Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/tcYN1TZFl3NZClDDABEUHqAzcs8.roa
File: tcYN1TZFl3NZClDDABEUHqAzcs8.roa (raw, json)
Hash identifier: vT6yzxpvxmptg9PhvPTezLs5m0d536a+NLi99jRwa8Q=
Subject key identifier: B5:C6:0D:D5:36:45:97:73:59:0A:50:C3:00:11:14:1E:A0:33:72:CF
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 018571B9F3058FF9067F03228FB792CBAC76
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/tcYN1TZFl3NZClDDABEUHqAzcs8.roa
Signing time: Mon 02 Jan 2023 09:04:49 +0000
ROA not before: Mon 02 Jan 2023 09:04:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209737
IP address blocks: 82.163.172.0/22 maxlen: 24
31.186.176.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 11 Jan 2023 07:52:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:b9:f3:05:8f:f9:06:7f:03:22:8f:b7:92:cb:ac:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Jan 2 09:04:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b5c60dd536459773590a50c30011141ea03372cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ae:8d:18:4b:ea:b4:94:d1:f6:db:63:f9:93:
1a:ed:3b:e6:8e:51:2a:c4:29:73:61:d3:69:69:50:
45:cc:8c:c8:c6:9b:ce:26:79:44:54:d4:97:6d:be:
c6:06:ed:76:88:2d:da:e3:42:de:93:45:84:86:4f:
88:8b:0e:14:e6:37:4d:7e:ac:f2:09:29:ef:0c:f4:
f3:79:90:3d:e4:20:fa:9a:30:b4:a5:49:8a:c9:84:
55:d4:15:53:cb:55:c2:05:27:dc:c6:82:c4:78:cd:
0b:a4:d1:9a:1b:ae:96:46:36:6e:a2:ce:a7:72:3b:
08:c1:fa:db:d2:17:b5:db:82:f2:ed:20:d6:9d:12:
a9:dd:ea:9f:11:3d:59:c4:71:f8:d9:e7:ca:94:f8:
0f:dd:61:2d:8c:00:0e:c0:bd:94:8f:57:02:fe:44:
75:eb:97:29:3c:fd:56:a7:5e:dc:9c:74:4b:49:3b:
c8:43:6b:be:e6:7d:de:bf:4f:af:e6:5e:bb:e2:19:
3e:6c:fe:ac:3f:79:73:e4:66:89:38:37:ba:11:49:
16:ab:06:d9:41:25:60:0f:8a:8f:38:99:a1:15:6b:
ae:64:48:82:cb:26:81:b6:1c:35:d9:9b:25:be:2e:
f6:76:41:16:2f:1b:f1:8c:54:68:b6:ed:84:f0:1f:
c2:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:C6:0D:D5:36:45:97:73:59:0A:50:C3:00:11:14:1E:A0:33:72:CF
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/tcYN1TZFl3NZClDDABEUHqAzcs8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.186.176.0/22
82.163.172.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:7a:6d:fa:22:a0:fd:28:23:b3:4c:04:05:55:70:e2:35:c4:
8e:51:4a:48:2b:58:31:59:14:22:ad:31:05:5f:60:5d:eb:d8:
27:d0:aa:be:b2:27:9b:01:76:42:ec:16:bb:5c:51:d1:3e:79:
d2:75:6d:04:d0:68:ac:0d:8d:31:73:fb:58:ca:c2:09:2f:a9:
96:21:db:57:24:8d:e7:c7:bf:aa:db:d0:92:ca:a5:be:85:87:
d5:1b:b6:64:f9:e4:f0:7c:bc:71:85:42:0b:90:a4:34:21:68:
ad:4d:93:22:31:2a:78:f6:f1:ef:2d:46:67:58:32:b6:45:75:
2f:84:ec:b5:d6:9a:cf:ff:88:e6:40:8d:78:28:a8:3d:a8:e1:
c5:a2:53:0a:1c:ba:b3:c5:bd:b9:e7:da:25:63:db:07:fa:dc:
b0:70:ce:01:a4:7f:26:94:70:33:5a:07:b8:22:01:99:21:aa:
09:ee:7e:d3:06:94:84:40:8e:cf:d1:7b:3d:cf:29:55:26:15:
16:aa:42:66:c4:c8:85:2f:49:c4:66:08:bd:7c:ee:fe:d7:b4:
69:f4:85:5d:f8:06:60:fa:5a:32:93:59:8e:cd:81:19:58:83:
1e:17:d4:68:da:c6:e6:08:5d:f9:70:73:e0:51:97:70:0f:44:
0a:7c:0d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:47 2024 by rpki-client on console-ams.rpki-client.org