Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/TTc5aK0qxPNV1r0DwUJ1B605wCc.roa
File: TTc5aK0qxPNV1r0DwUJ1B605wCc.roa (raw, json)
Hash identifier: z/lAEV09WM/n5Pu39KAoEzzv06JJ0hMWr7AL/sqbx1w=
Subject key identifier: 4D:37:39:68:AD:2A:C4:F3:55:D6:BD:03:C1:42:75:07:AD:39:C0:27
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 01856C785F90CF3AEE41E85822F6FAEA2D8B
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/TTc5aK0qxPNV1r0DwUJ1B605wCc.roa
Signing time: Sun 01 Jan 2023 08:35:06 +0000
ROA not before: Sun 01 Jan 2023 08:35:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210122
IP address blocks: 81.28.254.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:78:5f:90:cf:3a:ee:41:e8:58:22:f6:fa:ea:2d:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Jan 1 08:35:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4d373968ad2ac4f355d6bd03c1427507ad39c027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d6:bb:17:7d:f6:e3:90:e2:a5:8f:8a:db:f1:
71:ed:88:ac:b4:62:46:7b:95:e3:3c:70:cb:9d:c6:
ff:6a:2d:50:bd:e4:9f:1b:7e:a9:f8:ff:50:2f:ca:
2e:d6:b7:e6:8c:6e:98:db:0a:a7:09:90:91:8b:69:
ec:8b:43:1b:50:97:b1:4b:3c:66:3b:cc:e1:02:22:
82:64:cb:0e:46:ae:e5:74:11:31:c8:86:88:0e:ea:
2e:08:9e:50:1b:6d:3f:89:33:9b:b7:32:e5:74:ba:
fa:10:83:2e:5f:bb:75:ce:9a:82:e2:66:58:3c:80:
be:22:af:91:3a:05:5e:8c:4e:4a:88:3f:cf:93:e8:
c9:58:ce:e4:60:c0:05:36:ae:27:5b:61:05:21:16:
72:d5:13:21:cf:64:df:6c:b6:1c:55:7d:2e:fb:65:
4a:aa:28:ae:d6:39:a7:61:c6:cf:b8:a3:64:14:4c:
cb:24:2f:f9:45:af:9d:1a:03:0c:1a:23:3d:20:7e:
f2:73:19:76:0c:86:47:10:cb:b8:17:f4:4e:5c:14:
ad:fc:38:19:8f:40:9d:12:c3:5b:4a:45:ef:bc:39:
b1:66:0e:8c:67:55:77:c5:d2:1e:be:e0:11:48:d8:
a1:08:14:53:e3:a6:04:ca:3f:fa:d2:71:33:03:bb:
18:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:37:39:68:AD:2A:C4:F3:55:D6:BD:03:C1:42:75:07:AD:39:C0:27
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/TTc5aK0qxPNV1r0DwUJ1B605wCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.28.254.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:1c:73:94:b2:03:77:7c:a6:f2:49:c1:0c:00:35:07:20:56:
c5:44:a3:39:70:e3:4e:e5:1e:7d:38:7c:f9:72:52:ad:0a:f1:
17:c0:b0:48:e1:e9:eb:45:ab:18:a1:d4:1c:de:c7:eb:0d:bf:
ef:cd:d4:7c:81:6e:93:c6:e7:98:a9:73:20:08:50:9e:34:22:
16:85:28:bf:cf:c5:34:87:61:94:1b:ca:25:df:3c:61:0d:92:
f3:b8:45:24:b8:02:29:f5:83:e4:1c:5e:b3:66:a0:79:d2:63:
6c:05:d5:35:db:08:f4:c0:94:91:02:78:3b:db:43:fd:15:fe:
81:24:ab:f6:7f:6c:d1:0b:81:0f:d5:7d:08:7a:43:57:a9:65:
3e:b3:43:2d:44:4b:6b:95:68:56:a5:89:47:68:ce:05:80:fe:
35:32:ac:76:cf:62:1a:a1:69:f1:70:32:32:b3:3b:29:3d:18:
ac:be:89:4c:c7:20:8f:17:26:4a:55:95:12:9c:d5:f3:51:f8:
20:6b:88:f9:bf:65:31:80:ff:db:eb:4c:75:b6:a2:af:3f:1e:
52:ac:b9:e7:b8:5e:8b:c6:e7:a1:ba:07:de:a0:97:86:3f:a7:
50:cd:26:ec:f0:07:30:16:e0:37:47:e8:68:31:e4:24:13:ab:
ef:d8:e3:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:43 2024 by rpki-client on console-ams.rpki-client.org