Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/tvkw4YAWK1UQw7tcVjVGFUwwYSo.roa
File: tvkw4YAWK1UQw7tcVjVGFUwwYSo.roa (raw, json)
Hash identifier: dPtVwsc/Ol0BCiOzPGsR09nu0jqMo+U+fwk67XuqKzA=
Subject key identifier: B6:F9:30:E1:80:16:2B:55:10:C3:BB:5C:56:35:46:15:4C:30:61:2A
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 0185E54FDD1486DF3DB68B622B92F10E4AE7
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/tvkw4YAWK1UQw7tcVjVGFUwwYSo.roa
Signing time: Tue 24 Jan 2023 19:44:54 +0000
ROA not before: Tue 24 Jan 2023 19:44:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 91.186.204.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 27 Jan 2023 20:54:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e5:4f:dd:14:86:df:3d:b6:8b:62:2b:92:f1:0e:4a:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Jan 24 19:44:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b6f930e180162b5510c3bb5c563546154c30612a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:61:28:55:ce:0d:1d:13:a2:f2:1b:eb:a0:2e:
13:13:41:c0:42:09:39:46:ab:4d:90:2a:6b:df:3d:
1c:b8:a4:2a:1b:f0:1a:af:ce:f1:be:21:6c:3e:59:
12:02:ff:c7:69:ad:84:a3:0f:d3:a6:0c:47:39:be:
97:79:42:db:03:4d:4e:de:0a:66:16:31:9f:02:c7:
d2:30:8c:b9:9e:9d:00:01:b8:8a:3c:d8:47:4b:d9:
ec:40:7d:91:b4:bd:58:11:e6:41:b2:ef:6c:b7:79:
94:01:32:6d:09:59:7d:6c:5e:fd:bc:ce:49:42:7b:
13:41:00:7d:2c:ea:20:55:c3:3e:9e:1d:e8:1a:7d:
7d:83:e1:1a:5c:a3:fe:10:5f:f1:e5:89:0f:9c:25:
e3:08:d3:2d:c4:74:a4:15:bb:d6:77:12:54:31:74:
04:f1:e7:24:ad:d3:97:bf:5d:63:d1:0a:ff:de:62:
17:6f:51:16:b7:37:47:32:d7:55:ec:8f:36:e2:b9:
da:43:37:0f:ad:e6:c2:82:8f:69:82:2b:bf:ea:92:
13:c8:e1:86:48:36:ae:2d:2d:5f:e1:bb:79:9b:4b:
a2:70:53:0e:b4:3a:e5:96:8c:f2:9e:3b:3e:83:aa:
68:2b:b0:11:0c:03:d8:71:ce:d9:49:66:ab:91:ba:
60:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:F9:30:E1:80:16:2B:55:10:C3:BB:5C:56:35:46:15:4C:30:61:2A
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/tvkw4YAWK1UQw7tcVjVGFUwwYSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.186.204.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:b2:73:2d:c7:bc:d8:a0:1a:de:de:1c:95:ff:bb:e6:8e:ce:
7c:13:1d:3a:30:00:aa:df:60:f9:9f:a2:8f:dc:36:12:d3:67:
38:40:0c:42:a6:30:93:b3:0b:00:63:13:b1:5e:15:c9:09:2d:
a7:a6:1c:fe:ec:1a:41:52:0a:07:25:17:09:16:59:4a:9e:71:
21:32:43:b3:83:2b:3a:86:15:8d:8e:fd:60:43:7d:0c:9c:00:
ae:77:d7:ae:6b:e6:dd:39:25:78:01:1f:9e:27:06:c7:71:af:
7e:09:4a:fa:3f:ca:b3:9b:33:3b:ca:66:b3:56:ac:1c:11:28:
e1:50:ce:06:4d:f0:af:7b:7e:fd:d3:d4:83:3f:7b:61:91:af:
85:59:e5:ce:46:a5:b6:11:45:dd:ba:35:60:18:d1:dc:6d:66:
96:18:62:e2:63:51:af:94:a5:19:cb:15:a7:b1:d9:52:34:ab:
28:05:44:46:ce:66:6e:e7:bd:b9:41:99:0a:d9:64:b9:19:3c:
09:d8:b9:b9:2f:c9:90:96:e1:64:d3:fd:a6:3f:b8:3d:4f:93:
2d:7e:5c:11:a3:12:56:40:95:7e:64:d6:e6:37:3a:43:85:16:
4e:93:9e:5b:d6:23:03:17:f4:49:c1:a4:79:5f:c5:ec:1c:21:
a6:d9:88:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:20 2024 by rpki-client on console-ams.rpki-client.org