Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/c69174-c031-45fd-a9c9-11b24d113f22/1/KJi0iuXwweTnNzEY_YXhKrurjdo.roa
File: KJi0iuXwweTnNzEY_YXhKrurjdo.roa (raw, json)
Hash identifier: 4CH2gDP3HH2vvyA5e1HiI2VPSMkoCaExLBWUvcxmkn4=
Subject key identifier: 28:98:B4:8A:E5:F0:C1:E4:E7:37:31:18:FD:85:E1:2A:BB:AB:8D:DA
Certificate issuer: /CN=4844049d396176a1b5eb388548d9be3eb3e7d651
Certificate serial: 01857015189B4815F66C19586922942EF9DE
Authority key identifier: 48:44:04:9D:39:61:76:A1:B5:EB:38:85:48:D9:BE:3E:B3:E7:D6:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SEQEnTlhdqG16ziFSNm-PrPn1lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/c69174-c031-45fd-a9c9-11b24d113f22/1/KJi0iuXwweTnNzEY_YXhKrurjdo.roa
Signing time: Mon 02 Jan 2023 01:25:08 +0000
ROA not before: Mon 02 Jan 2023 01:25:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41131
IP address blocks: 91.245.208.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:30:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:15:18:9b:48:15:f6:6c:19:58:69:22:94:2e:f9:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4844049d396176a1b5eb388548d9be3eb3e7d651
Validity
Not Before: Jan 2 01:25:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2898b48ae5f0c1e4e7373118fd85e12abbab8dda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:8a:ce:3b:a3:7d:9f:47:8d:fa:ea:de:36:9c:
7f:4a:74:0a:c5:ac:73:9a:65:8a:dc:df:8a:3b:ce:
4c:d8:b6:2a:44:62:a2:45:f7:44:a6:b3:10:54:82:
14:11:bb:59:e8:38:78:c1:4c:a2:a8:a4:df:c9:09:
09:57:44:ce:5e:92:77:3c:d8:ea:fe:e3:67:77:d6:
85:ff:81:6a:03:df:e9:10:64:76:65:6c:e6:4e:5b:
9e:fd:c7:1b:50:d9:17:fc:ed:0a:4a:ba:4f:c9:66:
74:9e:5a:07:17:e4:7c:ae:cd:a6:9a:be:3b:12:4e:
18:58:76:1d:7c:20:a4:ac:22:41:67:54:17:80:db:
7c:30:f9:37:92:f0:e3:71:55:10:53:23:c7:e0:16:
53:57:ae:71:0d:e2:ee:c1:0a:9b:14:b3:f9:ce:ce:
cc:3d:48:05:7b:31:b8:df:c2:29:6e:d6:4d:14:f7:
66:10:86:e9:fc:fa:1c:b2:5a:f8:b5:87:c8:ed:ce:
e5:68:ef:ec:84:08:77:52:b6:c7:5a:7c:8b:19:ee:
3d:8e:d5:6c:83:a5:79:34:0c:6c:90:7c:5d:3c:40:
45:cd:92:77:ed:65:a0:ea:33:e9:5a:d7:ab:e0:2a:
35:9e:34:cc:7e:e3:ec:be:1d:35:ba:c2:1d:05:04:
6a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:98:B4:8A:E5:F0:C1:E4:E7:37:31:18:FD:85:E1:2A:BB:AB:8D:DA
X509v3 Authority Key Identifier:
keyid:48:44:04:9D:39:61:76:A1:B5:EB:38:85:48:D9:BE:3E:B3:E7:D6:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SEQEnTlhdqG16ziFSNm-PrPn1lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c69174-c031-45fd-a9c9-11b24d113f22/1/KJi0iuXwweTnNzEY_YXhKrurjdo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c69174-c031-45fd-a9c9-11b24d113f22/1/SEQEnTlhdqG16ziFSNm-PrPn1lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.245.208.0/24
Signature Algorithm: sha256WithRSAEncryption
92:db:99:72:ae:ed:be:1a:da:e2:ac:3d:e9:a1:ee:fb:58:9a:
e7:e4:97:48:8c:b1:5f:f1:1f:b6:1d:7c:78:2f:39:10:00:22:
b4:91:66:13:a4:68:46:e8:c8:91:c3:49:cb:e0:9c:c2:f7:e9:
a6:72:07:77:cc:cd:e0:62:7d:93:9a:ba:0a:f8:e7:1b:2d:32:
89:d3:24:bf:77:03:8c:ba:39:1a:3e:12:47:d7:b7:e4:31:1d:
d1:57:1c:2a:a3:24:c6:4b:2f:c8:79:b7:95:fb:a3:00:7b:37:
29:03:6f:0f:e6:9b:b6:9b:3a:c8:fb:76:a6:4e:04:2f:96:19:
14:f5:88:3d:17:06:d0:a8:3b:9f:ca:e9:e5:34:0d:8c:a8:26:
0a:3a:54:a1:69:c5:0a:6e:53:ba:d5:13:45:35:72:a2:46:c0:
ac:56:94:af:8c:4b:c9:e6:76:d9:e6:af:90:76:d8:e4:d5:71:
fb:c8:ca:fc:31:2c:aa:db:2a:3d:1f:f6:e1:2e:53:99:87:c7:
e8:27:cc:ed:b6:b4:66:1e:9e:7b:41:56:20:98:c3:a8:8c:54:
ec:e4:23:89:47:42:58:08:b8:7f:84:c2:40:a5:8a:c3:26:87:
1a:18:38:bf:95:8c:cb:76:eb:9a:52:b7:b8:1f:27:06:2b:83:
84:66:03:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:56:20 2024 by rpki-client on console-ams.rpki-client.org