Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/767bd0-b0ef-4114-a58e-ff86bf881648/1/kvP4tvKInlo5BUiMJUZp44uRVc0.roa
File: kvP4tvKInlo5BUiMJUZp44uRVc0.roa (raw, json)
Hash identifier: FBp9qHnzXIqm1VYB2Bc3hu1qelQeHxVR+x5kcoS+IQ8=
Subject key identifier: 92:F3:F8:B6:F2:88:9E:5A:39:05:48:8C:25:46:69:E3:8B:91:55:CD
Certificate issuer: /CN=839a9a1b7e11fde77e4e1f57ff11864cee21f165
Certificate serial: 01856C1C92E2E95EB5C7E9A94AEEA7523C30
Authority key identifier: 83:9A:9A:1B:7E:11:FD:E7:7E:4E:1F:57:FF:11:86:4C:EE:21:F1:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g5qaG34R_ed-Th9X_xGGTO4h8WU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/767bd0-b0ef-4114-a58e-ff86bf881648/1/kvP4tvKInlo5BUiMJUZp44uRVc0.roa
Signing time: Sun 01 Jan 2023 06:54:49 +0000
ROA not before: Sun 01 Jan 2023 06:54:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56985
IP address blocks: 185.111.112.0/22 maxlen: 22
195.5.172.0/24 maxlen: 24
141.105.112.0/21 maxlen: 21
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:1c:92:e2:e9:5e:b5:c7:e9:a9:4a:ee:a7:52:3c:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=839a9a1b7e11fde77e4e1f57ff11864cee21f165
Validity
Not Before: Jan 1 06:54:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=92f3f8b6f2889e5a3905488c254669e38b9155cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:f8:0a:e4:23:d3:5b:0d:b7:ec:b8:ae:93:3c:
47:8d:e3:12:cd:2f:65:1a:43:4a:ba:ed:36:df:18:
2f:c9:57:33:a3:9b:61:54:25:bd:62:2d:46:60:54:
2f:f4:2f:dc:e4:1b:f4:53:72:a5:34:89:65:ba:8f:
10:87:09:60:c6:71:83:84:b9:39:02:4e:bc:fb:e1:
1a:11:90:35:40:16:b5:60:3e:4a:f9:35:e1:c8:95:
b8:98:12:76:63:64:93:5c:83:9e:e3:17:0b:28:01:
24:9b:cf:f4:82:64:6c:82:87:30:ef:26:6d:0f:44:
07:a8:c6:e3:dc:b4:30:dd:d7:37:dc:ae:0b:ab:b1:
5c:2e:8d:01:ea:61:78:28:1a:c7:0c:13:ab:27:af:
12:b2:9c:ef:b0:81:c7:8f:ff:1b:2f:a8:10:d1:ab:
37:8c:0b:26:da:ea:38:8a:f7:a3:39:d0:c2:62:49:
b5:97:74:23:5f:98:14:ec:16:eb:3b:06:6b:8d:ec:
20:62:e8:af:43:39:5e:1b:5b:f1:2c:dd:c1:ad:aa:
9e:db:3d:b6:e8:ab:09:e5:8d:d8:18:94:7b:f7:48:
ec:10:f4:ef:ea:24:09:22:61:21:af:a1:cc:31:42:
8e:cd:85:40:57:35:84:e4:39:4e:8e:55:d5:ad:a9:
93:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:F3:F8:B6:F2:88:9E:5A:39:05:48:8C:25:46:69:E3:8B:91:55:CD
X509v3 Authority Key Identifier:
keyid:83:9A:9A:1B:7E:11:FD:E7:7E:4E:1F:57:FF:11:86:4C:EE:21:F1:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5qaG34R_ed-Th9X_xGGTO4h8WU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/767bd0-b0ef-4114-a58e-ff86bf881648/1/kvP4tvKInlo5BUiMJUZp44uRVc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/767bd0-b0ef-4114-a58e-ff86bf881648/1/g5qaG34R_ed-Th9X_xGGTO4h8WU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.105.112.0/21
185.111.112.0/22
195.5.172.0/24
Signature Algorithm: sha256WithRSAEncryption
46:06:71:54:63:99:52:df:93:0a:63:ff:1c:e3:bc:a6:06:b7:
92:ee:fb:21:c7:c4:be:46:dd:9b:28:5d:0f:dd:1c:b9:a4:34:
ad:c1:8b:63:5e:72:ce:e6:8f:4a:5c:99:58:22:39:66:66:04:
e5:fe:c2:3d:a9:a6:c0:60:e4:bc:bf:00:94:77:f3:59:6d:86:
79:d6:d8:28:5b:d5:f8:e7:00:1c:a5:16:59:18:4b:ef:ae:76:
30:1d:86:96:66:d4:7f:38:bd:45:90:89:46:bb:ba:b4:7d:b6:
fc:90:53:86:f8:57:1e:c2:1f:d8:c4:ca:cf:70:e6:b0:4d:51:
8b:b8:04:c5:1c:44:d3:df:4c:ea:77:f3:cc:8f:a7:93:45:12:
a3:9b:ea:f4:9c:e4:56:6f:8b:53:b4:e3:62:e7:cf:8d:22:00:
47:cc:29:c5:14:cd:7f:c4:ad:c9:af:b3:60:8e:e8:bb:ba:f2:
ee:96:0d:6f:bc:c1:59:48:9e:b1:e4:6d:11:28:2d:5e:cd:c1:
34:22:5c:42:28:1d:a5:b4:ff:a4:29:5d:24:02:e0:b1:6d:9c:
da:39:c9:c9:03:cb:85:c9:89:d1:e1:65:0f:f9:6a:91:05:3b:
db:0c:30:49:4d:aa:60:10:43:9e:50:35:38:55:b5:1a:39:65:
bd:50:f4:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:46 2024 by rpki-client on console-fra.rpki-client.org