Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/TdMtuIaojWne4plqD8ugy2t21JQ.roa
File: TdMtuIaojWne4plqD8ugy2t21JQ.roa (raw, json)
Hash identifier: ScAOPJRa1IyNy7A0WnjyoZco2EReU/hzB66scB42xbk=
Subject key identifier: 4D:D3:2D:B8:86:A8:8D:69:DE:E2:99:6A:0F:CB:A0:CB:6B:76:D4:94
Certificate issuer: /CN=fb32e9f4aa32aba7312fab054b174dce8c515ca3
Certificate serial: 018EC89589F8FE92F62316E2436DC88F2C35
Authority key identifier: FB:32:E9:F4:AA:32:AB:A7:31:2F:AB:05:4B:17:4D:CE:8C:51:5C:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/TdMtuIaojWne4plqD8ugy2t21JQ.roa
Signing time: Wed 10 Apr 2024 15:17:07 +0000
ROA not before: Wed 10 Apr 2024 15:17:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215862
IP address blocks: 91.214.78.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 Apr 2024 08:45:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:c8:95:89:f8:fe:92:f6:23:16:e2:43:6d:c8:8f:2c:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb32e9f4aa32aba7312fab054b174dce8c515ca3
Validity
Not Before: Apr 10 15:17:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4dd32db886a88d69dee2996a0fcba0cb6b76d494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:86:cb:dd:4e:c0:8b:a9:5b:89:a7:4d:26:4b:
73:2b:f4:8f:27:e1:5b:48:26:1d:76:07:cc:15:3b:
64:bf:9f:e6:04:ad:fc:aa:9d:6b:4a:63:c5:14:33:
6a:8f:54:10:6c:13:7c:f0:51:5e:6d:2f:d6:2e:f9:
f8:31:16:b0:d3:af:c7:f8:8d:b2:d5:eb:1e:f5:21:
63:17:e9:09:66:e9:2e:1b:77:be:88:72:3f:f6:6b:
7a:a9:c5:32:1b:74:d1:e0:88:60:d4:21:4a:3b:07:
93:61:23:a6:c4:20:58:65:5f:be:ea:89:1d:3f:90:
dc:74:cc:14:03:be:b8:2b:c0:e4:95:d9:56:f1:ad:
ec:c7:a1:ca:c9:11:6e:37:e9:7f:e2:e5:da:80:9c:
7a:a7:2b:72:26:ec:7a:14:6a:0a:2e:ea:8b:e4:30:
ca:09:4c:9f:fd:f6:0d:f7:72:ea:b6:1a:f2:92:a6:
89:d4:03:47:37:8b:f6:93:14:8a:4e:ad:de:4b:0c:
0a:a1:4e:40:12:ef:b8:0f:57:09:9a:ff:76:98:43:
12:02:14:05:22:fa:df:94:a0:e9:01:54:cd:50:7b:
49:0e:d9:63:54:81:37:55:23:39:05:85:1e:1f:5d:
3e:04:11:46:12:0c:99:1f:55:12:ab:8f:94:d4:22:
5d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:D3:2D:B8:86:A8:8D:69:DE:E2:99:6A:0F:CB:A0:CB:6B:76:D4:94
X509v3 Authority Key Identifier:
keyid:FB:32:E9:F4:AA:32:AB:A7:31:2F:AB:05:4B:17:4D:CE:8C:51:5C:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/TdMtuIaojWne4plqD8ugy2t21JQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/278663-b135-4db1-a044-20624b3c157f/1/1-zLp9Koyq6cxL6sFSxdNzoxRXKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.214.78.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:8b:97:3d:e0:67:8d:88:4a:d2:85:ea:ea:37:6f:04:b6:35:
2a:c9:bd:55:13:27:f2:a2:5b:12:08:0c:d2:22:bb:29:b5:10:
46:10:ca:5c:69:e7:f0:4e:ab:19:2d:9c:8a:fa:4c:5d:ae:00:
ab:22:df:ea:cc:f2:38:1c:38:3e:e9:d0:2e:9c:91:0a:60:dd:
88:9a:32:66:8e:2b:38:e2:49:13:67:53:67:10:33:9d:b4:d7:
93:e0:5a:82:31:f4:4c:30:b2:14:c4:90:50:19:90:dc:8e:10:
b6:52:92:0f:f4:f8:f6:63:4d:f6:c1:70:95:54:13:b8:b8:03:
8e:f5:03:05:a1:77:45:4a:f7:b4:56:9e:84:6a:83:c0:bb:95:
45:17:3b:58:55:21:15:6c:87:c9:af:4f:df:35:a5:0e:c5:f2:
2e:87:fc:1d:0d:65:26:4a:a6:af:57:0b:ea:5e:f4:5b:0b:8d:
44:93:e6:63:68:36:02:3a:6f:7b:d0:3b:91:ca:4e:f1:4d:4b:
04:28:d0:35:82:80:ba:af:eb:eb:39:15:d6:85:20:44:47:94:
16:50:5d:e0:75:15:4e:d1:56:53:7c:06:be:35:ca:00:10:94:
65:5e:7e:40:ff:69:b5:0f:04:d6:0a:b8:9a:e9:68:58:a6:2c:
a9:30:5f:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 11 13:52:08 2024 by rpki-client on console-fra.rpki-client.org