Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/tRdl5cr-TXARV03e2zY1bDIz74k.roa
File: tRdl5cr-TXARV03e2zY1bDIz74k.roa (raw, json)
Hash identifier: 5M1cVKsCQjWG/vQG5WUnH8OwDGFMx4FAUnH6eTrputY=
Subject key identifier: B5:17:65:E5:CA:FE:4D:70:11:57:4D:DE:DB:36:35:6C:32:33:EF:89
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 0187B799C8B8D9425108C888839F746EBCBA
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/tRdl5cr-TXARV03e2zY1bDIz74k.roa
Signing time: Tue 25 Apr 2023 08:48:41 +0000
ROA not before: Tue 25 Apr 2023 08:48:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202656
IP address blocks: 194.156.1.0/24 maxlen: 24
45.91.161.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b7:99:c8:b8:d9:42:51:08:c8:88:83:9f:74:6e:bc:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Apr 25 08:48:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b51765e5cafe4d7011574ddedb36356c3233ef89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7e:03:e9:60:54:db:0c:0e:80:5c:bf:0c:64:
3c:d8:48:a1:5b:24:30:56:5f:a2:80:5e:34:12:59:
c3:e7:51:e1:59:5e:15:a4:56:fc:a5:40:f7:b9:bf:
b1:3a:56:9e:5a:8a:c8:a0:ca:c9:ef:7d:b3:62:c2:
2a:8b:11:cd:02:cf:e4:7c:16:ad:b2:b8:bf:da:4d:
b1:f7:95:e9:08:6d:6f:55:2a:8d:73:52:1a:1c:35:
fa:89:41:8e:5e:01:cc:46:a5:f3:94:2c:e7:92:99:
af:e4:b9:2e:76:47:ee:13:e1:45:8f:48:43:6a:e6:
7b:44:e5:c1:10:5a:db:8c:c4:52:3e:50:2d:71:b1:
e0:c9:72:f3:95:db:fd:16:60:5a:dc:5a:94:5f:a7:
7d:1d:94:77:20:69:9c:d9:e8:a7:04:9a:14:75:55:
e1:5f:3a:11:c3:8b:63:33:ec:f3:aa:af:28:81:8e:
ce:c4:74:73:95:10:3c:55:73:af:65:97:3a:0d:8c:
16:75:ce:8a:49:bc:40:52:e5:15:81:1c:9f:0d:0a:
49:c2:1c:5d:cf:a1:32:52:0b:33:67:fa:36:cb:ce:
db:3f:c6:56:38:99:84:cb:9a:5f:40:5b:02:8e:bd:
ac:aa:9e:cb:82:2e:7c:d7:51:02:07:65:db:04:15:
9d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:17:65:E5:CA:FE:4D:70:11:57:4D:DE:DB:36:35:6C:32:33:EF:89
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/tRdl5cr-TXARV03e2zY1bDIz74k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.161.0/24
194.156.1.0/24
Signature Algorithm: sha256WithRSAEncryption
15:24:2e:f2:6d:a6:6a:b3:9d:07:c4:c9:8f:7b:01:6d:29:2b:
73:ec:80:fa:dc:0b:36:e6:5d:7a:14:ee:25:24:78:da:d9:85:
97:49:8e:cf:d5:30:dd:dc:5b:78:dc:22:2c:4b:dc:36:41:bf:
a7:44:91:f8:09:8f:28:75:06:b9:24:e4:6b:ae:cd:41:11:3e:
54:0e:13:65:bf:09:f2:bf:a1:00:16:89:76:15:f7:ff:04:40:
ae:02:da:c9:f5:84:b0:75:9a:a7:18:74:8c:e7:a1:e2:f0:07:
cf:be:f3:03:c9:7b:b8:b5:36:97:9f:5f:f0:a2:a7:10:70:d2:
d8:f9:2a:78:a0:27:09:46:1d:d8:70:25:ef:1e:e0:22:5a:95:
9b:4c:62:65:f0:0f:0a:0c:45:0d:fb:08:a2:23:53:36:33:9c:
c4:77:1f:6d:76:e9:c7:fc:52:38:e1:ba:18:a7:75:8a:3e:ca:
ad:94:44:74:e2:7b:3e:a1:fc:39:11:17:f8:4f:cd:d1:ab:cf:
e1:24:83:99:5b:b6:42:81:d0:7d:b4:43:d7:a8:df:80:51:50:
e4:93:2e:29:a2:b2:a5:3f:2b:20:a9:65:e7:48:a4:16:22:6b:
b6:0c:38:9c:72:52:79:18:16:0d:bf:0c:4c:ce:b5:4e:7b:2c:
1e:c6:d9:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:01 2023 by rpki-client on console-ams.rpki-client.org