Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/02ce6f-1429-40ad-b753-0db88ec7342c/1/Tvk6mM9qHbBHl5WQY3HTvpC1Qi4.roa
File: Tvk6mM9qHbBHl5WQY3HTvpC1Qi4.roa (raw, json)
Hash identifier: kUdNl9vR1ygctvRSS+OiBC6kGkrrlarkCfhy0uGzYYk=
Subject key identifier: 4E:F9:3A:98:CF:6A:1D:B0:47:97:95:90:63:71:D3:BE:90:B5:42:2E
Certificate issuer: /CN=e0012bcb9e6e747237724781a4c919fc5c941965
Certificate serial: 018BBFBE891E9D374E157971BBD72BEA53F2
Authority key identifier: E0:01:2B:CB:9E:6E:74:72:37:72:47:81:A4:C9:19:FC:5C:94:19:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4AEry55udHI3ckeBpMkZ_FyUGWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/02ce6f-1429-40ad-b753-0db88ec7342c/1/Tvk6mM9qHbBHl5WQY3HTvpC1Qi4.roa
Signing time: Sat 11 Nov 2023 18:56:57 +0000
ROA not before: Sat 11 Nov 2023 18:56:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57645
IP address blocks: 91.234.16.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:bf:be:89:1e:9d:37:4e:15:79:71:bb:d7:2b:ea:53:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0012bcb9e6e747237724781a4c919fc5c941965
Validity
Not Before: Nov 11 18:56:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4ef93a98cf6a1db0479795906371d3be90b5422e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:5d:29:21:17:53:6f:19:e7:f2:9b:6d:35:c7:
7f:81:95:70:10:9a:a3:25:b0:9b:c6:4e:0e:58:9a:
95:a2:52:3c:55:1a:c6:49:0b:84:a9:3e:dd:55:ba:
cd:82:fc:ea:69:34:7a:61:5b:db:73:d1:c1:9a:e6:
4a:97:1d:8b:b5:0a:e8:1e:62:d6:98:59:3e:f0:c5:
6d:66:e5:d8:84:73:06:7f:5a:e4:86:27:21:48:fb:
07:0f:73:d9:db:f0:52:81:bd:44:82:42:f6:2a:ed:
20:14:1c:29:aa:9f:75:04:3e:21:01:1d:fc:a1:d8:
b1:71:aa:d7:83:b4:24:ac:99:f4:89:7d:03:79:8c:
18:e3:19:93:80:d8:72:53:62:98:b2:1c:54:e3:73:
0d:21:df:19:d9:17:87:ad:4a:ec:2b:1a:bf:d4:e7:
8b:19:01:ff:2a:b3:ff:d6:d8:eb:08:e0:aa:c6:77:
66:36:4f:b3:b4:b8:25:d6:d8:7c:57:49:d8:f1:ed:
d8:61:52:39:01:34:f3:7c:bd:4e:20:21:18:b7:de:
be:82:45:34:8b:4f:ae:1b:18:af:ef:46:80:b5:4d:
3b:3b:97:f8:df:b7:2f:2a:53:8c:0a:c5:a8:31:58:
c6:18:35:6b:c1:6d:82:1f:88:ef:69:58:5a:49:e3:
b5:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:F9:3A:98:CF:6A:1D:B0:47:97:95:90:63:71:D3:BE:90:B5:42:2E
X509v3 Authority Key Identifier:
keyid:E0:01:2B:CB:9E:6E:74:72:37:72:47:81:A4:C9:19:FC:5C:94:19:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4AEry55udHI3ckeBpMkZ_FyUGWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/02ce6f-1429-40ad-b753-0db88ec7342c/1/Tvk6mM9qHbBHl5WQY3HTvpC1Qi4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/02ce6f-1429-40ad-b753-0db88ec7342c/1/4AEry55udHI3ckeBpMkZ_FyUGWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.234.16.0/24
Signature Algorithm: sha256WithRSAEncryption
25:05:99:29:b5:6e:8b:ba:65:32:73:b8:e0:6b:2e:79:7f:a9:
bf:b2:89:34:62:f8:d9:e2:40:39:a6:5f:67:a9:d8:69:30:43:
64:be:21:30:3a:7a:2c:57:38:cc:42:0f:1b:af:1a:22:d5:5f:
40:c3:47:f3:af:5c:a5:89:7d:19:74:60:74:b2:87:1c:91:17:
01:7d:34:2a:43:55:4d:7e:54:b4:fb:79:75:02:66:fb:cd:18:
2f:3b:37:63:cf:b0:cf:35:b9:83:7a:46:06:f0:05:3d:a4:61:
af:fd:45:40:8f:a9:b5:13:74:35:04:6c:29:e3:ce:27:c4:d8:
50:04:9f:98:61:23:e3:e5:41:5c:16:d5:a3:ed:a2:a2:3f:10:
f7:5a:ff:00:ee:f8:65:68:f8:4e:31:89:7a:67:82:dd:44:95:
8b:60:23:91:52:cc:f5:e9:01:69:d1:6c:6d:3a:7c:35:bb:d6:
19:51:00:80:b0:e5:f2:39:eb:4b:37:f8:15:2c:5b:72:ed:60:
32:ce:8d:70:ed:e1:50:e4:64:1a:ff:dd:f9:85:ff:6d:01:39:
31:3a:0e:f0:c2:0c:84:d2:4f:60:7d:0e:ce:21:a1:c5:c7:c8:
c8:55:2b:9d:59:f3:7c:3b:6b:09:cd:e9:00:b7:d4:b0:37:ce:
61:cb:70:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:03:24 2024 by rpki-client on console-ams.rpki-client.org