Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/TvY3A8usC1DdNfnBuzHMfCJXicQ.roa
File: TvY3A8usC1DdNfnBuzHMfCJXicQ.roa (raw, json)
Hash identifier: CUm38m8njhD41o5zC1sJ3iewikqT7hIJi0QaMz/se5Q=
Subject key identifier: 4E:F6:37:03:CB:AC:0B:50:DD:35:F9:C1:BB:31:CC:7C:22:57:89:C4
Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial: 0186544DC9478C481D7FBCDB9747EADA3B80
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/TvY3A8usC1DdNfnBuzHMfCJXicQ.roa
Signing time: Wed 15 Feb 2023 09:00:29 +0000
ROA not before: Wed 15 Feb 2023 09:00:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211439
IP address blocks: 192.145.53.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 15 Sep 2023 08:33:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:54:4d:c9:47:8c:48:1d:7f:bc:db:97:47:ea:da:3b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Validity
Not Before: Feb 15 09:00:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4ef63703cbac0b50dd35f9c1bb31cc7c225789c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:82:3a:4d:fd:67:14:77:0b:74:22:de:45:5a:
92:a8:2e:37:c0:6b:2a:1d:85:46:c2:a7:4a:8f:d1:
85:bc:67:79:71:77:b6:4d:2b:f6:de:c3:d0:76:c1:
31:fb:8e:41:d7:8a:e1:f3:cb:a6:ac:41:84:4c:6b:
d0:12:4c:5d:55:3d:41:fa:2c:00:d7:51:bd:4e:eb:
33:6c:6a:e1:17:37:16:a5:60:7e:53:ea:fa:1b:6c:
d9:44:6b:55:ba:77:f6:39:f7:13:10:c2:d7:94:f7:
63:6a:56:48:f4:3b:1c:74:3f:2b:86:70:b5:64:0e:
29:15:f3:01:76:52:f2:7c:e6:b2:d6:60:dc:2f:04:
cc:d3:63:05:36:d8:68:36:b0:78:9d:4a:1d:8c:60:
ab:53:0b:86:3a:62:41:b5:ed:49:d9:96:ef:c2:ea:
9e:8f:2f:93:c3:74:7b:d4:ab:a9:2e:36:58:51:35:
08:0d:5b:c3:c6:4c:25:56:14:35:e2:9f:62:c4:58:
28:fc:13:23:4e:b1:c5:78:7d:fb:6a:6d:b0:a7:ad:
9d:97:3c:02:11:ef:65:b8:16:bb:5a:33:f9:79:c3:
8d:7f:6c:d7:5a:10:57:33:63:6e:96:65:aa:9b:ee:
5f:a8:21:d1:62:23:c9:a5:ec:e3:14:87:d0:5a:7c:
20:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:F6:37:03:CB:AC:0B:50:DD:35:F9:C1:BB:31:CC:7C:22:57:89:C4
X509v3 Authority Key Identifier:
keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/TvY3A8usC1DdNfnBuzHMfCJXicQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.145.53.0/24
Signature Algorithm: sha256WithRSAEncryption
63:a4:2d:22:b4:a7:06:c2:9e:0e:e6:7d:15:f4:38:ed:88:75:
64:4d:28:07:0e:58:f4:48:54:8b:f2:1e:99:69:ce:29:50:51:
a1:c3:41:36:a4:10:3e:13:c9:e1:1e:f2:9b:1c:cd:a7:0c:88:
24:22:d9:30:29:bf:96:61:40:a2:ec:7f:87:17:8d:e3:9c:90:
dd:05:e5:06:47:ef:25:33:84:92:4c:11:06:e1:0a:87:57:4d:
8b:9c:ec:ab:1c:13:e1:f1:10:7b:dc:f9:7d:cb:4f:d5:7e:c0:
64:c7:cb:d0:07:f5:f0:6b:56:e0:df:99:94:c9:06:27:09:c5:
cf:f9:77:f7:b8:69:7a:8a:d6:42:36:5d:f0:96:7f:26:f5:8b:
57:02:ff:b5:3d:33:d5:49:5c:bb:22:e1:2c:bc:c9:91:9e:9b:
81:90:91:b5:54:7e:81:7b:9c:52:cb:f2:c6:1d:2a:fd:f9:e8:
32:53:7c:e9:d2:9a:8d:ec:9e:67:26:1f:5d:6d:2b:dc:a7:b4:
7f:73:5d:a2:c2:5d:0b:29:d1:e7:f2:ad:58:01:52:36:c2:ef:
4d:3a:8d:86:ce:12:79:0e:59:2a:c2:62:21:41:12:20:5a:f3:
2a:2b:31:b5:20:50:5f:fb:a6:e4:2c:97:bb:17:12:72:17:ad:
ee:29:6e:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:08 2024 by rpki-client on console-ams.rpki-client.org