Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/132ba8-7676-49f6-afcc-7d0423bda74c/1/TMZMaqB0caViJ08KD3k0phCiS14.roa
File: TMZMaqB0caViJ08KD3k0phCiS14.roa (raw, json)
Hash identifier: 3wqxugr1LgZOiy0W8bJM7ymD22CFxkgdX9PQEAAAca0=
Subject key identifier: 4C:C6:4C:6A:A0:74:71:A5:62:27:4F:0A:0F:79:34:A6:10:A2:4B:5E
Certificate issuer: /CN=b4d7ed14b8d51a20baec7b660f08a80cdcf817bf
Certificate serial: 01857395EE6E2B06ACEB36F96D5ABB016573
Authority key identifier: B4:D7:ED:14:B8:D5:1A:20:BA:EC:7B:66:0F:08:A8:0C:DC:F8:17:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tNftFLjVGiC67HtmDwioDNz4F78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/132ba8-7676-49f6-afcc-7d0423bda74c/1/TMZMaqB0caViJ08KD3k0phCiS14.roa
Signing time: Mon 02 Jan 2023 17:44:43 +0000
ROA not before: Mon 02 Jan 2023 17:44:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197265
IP address blocks: 91.217.204.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:95:ee:6e:2b:06:ac:eb:36:f9:6d:5a:bb:01:65:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4d7ed14b8d51a20baec7b660f08a80cdcf817bf
Validity
Not Before: Jan 2 17:44:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4cc64c6aa07471a562274f0a0f7934a610a24b5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b3:98:46:0a:aa:ff:6a:1d:76:b6:81:49:bd:
41:d5:a0:cf:ed:2c:c8:2c:94:59:a4:f9:b3:bc:ef:
6f:fb:73:35:a8:4f:d9:ae:f4:cb:89:f7:06:5d:36:
3f:79:d3:78:d8:cc:dc:a5:8c:d1:a5:b9:f4:68:06:
5f:be:d2:e1:86:81:95:c0:06:36:5b:64:25:ad:c4:
36:2a:61:1a:ae:83:74:c9:b1:51:6e:21:ed:5b:32:
af:7e:40:70:3c:b2:1c:e0:1c:36:32:5a:70:76:8c:
2a:3e:68:54:02:c5:2c:34:8f:91:cf:3c:5c:eb:f7:
17:31:fd:93:68:98:8e:ec:21:4a:01:f2:a5:c2:b1:
49:e9:1e:60:99:9e:2b:74:7e:c2:31:51:5d:58:49:
d7:24:8b:19:93:b5:19:02:1b:4e:36:12:aa:d3:e8:
81:7d:a6:c7:78:51:ed:02:0c:90:34:1b:d7:ee:db:
85:38:40:55:f9:e4:82:b1:9a:95:bc:27:84:55:21:
ef:0c:50:6f:c6:0f:7b:e8:db:e9:1a:eb:56:a8:c4:
4b:e0:32:18:83:f0:0d:5c:17:4f:ca:5c:ba:2b:37:
09:43:15:58:60:d8:95:0f:8b:18:36:06:12:40:12:
f9:10:51:a7:e6:73:bc:b6:3d:ae:55:0a:5e:0f:6f:
a2:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:C6:4C:6A:A0:74:71:A5:62:27:4F:0A:0F:79:34:A6:10:A2:4B:5E
X509v3 Authority Key Identifier:
keyid:B4:D7:ED:14:B8:D5:1A:20:BA:EC:7B:66:0F:08:A8:0C:DC:F8:17:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tNftFLjVGiC67HtmDwioDNz4F78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/132ba8-7676-49f6-afcc-7d0423bda74c/1/TMZMaqB0caViJ08KD3k0phCiS14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/132ba8-7676-49f6-afcc-7d0423bda74c/1/tNftFLjVGiC67HtmDwioDNz4F78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.204.0/24
Signature Algorithm: sha256WithRSAEncryption
88:94:e3:9f:43:3e:e5:6d:bf:55:b3:4c:f3:20:c5:53:10:15:
d9:20:66:a3:61:11:57:d8:bf:3e:fd:6e:1d:f0:75:15:82:f0:
5d:45:5c:d8:4e:6f:e7:eb:5a:58:68:c4:6c:94:da:1e:55:c2:
0f:7e:a2:35:bd:f4:ad:41:32:19:25:86:66:79:31:6d:fa:b6:
19:1a:5c:9d:47:98:fb:95:94:15:80:49:2e:c1:5a:d4:23:f7:
86:98:dd:af:bf:5f:67:4c:81:38:3c:23:91:98:94:c8:70:4d:
80:cd:70:ce:51:35:0d:17:2f:dc:e5:de:48:8d:c9:6d:ca:30:
ee:86:5e:a9:2a:b1:8d:21:18:ba:97:66:25:3f:ca:79:a7:b8:
c7:39:2f:16:c5:b2:f0:2d:5b:2a:27:46:cd:e3:c8:a4:91:b7:
f2:2b:ed:52:56:dc:b1:bf:b9:f8:3a:09:c6:87:be:e8:eb:44:
7d:c6:92:cd:0b:21:79:39:d0:66:5c:c3:ca:7d:0b:38:ea:b1:
7a:c3:b0:ff:dd:41:a3:98:1d:0f:bc:bb:91:3f:d6:4e:4b:84:
2d:a9:76:3b:ff:f9:46:1e:70:1c:18:8e:e6:34:cc:3f:7f:be:
7e:e6:c6:a1:ed:79:41:0c:ad:0e:64:d3:3c:3d:0e:86:a3:ba:
75:3f:59:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 02:54:03 2024 by rpki-client on console-ams.rpki-client.org