Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/8ec3a9-cef2-4bf8-a06a-7e2c4b975b39/1/trjDXRFNy9uWcbf24YnaHubjiM4.roa
File: trjDXRFNy9uWcbf24YnaHubjiM4.roa (raw, json)
Hash identifier: QPtwHS093TPZyeRbrPPq5zcBeBXRULxF1mxwmCdimEI=
Subject key identifier: B6:B8:C3:5D:11:4D:CB:DB:96:71:B7:F6:E1:89:DA:1E:E6:E3:88:CE
Certificate issuer: /CN=cf02f5f48e122e556f9b598ad9a62d3c3e14419a
Certificate serial: 01856B8A4766790CDADE1E2F19037926524A
Authority key identifier: CF:02:F5:F4:8E:12:2E:55:6F:9B:59:8A:D9:A6:2D:3C:3E:14:41:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zwL19I4SLlVvm1mK2aYtPD4UQZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/8ec3a9-cef2-4bf8-a06a-7e2c4b975b39/1/trjDXRFNy9uWcbf24YnaHubjiM4.roa
Signing time: Sun 01 Jan 2023 04:15:02 +0000
ROA not before: Sun 01 Jan 2023 04:15:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12637
IP address blocks: 91.206.74.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:8a:47:66:79:0c:da:de:1e:2f:19:03:79:26:52:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf02f5f48e122e556f9b598ad9a62d3c3e14419a
Validity
Not Before: Jan 1 04:15:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b6b8c35d114dcbdb9671b7f6e189da1ee6e388ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:48:20:cc:9a:b2:c1:d4:37:09:47:da:22:02:
22:a4:ea:8a:b0:b0:8b:bb:8a:51:62:3e:09:01:f6:
3d:0c:98:92:2c:13:f9:40:67:df:ce:be:ca:5d:72:
c8:72:5a:23:6f:ff:a0:5a:d9:d3:d6:87:a2:66:c1:
d6:45:54:0a:42:a0:e9:c1:cd:97:a1:36:89:00:b7:
05:8a:3a:44:85:bb:4f:fc:2f:ca:2e:e0:86:21:df:
2a:fb:36:4e:ee:c5:6a:74:36:7f:cf:b9:90:02:6a:
8a:e1:f2:f6:17:50:3d:c2:0a:e3:43:47:e8:fc:71:
47:d3:9c:f0:e6:c5:ea:c7:0b:dd:21:97:ab:10:30:
24:4d:c1:5b:f3:c8:e3:a1:a5:f3:52:3a:39:a0:f6:
f7:6d:ee:9c:4e:2c:a8:74:7c:06:88:e5:bb:70:14:
a9:93:d3:26:07:23:18:4d:d0:97:42:78:66:70:68:
06:7c:e9:b4:35:34:a1:34:d1:83:9f:d7:b4:17:b5:
cc:bf:1f:04:97:45:de:70:d4:6d:b9:40:7e:d8:e1:
aa:31:54:ff:f8:9f:5a:df:6c:20:ce:c9:d8:e3:bf:
93:f3:a0:89:2f:e5:a2:5b:8c:64:d6:e0:34:d3:77:
ae:c9:56:08:be:91:82:81:e5:ee:fb:90:f0:59:87:
07:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:B8:C3:5D:11:4D:CB:DB:96:71:B7:F6:E1:89:DA:1E:E6:E3:88:CE
X509v3 Authority Key Identifier:
keyid:CF:02:F5:F4:8E:12:2E:55:6F:9B:59:8A:D9:A6:2D:3C:3E:14:41:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwL19I4SLlVvm1mK2aYtPD4UQZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/8ec3a9-cef2-4bf8-a06a-7e2c4b975b39/1/trjDXRFNy9uWcbf24YnaHubjiM4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/8ec3a9-cef2-4bf8-a06a-7e2c4b975b39/1/zwL19I4SLlVvm1mK2aYtPD4UQZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.74.0/23
Signature Algorithm: sha256WithRSAEncryption
c2:dd:f1:7b:e4:c6:61:a9:67:46:a1:c5:d4:6c:6d:d9:2c:f4:
89:eb:32:cf:3b:50:0b:f1:7f:f4:39:17:d4:a7:cf:91:3d:4f:
0c:dd:c6:b2:61:e9:a8:8d:d5:62:b0:e3:5a:38:14:a0:18:17:
b3:23:35:a2:e1:ef:11:a5:f9:dd:5d:97:97:8b:95:55:0d:74:
21:7b:58:3f:a1:cc:22:7f:79:08:b0:29:dc:7a:60:50:a4:0a:
91:a3:6b:b4:f0:34:f1:fd:9b:ba:54:96:02:49:e5:ac:0e:c1:
50:54:6c:3b:4a:6d:d6:af:8d:ed:22:07:1c:77:92:17:9a:f5:
9d:27:76:2c:ad:6b:59:03:0c:48:e0:84:7d:bb:a4:4c:28:d3:
fe:b3:79:42:93:4e:35:b6:0f:22:6e:05:8a:92:f5:fd:e4:31:
46:0c:ca:65:89:28:59:2f:eb:01:85:14:d1:3f:6a:b8:8c:cb:
98:6d:05:ce:d3:d2:3c:fd:a4:c5:33:01:82:c3:a7:92:9d:00:
66:cd:91:9b:be:da:40:ab:18:06:01:32:83:d3:a4:db:62:29:
f0:0b:b2:4e:bd:15:ae:84:dd:6c:e3:2d:72:1b:6a:12:01:20:
f0:28:cb:11:77:ae:08:f0:1c:07:3a:9c:b8:5b:e0:4b:fc:1c:
83:e2:25:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:35 2024 by rpki-client on console-ams.rpki-client.org