Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/TVN3EDJ1i949F2P0pd_VznRCtbg.roa
File: TVN3EDJ1i949F2P0pd_VznRCtbg.roa (raw, json)
Hash identifier: 3/Xcopmh+MQ41Q4H2y/KNw//GjLe7T4HcMoxJDuzqIA=
Subject key identifier: 4D:53:77:10:32:75:8B:DE:3D:17:63:F4:A5:DF:D5:CE:74:42:B5:B8
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 0190C6157939FC1744D1AEFACD8FD9A253B1
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/TVN3EDJ1i949F2P0pd_VznRCtbg.roa
Signing time: Thu 18 Jul 2024 13:43:34 +0000
ROA not before: Thu 18 Jul 2024 13:43:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 11426
IP address blocks: 89.46.180.0/22 maxlen: 24
130.255.64.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 15 Aug 2024 11:11:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:c6:15:79:39:fc:17:44:d1:ae:fa:cd:8f:d9:a2:53:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Jul 18 13:43:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4d53771032758bde3d1763f4a5dfd5ce7442b5b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f3:23:af:7a:ed:d8:1d:9a:83:40:ac:9f:0d:
7a:c2:05:93:c7:50:d6:99:d7:da:41:93:0d:c8:8c:
bf:03:b4:24:e5:11:de:4a:bd:41:0b:79:91:a9:64:
bc:cc:72:66:cf:e7:23:27:24:92:76:7e:48:65:a6:
41:68:8f:61:d1:0e:90:e8:1b:fd:8e:65:fe:58:73:
67:8a:2c:5b:d3:85:1b:1d:bd:89:60:47:4f:28:bf:
46:57:6f:c7:1f:f7:0d:84:fa:ce:a9:1c:01:89:fa:
6d:6b:83:0e:c7:a4:6e:6d:e0:0f:32:58:2f:96:6b:
e6:2b:75:43:d5:93:a3:38:1d:1a:98:00:4b:f4:c5:
80:78:ba:b3:d1:ef:ff:7f:dd:3b:25:b4:23:8c:cf:
fe:45:5f:04:82:5e:86:29:03:1f:eb:ce:2b:f3:0e:
78:d9:d7:5d:3c:2c:4e:46:14:ff:06:87:b6:08:67:
56:bd:df:53:df:d0:21:81:c6:54:63:52:14:ab:9b:
85:18:c2:43:a2:38:bd:6e:fc:80:09:61:57:ba:22:
a5:d6:bb:04:42:80:19:43:14:32:53:05:20:e6:05:
db:d6:1c:7b:ce:49:36:91:b7:97:33:73:18:15:ee:
47:84:40:87:b1:fa:c5:f8:bb:b0:eb:e1:92:86:ef:
d5:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:53:77:10:32:75:8B:DE:3D:17:63:F4:A5:DF:D5:CE:74:42:B5:B8
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/TVN3EDJ1i949F2P0pd_VznRCtbg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.46.180.0/22
130.255.64.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:d3:63:7c:90:67:9d:6e:35:54:64:72:09:0a:99:3f:37:f7:
60:7f:c1:32:7d:6a:e3:8e:3c:31:94:1a:44:cb:54:45:60:62:
73:dc:6d:0f:30:53:f4:c7:d3:5b:99:e3:66:e5:48:83:63:c6:
81:c8:49:41:bb:6d:9a:fa:39:32:ed:98:ee:80:db:85:5c:23:
6f:50:26:c0:b8:dc:1b:7c:32:5a:18:1c:ea:a5:59:1f:4a:4a:
7b:b8:48:75:49:79:ca:40:47:9e:7f:6f:c8:a1:d7:88:05:84:
f7:b0:2b:b0:44:d5:b9:e5:e5:f1:98:ae:8c:a6:57:07:11:f3:
b0:70:6e:6f:7d:73:e6:7a:60:d6:d2:cc:80:e0:64:4d:bc:57:
2b:06:06:cf:42:36:9b:6f:e7:fc:87:b4:e5:fb:c7:a5:c3:5c:
26:4c:ba:ca:39:20:d0:1f:41:43:cc:8e:fa:44:45:f3:69:ec:
a6:49:5c:14:24:ef:49:d2:70:d2:9b:d0:76:ec:ac:39:3e:1e:
98:c1:92:31:97:5b:89:6c:65:88:1c:a2:79:b1:83:5a:10:07:
81:91:2e:1c:42:c7:62:f6:ca:78:a8:ff:3c:86:ea:6c:02:24:
e5:d4:ce:0e:4c:08:7b:bd:0a:84:54:f0:fe:9b:6f:4d:84:f7:
ba:4f:f7:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 15 16:42:32 2024 by rpki-client on console-fra.rpki-client.org