:ea:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Validity
Not Before: Jan 1 13:54:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4cfc7f4983cc9507ae33d7bd8552282e2ba54068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:33:c7:ff:d3:c2:07:00:cd:6a:1f:8c:a0:ad:
68:c2:6d:98:72:f3:fd:ca:2c:04:17:1d:7b:71:a0:
c1:89:37:96:cd:f0:f3:ad:f8:e0:ad:c0:72:0d:ec:
5d:57:e1:18:26:89:68:db:0d:21:17:dd:95:6b:65:
81:bc:bf:68:7e:14:d9:ff:09:13:21:f3:0f:51:3a:
52:16:cc:5d:02:9c:cc:a0:c8:8c:83:17:22:bf:53:
ae:fe:c5:8c:88:4f:1a:2f:94:d6:46:ad:c0:17:99:
9c:f4:a1:56:81:d0:00:ca:b2:28:4e:72:f3:54:cb:
1c:5a:e9:b3:6d:ac:36:ca:48:e8:10:cd:6b:4e:4f:
81:15:10:19:84:d6:ca:98:00:02:22:2c:10:10:0f:
65:3e:89:c7:16:7f:5d:82:53:83:4b:96:7c:bf:ca:
c9:d5:26:6c:ad:2c:3f:14:79:f1:7c:0d:b5:11:45:
bd:b0:b6:60:ca:97:fb:d2:d9:81:9f:8b:f3:77:79:
2f:92:bf:63:af:99:fe:73:15:e5:90:a2:5d:5e:ec:
e2:2d:54:c5:46:1d:0a:b3:e5:e5:58:03:21:02:be:
84:d5:22:d7:20:30:98:9b:b3:7e:88:1c:f8:70:65:
85:f7:43:2d:ff:6c:77:ad:38:c2:34:2c:3e:6b:57:
26:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:FC:7F:49:83:CC:95:07:AE:33:D7:BD:85:52:28:2E:2B:A5:40:68
X509v3 Authority Key Identifier:
keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/TPx_SYPMlQeuM9e9hVIoLiulQGg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.236.0/24
91.208.240.0/24
Signature Algorithm: sha256WithRSAEncryption
48:0c:e3:1b:a5:62:fc:61:12:d8:9c:60:93:60:6f:f1:70:1b:
80:b0:63:a1:47:6f:d0:8d:a4:a9:d5:cb:09:0b:87:f0:1c:e5:
74:60:8f:6a:5c:79:0e:13:48:49:ff:eb:5d:7e:64:ba:9b:2c:
30:55:b0:6e:30:f5:94:0a:9f:9e:44:8e:1c:6c:92:eb:1b:7e:
e7:d2:b4:e6:e1:a7:83:5e:18:23:6c:5f:97:80:5c:1b:60:bb:
ef:1e:d8:75:e3:41:af:c9:01:d5:7d:95:3f:ef:ba:e7:49:26:
aa:32:05:e7:14:67:df:b0:8d:e9:8a:63:99:85:c0:ef:36:f4:
89:21:6e:e2:cf:95:4c:2b:b1:bf:71:7d:cf:79:e3:15:fb:0f:
b3:21:24:27:14:28:7b:2d:fd:95:38:9c:f2:a0:89:f3:68:d9:
b3:99:6f:7a:88:b3:68:c8:6d:0f:54:68:52:59:63:8c:a4:59:
0e:fa:8a:dc:0b:7a:e3:33:93:f5:e1:0e:fc:4f:44:88:c8:25:
20:b1:c3:11:68:58:ca:1e:89:ca:a3:e8:d9:f0:96:af:bd:3c:
09:38:6e:6f:da:fe:b5:df:f5:cf:83:5a:cd:98:d4:1c:e6:74:
34:72:d7:ec:27:73:28:be:8b:24:8d:8c:d9:0d:63:02:b6:b2:
d7:f5:b5:5a
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVtnTpDWRJNwQaBkgbvGur4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmNDczODM4OWNiM2I5OThlYzRmYTZkNDI3MmY4ZGQ3OTlm
YmM0YTkwHhcNMjMwMTAxMTM1NDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Y2ZjN2Y0OTgzY2M5NTA3YWUzM2Q3YmQ4NTUyMjgyZTJiYTU0MDY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTPH/9PCBwDNah+MoK1owm2YcvP9
yiwEFx17caDBiTeWzfDzrfjgrcByDexdV+EYJolo2w0hF92Va2WBvL9ofhTZ/wkT
IfMPUTpSFsxdApzMoMiMgxciv1Ou/sWMiE8aL5TWRq3AF5mc9KFWgdAAyrIoTnLz
VMscWumzbaw2ykjoEM1rTk+BFRAZhNbKmAACIiwQEA9lPonHFn9dglODS5Z8v8rJ
1SZsrSw/FHnxfA21EUW9sLZgypf70tmBn4vzd3kvkr9jr5n+cxXlkKJdXuziLVTF
Rh0Ks+XlWAMhAr6E1SLXIDCYm7N+iBz4cGWF90Mt/2x3rTjCNCw+a1cm8wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFEz8f0mDzJUHrjPXvYVSKC4rpUBoMB8GA1UdIwQY
MBaAFB9HODics7mY7E+m1CcvjdeZ+8SpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDBjNE9KeXp1WmpzVDZiVUp5LU4xNW43eEtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS81MTc2OTQtYzhhMS00NThiLTljZjIt
NmM3ZTU2ODU4OTBjLzEvVFB4X1NZUE1sUWV1TTllOWhWSW9MaXVsUUdnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS81MTc2OTQtYzhhMS00NThiLTljZjItNmM3ZTU2ODU4OTBj
LzEvSDBjNE9KeXp1WmpzVDZiVUp5LU4xNW43eEtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW9DsAwQA
W9DwMA0GCSqGSIb3DQEBCwUAA4IBAQBIDOMbpWL8YRLYnGCTYG/xcBuAsGOhR2/Q
jaSp1csJC4fwHOV0YI9qXHkOE0hJ/+tdfmS6mywwVbBuMPWUCp+eRI4cbJLrG37n
0rTm4aeDXhgjbF+XgFwbYLvvHth140GvyQHVfZU/77rnSSaqMgXnFGffsI3pimOZ
hcDvNvSJIW7iz5VMK7G/cX3PeeMV+w+zISQnFCh7Lf2VOJzyoInzaNmzmW96iLNo
yG0PVGhSWWOMpFkO+orcC3rjM5P14Q78T0SIyCUgscMRaFjKHonKo+jZ8JavvTwJ
OG5v2v613/XPg1rNmNQc5nQ0ctfsJ3MovoskjYzZDWMCtrLX9bVa
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:01 2023 by rpki-client on console-fra.rpki-client.org