Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/TMrObMqsdQ62uqprujHYgIfxCcA.roa
File: TMrObMqsdQ62uqprujHYgIfxCcA.roa (raw, json)
Hash identifier: WvhxgnRtxc951/VHnAdUpoQquTGxwdBfrtYSqI83XSQ=
Subject key identifier: 4C:CA:CE:6C:CA:AC:75:0E:B6:BA:AA:6B:BA:31:D8:80:87:F1:09:C0
Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Certificate serial: 0189A8300BF9C0B0316CDFA5F3FFC3F6D803
Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/TMrObMqsdQ62uqprujHYgIfxCcA.roa
Signing time: Sun 30 Jul 2023 19:04:28 +0000
ROA not before: Sun 30 Jul 2023 19:04:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200598
IP address blocks: 91.210.80.0/22 maxlen: 24
50.20.224.0/20 maxlen: 24
121.127.48.0/20 maxlen: 24
66.9.96.0/20 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:a8:30:0b:f9:c0:b0:31:6c:df:a5:f3:ff:c3:f6:d8:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Validity
Not Before: Jul 30 19:04:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4ccace6ccaac750eb6baaa6bba31d88087f109c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:2b:96:57:82:a4:be:9e:33:97:21:a9:5b:2d:
76:82:73:b9:90:84:b7:6a:02:4b:25:a1:57:3a:cb:
c3:78:ba:cd:b9:bc:72:6e:25:34:a6:39:cd:1e:e4:
00:48:ad:ee:bc:78:45:05:a4:26:e7:ab:d4:90:d1:
3b:ce:93:16:d7:54:f7:f8:a7:89:d1:b4:60:97:3a:
3e:65:e8:5c:82:93:c5:94:f6:8b:2e:65:01:81:62:
3e:0a:36:f8:f6:11:07:5f:a3:e4:ea:d4:69:25:7b:
78:d4:f3:e6:22:2f:b1:ce:41:4d:5a:6b:b1:c5:d4:
33:be:04:34:46:cc:41:0f:5e:e4:eb:55:90:73:8a:
ed:22:72:66:91:2d:74:17:4f:4e:37:f6:19:79:c2:
4d:6f:ee:b0:0e:b3:13:c8:20:bd:ad:ef:d0:24:1b:
37:5a:18:b7:ec:52:21:21:87:4d:02:2f:82:57:dd:
73:c0:4b:63:30:bf:bc:32:83:c0:29:ae:6a:07:af:
34:7d:65:26:a2:1c:ec:33:c5:a7:31:5b:b0:b4:cc:
ee:ac:32:7e:ce:1a:54:8e:a1:41:76:89:a5:c5:fa:
1e:72:9c:72:1b:8b:6b:d2:7c:43:14:eb:f6:1e:f5:
16:2f:1e:a1:38:f3:f3:4b:00:15:ab:3a:77:86:92:
97:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:CA:CE:6C:CA:AC:75:0E:B6:BA:AA:6B:BA:31:D8:80:87:F1:09:C0
X509v3 Authority Key Identifier:
keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/TMrObMqsdQ62uqprujHYgIfxCcA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
50.20.224.0/20
66.9.96.0/20
91.210.80.0/22
121.127.48.0/20
Signature Algorithm: sha256WithRSAEncryption
52:63:58:ff:ea:bd:66:97:64:33:55:61:07:b8:c0:6e:4d:39:
a9:30:48:ba:25:f8:d4:6e:e2:81:1d:22:9f:8f:9b:79:53:19:
1c:64:12:07:f6:37:ff:fc:98:4e:0c:0f:b2:cd:36:80:19:ca:
db:46:53:17:85:1b:62:d8:c3:ff:80:ec:13:22:ba:1d:76:e0:
3e:ff:1b:f1:d0:bd:18:4e:86:98:2e:1f:f0:b8:db:91:0a:84:
6e:f8:9b:83:97:ec:80:ad:9e:89:76:e6:45:cd:35:1e:02:be:
82:79:93:7a:51:6a:8a:7f:a1:91:68:fd:e1:a7:a4:d7:65:4d:
07:4d:c2:e8:10:ab:81:03:dc:02:56:f2:d3:02:fd:c8:bb:bf:
8a:da:fb:42:80:56:88:d9:0a:b5:09:d7:b9:43:b3:7e:74:f9:
40:a1:12:70:05:98:5d:1b:99:95:1f:ba:46:8e:48:67:74:1c:
60:0b:9b:ff:9c:86:1d:55:23:c7:5e:1d:8c:04:e7:5f:a6:db:
fd:99:4c:9e:6c:14:47:22:f5:10:c7:82:54:09:24:8f:e3:73:
1d:c9:83:a6:8d:83:66:e6:39:79:a1:ab:6b:56:93:32:be:dc:
ba:b7:5b:0d:66:be:fb:89:98:6d:4d:29:34:53:b3:2c:9a:95:
09:cc:1e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 3 10:44:18 2023 by rpki-client on console-fra.rpki-client.org