Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/068cb9-6cba-453d-858a-c5bbf95f8584/1/ttpI9Jc2qw-g09T1TPN70gKAFbM.roa
File: ttpI9Jc2qw-g09T1TPN70gKAFbM.roa (raw, json)
Hash identifier: FZgnwNyF3tSpnVqRtWHrvhuL2A9w+7IhQ4+q5Pp5VHM=
Subject key identifier: B6:DA:48:F4:97:36:AB:0F:A0:D3:D4:F5:4C:F3:7B:D2:02:80:15:B3
Certificate issuer: /CN=700c030930a9d2e4da88d81852a44c3f78bfb440
Certificate serial: 0188B49EC20565458C54462315A92F43C483
Authority key identifier: 70:0C:03:09:30:A9:D2:E4:DA:88:D8:18:52:A4:4C:3F:78:BF:B4:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cAwDCTCp0uTaiNgYUqRMP3i_tEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/068cb9-6cba-453d-858a-c5bbf95f8584/1/ttpI9Jc2qw-g09T1TPN70gKAFbM.roa
Signing time: Tue 13 Jun 2023 11:58:03 +0000
ROA not before: Tue 13 Jun 2023 11:58:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207009
IP address blocks: 209.251.196.0/23 maxlen: 23
209.251.195.0/24 maxlen: 24
2a06:6747::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b4:9e:c2:05:65:45:8c:54:46:23:15:a9:2f:43:c4:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=700c030930a9d2e4da88d81852a44c3f78bfb440
Validity
Not Before: Jun 13 11:58:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b6da48f49736ab0fa0d3d4f54cf37bd2028015b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:21:03:73:3a:f0:8a:e2:d4:9c:90:95:66:dd:
e4:c8:28:24:00:cb:46:1f:44:c9:66:82:ed:ef:04:
c2:8f:f8:5f:f1:b2:fa:c2:d4:bc:f9:b1:3b:f6:1a:
28:6a:e1:9d:69:ab:d0:22:20:95:6e:03:ed:a5:67:
5d:79:9b:a4:ee:e0:b3:df:f4:84:8d:89:89:98:12:
d8:23:8c:62:b2:f7:85:1d:d3:f8:04:95:18:b5:e6:
83:87:3a:05:03:b1:00:37:b2:9d:ec:63:64:3b:4e:
77:06:05:70:37:77:ba:7b:4e:15:16:58:90:82:ba:
58:28:e6:3a:c9:53:a5:8e:38:47:36:bd:b2:50:7a:
18:ad:10:a1:8d:91:21:4a:e9:bb:8c:e9:e9:f1:45:
54:4a:d3:de:97:46:9d:2a:34:e9:32:11:d0:9b:23:
10:ba:17:75:6a:c9:3f:7d:2c:99:3a:db:b6:66:a4:
31:c7:87:54:f6:63:b8:95:41:dd:e9:e3:a4:72:51:
a7:e2:ca:9d:4a:2f:05:30:bc:31:e8:b0:d2:63:35:
8b:0b:d8:27:90:1f:26:4b:41:cd:ba:8b:85:64:74:
fc:ad:f4:55:c4:ae:7a:72:91:69:e2:9c:a0:52:3b:
c4:7a:ab:cb:80:d6:0a:8a:fb:a9:91:fc:ce:57:26:
1c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:DA:48:F4:97:36:AB:0F:A0:D3:D4:F5:4C:F3:7B:D2:02:80:15:B3
X509v3 Authority Key Identifier:
keyid:70:0C:03:09:30:A9:D2:E4:DA:88:D8:18:52:A4:4C:3F:78:BF:B4:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cAwDCTCp0uTaiNgYUqRMP3i_tEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/068cb9-6cba-453d-858a-c5bbf95f8584/1/ttpI9Jc2qw-g09T1TPN70gKAFbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/068cb9-6cba-453d-858a-c5bbf95f8584/1/cAwDCTCp0uTaiNgYUqRMP3i_tEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
209.251.195.0-209.251.197.255
IPv6:
2a06:6747::/32
Signature Algorithm: sha256WithRSAEncryption
b6:c6:08:12:8f:44:cb:17:72:19:40:26:bd:27:45:d7:b8:92:
4d:84:ed:88:df:bb:b0:9a:0b:8d:4f:58:0f:c0:12:9f:72:2b:
05:fd:ec:ea:24:1d:0e:bd:ba:5c:f4:e6:00:94:f5:b1:5d:96:
95:43:8e:ae:57:43:71:e9:da:7f:24:22:97:5a:99:5f:25:20:
09:b3:33:5e:70:01:6c:08:17:ae:5d:c9:94:87:67:45:7e:13:
e5:d0:3e:f9:8d:a1:8c:8f:61:65:fb:47:05:a6:7c:73:b9:9b:
5f:2e:fe:bd:41:44:92:8e:f6:d8:9b:e1:8a:83:e9:70:b6:1e:
95:d3:e1:eb:f0:06:f1:62:03:34:a4:00:4a:ba:db:2d:ac:13:
2b:bb:85:65:f8:57:fc:4f:ee:39:31:67:15:a2:ee:69:10:c9:
ce:94:e5:cc:e7:5d:02:34:f5:04:bc:3f:3f:ea:8f:ca:3f:04:
6b:58:7e:58:9d:38:a9:9e:b9:f1:9f:82:bb:0c:f6:8d:a8:1b:
5c:b5:f6:e8:d0:23:d9:53:5c:54:b7:b2:06:73:c2:8c:ec:81:
77:44:78:90:f3:26:c1:ea:bc:98:b3:b5:a6:c0:fa:f4:a0:77:
14:46:d7:7b:fe:21:3a:55:41:1e:48:23:f1:be:86:a6:05:61:
65:5d:7a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 14:09:41 2024 by rpki-client on console.sobornost.net