Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/914749-8c02-4660-a871-0178227e09c2/1/TDYSl57TrDl2F3VzjGOGmymBtpU.roa
File: TDYSl57TrDl2F3VzjGOGmymBtpU.roa (raw, json)
Hash identifier: XMlsa0cxXMlLF79w/5uxDKmbb6SnA+RY8atmtGgORBU=
Subject key identifier: 4C:36:12:97:9E:D3:AC:39:76:17:75:73:8C:63:86:9B:29:81:B6:95
Certificate issuer: /CN=56978809c50f0141c2591549ba0727fdf60b1850
Certificate serial: 018571279AEBC280645B178AF497E7DE07E2
Authority key identifier: 56:97:88:09:C5:0F:01:41:C2:59:15:49:BA:07:27:FD:F6:0B:18:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VpeICcUPAUHCWRVJugcn_fYLGFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/914749-8c02-4660-a871-0178227e09c2/1/TDYSl57TrDl2F3VzjGOGmymBtpU.roa
Signing time: Mon 02 Jan 2023 06:24:59 +0000
ROA not before: Mon 02 Jan 2023 06:24:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212552
IP address blocks: 146.19.130.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:27:9a:eb:c2:80:64:5b:17:8a:f4:97:e7:de:07:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56978809c50f0141c2591549ba0727fdf60b1850
Validity
Not Before: Jan 2 06:24:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4c3612979ed3ac39761775738c63869b2981b695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:17:57:ed:94:e8:31:0c:90:b0:91:d2:53:ae:
89:47:a2:f3:05:73:ba:81:00:a1:05:60:68:53:6d:
37:df:08:02:a5:b7:23:9b:ed:be:24:71:a9:7b:5c:
28:ec:8a:2a:94:f6:1c:ca:0a:0c:15:99:c3:cd:dc:
14:67:14:ad:2f:0e:fd:d9:c1:12:1a:80:ec:5e:f3:
e0:a0:70:be:3e:b0:45:b1:ca:28:3e:1e:da:53:24:
23:39:c5:f6:54:2c:d4:d2:d0:fd:a7:26:54:1d:12:
e0:3b:cf:47:02:a8:0a:86:ed:93:e8:b4:fa:d9:6e:
ba:ef:79:1a:71:cc:9b:9a:8c:b2:be:14:f9:d0:f9:
0e:d9:26:4c:97:f7:c8:0f:2c:4e:fa:21:2b:5d:e8:
ad:4a:cf:05:7c:b5:04:78:47:33:58:85:99:f8:88:
db:96:7a:8e:36:f5:df:dd:66:c6:22:97:92:de:a6:
88:c5:19:f3:da:23:24:2a:d7:03:ed:ba:aa:e1:43:
e8:ad:5b:80:17:03:9f:7a:20:2c:d4:0f:3b:01:eb:
b7:04:f5:e7:98:b5:2a:57:d8:44:d3:c4:d7:a5:87:
b4:27:4c:17:7f:f4:dd:cf:d4:67:da:e5:16:f9:e9:
2e:d1:14:b5:b4:ba:81:f8:23:5a:93:97:3f:72:79:
7e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:36:12:97:9E:D3:AC:39:76:17:75:73:8C:63:86:9B:29:81:B6:95
X509v3 Authority Key Identifier:
keyid:56:97:88:09:C5:0F:01:41:C2:59:15:49:BA:07:27:FD:F6:0B:18:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VpeICcUPAUHCWRVJugcn_fYLGFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/914749-8c02-4660-a871-0178227e09c2/1/TDYSl57TrDl2F3VzjGOGmymBtpU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/914749-8c02-4660-a871-0178227e09c2/1/VpeICcUPAUHCWRVJugcn_fYLGFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.130.0/24
Signature Algorithm: sha256WithRSAEncryption
24:c8:d7:c6:fc:59:ae:b4:74:91:4b:36:62:e9:f9:82:02:78:
14:c5:eb:c6:63:0e:9f:14:82:d1:cf:bb:b1:26:e6:5b:d4:00:
e6:71:d2:fd:e8:4d:22:f2:8c:16:19:96:62:d8:f7:f9:3b:7d:
84:e2:b5:af:b1:03:58:09:f8:35:05:37:bc:80:36:46:13:8d:
81:9b:2e:5d:98:a8:05:cf:b5:cb:c7:27:0d:d8:40:f2:22:10:
99:d4:d8:72:d1:03:0a:a8:dc:2b:e6:ee:21:de:ac:ab:bf:0d:
ba:d0:96:1c:80:1e:e6:7b:03:c3:05:6e:e2:57:2e:ef:04:03:
02:aa:09:70:9c:03:c0:da:3b:97:56:49:1e:3e:6b:90:29:3a:
a1:c1:5f:e6:39:59:17:50:a7:cb:8a:0d:66:3c:78:6d:6e:2f:
f8:b2:83:6b:5f:5a:88:54:93:5e:ee:d0:f5:ab:a1:80:41:a8:
fb:06:80:68:c9:43:6d:86:63:97:ed:77:09:b8:c3:f1:ca:69:
92:b2:ba:c9:8d:bf:56:e5:13:02:4b:69:01:b4:b6:79:9c:83:
f2:06:ac:26:b2:db:33:4a:3c:7f:1a:a5:0c:58:48:f8:b5:a2:
e4:6d:e0:4d:9c:71:8d:56:13:d7:01:4e:f0:ec:f9:57:50:f4:
b8:6c:68:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:22 2024 by rpki-client on console-fra.rpki-client.org