Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/twn6ccg6Wv-5eDh6x9TiwtvqjSg.roa
File: twn6ccg6Wv-5eDh6x9TiwtvqjSg.roa (raw, json)
Hash identifier: GBi4Fu0gN06lh5A9qjzFfnLP52RRbEYlERpqLvhK80E=
Subject key identifier: B7:09:FA:71:C8:3A:5A:FF:B9:78:38:7A:C7:D4:E2:C2:DB:EA:8D:28
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 01857D4612F7C3320674D126412A82A2CCCF
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/twn6ccg6Wv-5eDh6x9TiwtvqjSg.roa
Signing time: Wed 04 Jan 2023 14:53:42 +0000
ROA not before: Wed 04 Jan 2023 14:53:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197077
IP address blocks: 176.98.212.0/22 maxlen: 24
185.137.140.0/22 maxlen: 24
45.13.200.0/23 maxlen: 23
45.13.202.0/23 maxlen: 23
45.13.200.0/22 maxlen: 24
217.198.192.0/20 maxlen: 24
91.220.70.0/24 maxlen: 24
2a04:a450::/31 maxlen: 31
Validation: Failed, certificate revoked on Wed 26 Jul 2023 14:24:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:7d:46:12:f7:c3:32:06:74:d1:26:41:2a:82:a2:cc:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Jan 4 14:53:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b709fa71c83a5affb978387ac7d4e2c2dbea8d28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:3a:b4:4c:d8:dd:25:bb:79:63:ec:a5:ce:9b:
41:be:d2:cb:d7:0b:01:d1:5c:09:99:5e:52:37:11:
01:81:99:04:09:c2:e3:4c:71:e9:17:55:00:d6:3d:
93:d2:7f:28:13:53:23:e6:f2:a8:14:78:c8:97:cb:
81:56:8c:31:18:96:ac:75:1b:ea:dc:f5:3a:7a:dc:
a2:06:ba:28:3a:b1:d9:a9:37:7d:51:19:4a:8b:23:
28:98:bb:05:f6:68:06:aa:90:ac:56:50:0b:db:ba:
71:e5:b7:00:9d:6c:d5:4a:79:1b:7d:6f:70:ac:94:
4e:a9:73:3e:0d:f9:58:8f:3d:0c:9d:2a:c2:83:c7:
45:27:e2:0b:0e:db:9c:cd:31:ff:8c:7e:cc:e7:f6:
30:00:2c:b4:f2:48:79:ea:9b:ba:87:30:4f:cb:68:
ae:d3:77:61:a2:e5:09:b7:3b:e4:34:2c:aa:6d:25:
ce:f3:0d:01:8f:5e:cc:c7:85:8f:af:8c:2c:ad:de:
f7:21:9b:93:54:63:b3:3c:26:38:d1:c6:c3:10:8f:
10:ac:49:f1:d6:36:bf:10:98:ab:a6:b4:f9:52:eb:
33:c3:7a:72:f9:91:c3:27:17:58:12:86:e2:a8:03:
8a:24:b8:9f:27:3e:a0:72:c7:e3:75:94:af:5a:3e:
61:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:09:FA:71:C8:3A:5A:FF:B9:78:38:7A:C7:D4:E2:C2:DB:EA:8D:28
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/twn6ccg6Wv-5eDh6x9TiwtvqjSg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.200.0/22
91.220.70.0/24
176.98.212.0/22
185.137.140.0/22
217.198.192.0/20
IPv6:
2a04:a450::/31
Signature Algorithm: sha256WithRSAEncryption
2e:8e:d0:c5:13:61:80:88:c8:0c:31:34:a6:4b:fd:e6:28:15:
6a:ac:57:77:5e:1e:f0:36:d2:b8:69:18:b0:5b:a6:aa:e5:9e:
f5:cb:1c:0e:d3:25:e4:91:78:a3:ca:ae:28:3f:8f:6a:5c:9d:
5d:31:b2:83:34:64:6e:91:8d:d3:e4:04:2d:ca:c8:92:25:ca:
e9:2d:84:27:31:5a:9a:3c:8e:55:92:59:2a:2e:63:2e:b8:ca:
58:77:bb:39:44:f8:e8:47:84:16:16:f5:9f:71:19:90:03:3c:
5a:a7:a1:16:86:f8:17:68:14:bf:c2:30:9b:2c:6c:73:6b:47:
dd:ca:13:d0:6a:d7:06:0e:4a:68:0b:5a:6a:b6:dd:2f:6a:71:
bf:a6:f7:6a:90:bc:70:73:51:1e:1c:08:0a:90:89:ab:58:aa:
e8:75:f6:41:66:67:04:6d:76:c2:5e:3d:d4:42:f4:d1:f4:17:
d4:0b:3c:ed:89:29:ce:ff:de:18:55:66:3d:d8:5a:ee:af:f9:
fc:cc:43:4c:d1:5e:e5:a6:55:a7:35:ad:a2:50:33:aa:9b:2a:
93:1c:d4:fb:76:7e:91:73:7d:76:2e:f0:88:5c:ee:64:9d:7e:
78:9a:1c:02:f8:5f:1e:da:e4:5e:b0:db:ac:3b:25:94:45:f8:
d3:01:98:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:37 2024 by rpki-client on console-fra.rpki-client.org