Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/TFCuP5W6UZLJF-nDW9XlkgV1pNU.roa
File: TFCuP5W6UZLJF-nDW9XlkgV1pNU.roa (raw, json)
Hash identifier: hNlhB7t9yPJYchFose/Z3yj/z5l9I78W9L8l3u0CwUM=
Subject key identifier: 4C:50:AE:3F:95:BA:51:92:C9:17:E9:C3:5B:D5:E5:92:05:75:A4:D5
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 0187932EF8B6B4EA687D0B458FE76C1A6EFD
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/TFCuP5W6UZLJF-nDW9XlkgV1pNU.roa
Signing time: Tue 18 Apr 2023 07:05:41 +0000
ROA not before: Tue 18 Apr 2023 07:05:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 91.186.216.0/22 maxlen: 24
178.253.22.0/23 maxlen: 24
83.147.223.0/24 maxlen: 24
83.147.252.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:93:2e:f8:b6:b4:ea:68:7d:0b:45:8f:e7:6c:1a:6e:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Apr 18 07:05:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4c50ae3f95ba5192c917e9c35bd5e5920575a4d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bb:13:96:22:52:74:ba:89:4f:3f:43:f6:2b:
2b:26:a3:ff:92:bf:98:a2:e0:5b:3c:a5:5b:3b:57:
95:69:3f:98:68:7e:c9:6c:19:6d:fe:12:74:f9:c8:
81:af:e1:22:e8:b6:71:66:b3:76:92:82:42:8a:7e:
00:81:e7:15:31:65:1e:e9:79:18:29:39:e6:2f:cf:
d5:5b:fb:d6:dd:f5:19:86:81:3b:95:a4:ba:90:6e:
3d:48:4a:f0:4c:a3:52:84:ae:3e:ac:ba:0c:18:20:
ae:28:d4:75:89:1b:75:62:1d:e7:28:31:eb:d2:96:
e5:1f:41:ad:57:eb:3f:ef:f9:e7:3b:41:ed:49:1c:
9f:fd:7a:c5:a5:e1:03:e2:75:77:b0:c0:10:1c:bc:
50:ba:94:37:61:f2:15:9e:c7:de:0f:ad:59:b1:81:
5e:c6:39:aa:82:27:6e:82:40:3e:e3:b0:4f:2b:dd:
f1:f5:ef:70:3b:62:09:96:eb:54:f3:9c:94:f5:82:
2e:eb:2b:27:d3:43:e7:7f:61:48:0a:c7:14:ee:92:
4c:b1:f2:ca:aa:af:d7:60:a4:a4:d0:a6:70:c1:f8:
4f:ba:99:40:8b:65:fd:9e:61:9a:b1:9c:3e:60:3a:
c5:1e:2c:92:96:4e:80:1a:8f:bd:aa:4c:0b:c2:15:
cf:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:50:AE:3F:95:BA:51:92:C9:17:E9:C3:5B:D5:E5:92:05:75:A4:D5
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/TFCuP5W6UZLJF-nDW9XlkgV1pNU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.223.0/24
83.147.252.0/22
91.186.216.0/22
178.253.22.0/23
Signature Algorithm: sha256WithRSAEncryption
58:fb:bf:b9:ad:75:ef:94:4b:f6:9e:3e:1a:76:49:53:f5:7a:
aa:a2:aa:77:9a:d7:ed:f2:09:a3:2e:19:22:a9:fd:a3:8e:ee:
14:06:86:6e:0d:3d:63:3a:65:f5:46:d1:34:8f:6f:98:fb:1d:
36:a8:29:57:24:c1:dc:27:98:3a:56:29:aa:20:8f:f2:cb:d6:
f1:d0:ff:99:b7:b3:c1:4a:10:f7:94:a1:4d:06:6a:b5:1a:2a:
5b:f9:0e:8e:bf:a1:7b:8c:f3:f2:db:98:cc:c7:38:69:b5:58:
6a:be:21:4f:6e:1b:c7:cb:98:b2:4f:00:71:a5:fa:87:9f:3b:
57:bc:ed:dd:2d:33:a5:ee:df:89:d0:5d:4a:6b:01:ac:50:d5:
00:fb:2d:06:89:32:a7:f5:7b:3f:d0:d7:bf:09:53:96:92:13:
c8:c7:99:74:36:44:54:1b:3f:85:84:56:76:71:ca:31:9c:fe:
93:05:3b:ee:ca:99:0b:40:6f:30:d4:3e:d7:3e:b5:91:1b:6d:
c7:6d:10:97:1f:f3:4e:54:d7:b4:21:f7:d0:db:78:33:39:cb:
99:83:5b:91:ea:1f:a2:a0:36:35:df:69:86:83:b3:f4:8d:33:
c2:fa:79:b0:69:c9:7e:81:09:8d:f6:a2:58:dc:b4:68:f9:5d:
9e:74:0d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:38 2023 by rpki-client on console-ams.rpki-client.org