Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/542250-ba0b-4a10-8bdd-45794924cb53/1/TstOupVSWyOUp-ouGUEcY6VVo_A.roa
File: TstOupVSWyOUp-ouGUEcY6VVo_A.roa (raw, json)
Hash identifier: SGo6vKcOhNO/o9JnRhOR/6AaOTqC542k8ZI/ZLY90h8=
Subject key identifier: 4E:CB:4E:BA:95:52:5B:23:94:A7:EA:2E:19:41:1C:63:A5:55:A3:F0
Certificate issuer: /CN=8f54fc81e5153386cb42c17333050da831ada9e5
Certificate serial: 01856E01CC566960166B545E5A7BD29F74FC
Authority key identifier: 8F:54:FC:81:E5:15:33:86:CB:42:C1:73:33:05:0D:A8:31:AD:A9:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j1T8geUVM4bLQsFzMwUNqDGtqeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/542250-ba0b-4a10-8bdd-45794924cb53/1/TstOupVSWyOUp-ouGUEcY6VVo_A.roa
Signing time: Sun 01 Jan 2023 15:44:49 +0000
ROA not before: Sun 01 Jan 2023 15:44:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48746
IP address blocks: 91.212.37.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:34:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:01:cc:56:69:60:16:6b:54:5e:5a:7b:d2:9f:74:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f54fc81e5153386cb42c17333050da831ada9e5
Validity
Not Before: Jan 1 15:44:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4ecb4eba95525b2394a7ea2e19411c63a555a3f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9c:da:da:b5:3a:40:98:0d:9c:32:54:18:cb:
8d:e9:14:d2:7e:45:81:c7:30:34:06:8e:ab:d0:9f:
9f:2b:e8:ce:81:ef:bb:17:dc:1e:3c:f4:e0:e4:42:
73:63:87:e3:b0:41:11:49:62:45:8f:2b:22:e5:b6:
85:68:a0:e5:ca:6f:c0:01:0a:a4:73:9e:3c:49:4d:
ab:7f:66:68:ae:b4:fa:be:d9:75:40:bd:64:97:2e:
27:a7:c3:ec:96:f6:a4:de:93:a3:1b:1e:af:8c:6c:
b5:dc:57:d3:de:cd:de:f9:30:5c:43:55:53:33:fa:
b4:1f:33:89:7d:d3:60:ab:37:a0:04:8e:58:f4:ec:
ea:ae:4a:06:a4:12:ff:f1:f1:1a:96:be:81:bf:87:
bb:d5:a3:f0:7a:0c:12:31:7c:9f:dd:2b:ab:35:d4:
a4:da:8f:86:fa:8d:85:5c:08:c8:2e:9b:51:2b:af:
99:96:f5:c9:94:30:e6:3f:84:e3:de:0c:be:7b:c4:
4f:6a:5e:ff:c5:18:b5:c0:8f:ee:94:1c:03:02:73:
4b:0f:5c:bc:18:b4:16:fc:08:9a:ca:2f:11:ff:10:
76:b0:5c:b3:7b:87:f7:98:85:ff:fc:1f:6f:a6:77:
c9:d7:03:48:21:b8:09:46:ac:56:b2:1e:48:2f:bb:
40:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:CB:4E:BA:95:52:5B:23:94:A7:EA:2E:19:41:1C:63:A5:55:A3:F0
X509v3 Authority Key Identifier:
keyid:8F:54:FC:81:E5:15:33:86:CB:42:C1:73:33:05:0D:A8:31:AD:A9:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j1T8geUVM4bLQsFzMwUNqDGtqeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/542250-ba0b-4a10-8bdd-45794924cb53/1/TstOupVSWyOUp-ouGUEcY6VVo_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/542250-ba0b-4a10-8bdd-45794924cb53/1/j1T8geUVM4bLQsFzMwUNqDGtqeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.37.0/24
Signature Algorithm: sha256WithRSAEncryption
24:a4:60:c0:5a:39:28:fd:d5:c8:cc:8e:ab:ed:bd:5f:54:38:
7f:56:ca:00:51:7d:c7:4d:af:bc:f9:6d:91:f2:45:6e:d8:f6:
3b:c8:82:d2:a0:9f:a4:03:b1:eb:d4:4b:2f:ac:59:a2:3d:90:
4c:88:83:ae:ac:a6:88:72:a0:22:d8:01:22:4d:a3:f0:89:c0:
9b:30:b7:52:ad:d2:b0:5e:9c:94:09:06:a1:d7:e2:5b:e0:f1:
89:5f:6f:56:c9:e9:34:6c:6f:52:27:b9:e0:8b:07:1b:24:f6:
f7:c8:3b:7b:4c:fe:3a:b9:50:7a:24:e2:db:79:9b:fa:04:33:
89:12:83:f0:57:25:95:5b:22:2c:96:e2:89:17:c6:87:d2:0a:
0f:d0:66:43:94:ac:33:0c:b1:e6:10:d1:84:45:04:c2:ef:cd:
ef:30:d3:12:36:de:be:92:05:28:df:50:ef:79:95:0f:d4:59:
3d:ce:75:4c:e3:11:43:1a:e1:1f:34:b0:a2:b6:a4:50:7f:8c:
a5:7c:3a:83:ce:07:ec:0d:ff:ac:28:b8:27:98:92:88:de:2b:
45:0f:3a:80:2f:35:b0:77:c0:e5:c7:90:31:ba:f2:47:44:82:
a9:64:da:aa:e3:21:5a:a1:6e:d9:de:8c:c9:0d:d8:74:90:20:
32:81:5e:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:23 2024 by rpki-client on console-ams.rpki-client.org