Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/3503ee-5b82-4231-b57a-1fd29b108a21/1/ty103ymBcHJJP5iVTJVo0lRP5TU.roa
File: ty103ymBcHJJP5iVTJVo0lRP5TU.roa (raw, json)
Hash identifier: qi5kAfbPd1J65i9g75u+H7ml/g1lJHSBEPFkzwxOqBM=
Subject key identifier: B7:2D:74:DF:29:81:70:72:49:3F:98:95:4C:95:68:D2:54:4F:E5:35
Certificate issuer: /CN=cb224ea38572ea0da02f49cf4d67a3cbb7c6e140
Certificate serial: 01857321FD11021B959C147428CE7020ECF2
Authority key identifier: CB:22:4E:A3:85:72:EA:0D:A0:2F:49:CF:4D:67:A3:CB:B7:C6:E1:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yyJOo4Vy6g2gL0nPTWejy7fG4UA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/3503ee-5b82-4231-b57a-1fd29b108a21/1/ty103ymBcHJJP5iVTJVo0lRP5TU.roa
Signing time: Mon 02 Jan 2023 15:38:05 +0000
ROA not before: Mon 02 Jan 2023 15:38:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34393
IP address blocks: 91.218.241.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:30:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:21:fd:11:02:1b:95:9c:14:74:28:ce:70:20:ec:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb224ea38572ea0da02f49cf4d67a3cbb7c6e140
Validity
Not Before: Jan 2 15:38:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b72d74df29817072493f98954c9568d2544fe535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:90:3b:f8:88:27:9e:5a:80:fc:ff:b5:eb:e1:
b3:43:bd:3e:dc:02:a9:3c:d7:a3:d2:6f:f1:09:6a:
a8:a8:17:d4:c9:87:44:2f:6e:81:7d:a2:90:66:89:
3f:64:a0:2a:0f:3d:e1:1e:57:20:da:fc:b7:20:d7:
14:65:b2:b9:cc:31:0f:4f:f4:a6:ba:26:9a:50:0f:
d4:91:39:f0:3f:ca:ec:2f:93:96:e0:a7:2d:9a:23:
23:7f:4f:db:b8:66:d8:fe:0c:2d:a3:1e:9d:81:72:
c7:63:15:f2:1c:20:be:b4:4d:ce:8d:52:68:5f:b3:
36:88:02:6b:25:5c:33:97:5b:18:2f:09:3d:0b:f9:
7d:55:05:c0:31:dd:14:ae:50:67:fb:47:d5:02:42:
6a:a6:25:c7:00:81:78:8a:af:f8:e7:4f:c8:11:69:
9b:a6:34:12:ff:c4:6c:e3:23:a0:6b:73:d2:e4:81:
df:ab:99:d6:78:4e:a1:d9:38:ed:38:da:09:f5:1a:
e2:dd:dc:cf:b6:3c:d7:4a:01:55:f0:2a:de:c9:88:
6f:d3:9f:b2:3a:34:52:4e:33:fa:a3:c9:b6:bf:af:
53:5b:14:0d:05:b1:f1:f2:84:1d:a5:dc:5a:12:25:
79:bb:09:6a:4d:55:ac:23:d9:e8:f2:d2:b3:c7:f7:
43:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:2D:74:DF:29:81:70:72:49:3F:98:95:4C:95:68:D2:54:4F:E5:35
X509v3 Authority Key Identifier:
keyid:CB:22:4E:A3:85:72:EA:0D:A0:2F:49:CF:4D:67:A3:CB:B7:C6:E1:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yyJOo4Vy6g2gL0nPTWejy7fG4UA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/3503ee-5b82-4231-b57a-1fd29b108a21/1/ty103ymBcHJJP5iVTJVo0lRP5TU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/3503ee-5b82-4231-b57a-1fd29b108a21/1/yyJOo4Vy6g2gL0nPTWejy7fG4UA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.218.241.0/24
Signature Algorithm: sha256WithRSAEncryption
70:d3:9f:96:08:4a:03:5a:93:5a:b0:df:2e:94:6a:12:50:db:
31:05:05:f8:db:42:f3:3d:23:e5:61:8c:ff:24:2f:d5:d2:bb:
55:c0:51:a1:21:82:92:c8:e2:e0:9b:a9:9e:73:ba:37:65:a6:
01:d8:5a:bc:de:b7:1c:d8:40:97:72:fa:88:16:e2:b5:2d:93:
eb:04:23:4f:9c:53:6e:1e:d3:43:46:84:60:88:b8:d0:05:62:
c1:d0:c7:7c:6b:be:f3:53:53:ac:ec:54:6a:7c:df:44:44:5d:
4c:7e:e9:12:c3:ac:1b:3b:de:36:56:01:9d:98:fb:d8:d8:6f:
52:a9:a5:c3:5f:41:63:77:9f:7a:e6:c1:dd:7c:7a:eb:a9:81:
ab:b8:ba:28:0c:a2:3c:2c:87:59:b3:02:84:70:8b:6e:c7:76:
e7:76:93:3a:ce:6b:fa:07:5c:10:d9:e1:68:06:2d:79:af:a8:
c1:59:b8:c7:b1:3f:73:11:a2:bf:4e:7c:ae:83:0e:54:13:0f:
20:63:3d:57:6c:ca:75:5f:e3:c9:d0:68:b7:37:45:f7:75:86:
b7:8d:2f:4d:55:22:2d:3a:0e:a0:e6:29:e3:ce:f5:fd:91:f6:
c2:29:42:98:e3:cb:33:0d:0c:90:df:96:aa:d5:99:5c:9d:a7:
25:e7:0f:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:43 2024 by rpki-client on console-ams.rpki-client.org