Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/b8aeef-6889-4614-b7fc-5c75c3f421f5/1/tqwwh_TwTmnlMI6Pf1d48n1rfPU.roa
File: tqwwh_TwTmnlMI6Pf1d48n1rfPU.roa (raw, json)
Hash identifier: 7TH1jRPanx1uP7oOrCxfHPqMAf+6pn0mSN/G3v6sOtM=
Subject key identifier: B6:AC:30:87:F4:F0:4E:69:E5:30:8E:8F:7F:57:78:F2:7D:6B:7C:F5
Certificate issuer: /CN=c7554fd3e13b4a50c1d87482a7437b81c63e9951
Certificate serial: 01856E5433C78D077752A683DEAB103BD590
Authority key identifier: C7:55:4F:D3:E1:3B:4A:50:C1:D8:74:82:A7:43:7B:81:C6:3E:99:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x1VP0-E7SlDB2HSCp0N7gcY-mVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/b8aeef-6889-4614-b7fc-5c75c3f421f5/1/tqwwh_TwTmnlMI6Pf1d48n1rfPU.roa
Signing time: Sun 01 Jan 2023 17:14:50 +0000
ROA not before: Sun 01 Jan 2023 17:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208957
IP address blocks: 5.182.168.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:54:33:c7:8d:07:77:52:a6:83:de:ab:10:3b:d5:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7554fd3e13b4a50c1d87482a7437b81c63e9951
Validity
Not Before: Jan 1 17:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b6ac3087f4f04e69e5308e8f7f5778f27d6b7cf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:07:14:3b:38:a3:a2:e8:57:a0:15:73:6a:c0:
d1:39:e9:fa:dc:79:35:8a:23:9c:d2:9a:d2:83:bb:
00:30:ac:be:a2:51:5b:1e:09:bf:86:c4:e2:47:00:
f9:45:4f:60:01:89:83:69:bf:97:48:d3:2e:3a:b6:
e8:12:57:ab:4c:6e:88:c3:ff:85:c3:cb:0f:d2:c4:
9d:c2:52:17:e3:65:ff:c6:fe:ed:37:ec:4d:00:ca:
a2:66:6c:a9:c7:66:d4:89:00:0c:d6:26:fb:92:ad:
4a:19:67:da:f7:ba:b9:b0:52:8f:8b:18:f5:dc:1a:
0d:e4:38:31:b8:9f:3a:a7:5b:ab:3a:37:8a:87:bc:
de:d4:31:f6:f8:f5:d4:d0:fe:cd:ca:0b:57:f0:9d:
58:6e:4a:3a:87:d8:11:85:ca:0e:5a:7e:57:da:31:
b3:11:f1:69:99:72:f0:ab:9a:65:60:0e:78:cb:35:
04:86:5c:5a:c6:d9:cc:34:67:73:c1:63:b5:36:71:
83:26:3f:cb:16:0c:b6:98:ce:fd:23:30:c5:4f:3a:
3e:1a:2e:95:b7:86:12:1a:b2:9e:33:cf:83:8a:f9:
6b:46:23:39:77:6f:b0:ca:72:7d:c6:05:59:43:22:
88:59:3b:ad:5d:c4:fc:af:73:bb:d8:a0:34:70:39:
37:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:AC:30:87:F4:F0:4E:69:E5:30:8E:8F:7F:57:78:F2:7D:6B:7C:F5
X509v3 Authority Key Identifier:
keyid:C7:55:4F:D3:E1:3B:4A:50:C1:D8:74:82:A7:43:7B:81:C6:3E:99:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x1VP0-E7SlDB2HSCp0N7gcY-mVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/b8aeef-6889-4614-b7fc-5c75c3f421f5/1/tqwwh_TwTmnlMI6Pf1d48n1rfPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/b8aeef-6889-4614-b7fc-5c75c3f421f5/1/x1VP0-E7SlDB2HSCp0N7gcY-mVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.168.0/22
Signature Algorithm: sha256WithRSAEncryption
bb:1a:79:94:c5:81:f0:1b:50:ab:73:99:43:2f:12:f0:42:5c:
71:bc:1b:a6:2f:57:84:53:a9:5b:ac:6c:4b:a2:e8:ba:cb:a7:
d1:aa:74:88:53:dd:7e:7f:59:a8:2a:5f:c2:49:f8:3c:64:96:
aa:98:fb:19:54:d0:26:91:75:27:1e:a3:f8:17:6a:7f:94:58:
c6:0c:e9:07:b3:2b:4d:a1:92:18:b7:89:60:35:87:6a:06:09:
ff:ee:d0:39:9f:31:57:5b:80:06:c0:ba:5b:70:d3:7f:32:ba:
82:b6:95:0a:71:46:e4:2f:b9:55:64:75:00:d8:cc:1c:21:a1:
50:bc:7a:2c:21:e1:9b:1e:5a:e9:27:27:46:18:4d:0a:8b:62:
d0:67:56:76:2e:95:3f:fb:2e:5a:96:0c:0a:91:a5:e5:66:f9:
7f:09:7b:86:18:bb:c7:7c:9e:77:06:5c:49:64:26:30:cd:7a:
64:e9:a3:59:9b:41:32:38:7a:56:d5:67:0b:3b:fb:16:63:80:
0b:aa:79:d0:c9:6f:06:78:59:bf:d9:a2:50:66:ed:a9:9b:fd:
51:d2:10:89:d7:96:e2:9d:4f:35:28:60:b9:db:c1:c6:38:b8:
ff:04:d2:31:31:b2:2a:b4:f3:be:a9:d4:9f:03:75:2f:07:6c:
5b:8c:de:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:37:51 2024 by rpki-client on console-fra.rpki-client.org