Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/kBnMk5ctVdVkLCij7YfhNJ9qygY.roa
File: kBnMk5ctVdVkLCij7YfhNJ9qygY.roa (raw, json)
Hash identifier: +5J+L9QHgh+cen1wRwDV3Cuy1m15P4+2YsCWJ3jSsPI=
Subject key identifier: 90:19:CC:93:97:2D:55:D5:64:2C:28:A3:ED:87:E1:34:9F:6A:CA:06
Certificate issuer: /CN=397245d0492eede59b045b5be1fd4eb9161bc417
Certificate serial: 01856F30163BAE5338D37536C42144DD60B4
Authority key identifier: 39:72:45:D0:49:2E:ED:E5:9B:04:5B:5B:E1:FD:4E:B9:16:1B:C4:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXJF0Eku7eWbBFtb4f1OuRYbxBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/kBnMk5ctVdVkLCij7YfhNJ9qygY.roa
Signing time: Sun 01 Jan 2023 21:15:00 +0000
ROA not before: Sun 01 Jan 2023 21:15:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 139659
IP address blocks: 193.134.209.0/24 maxlen: 24
193.134.210.0/24 maxlen: 24
193.134.211.0/24 maxlen: 24
193.134.208.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:30:16:3b:ae:53:38:d3:75:36:c4:21:44:dd:60:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=397245d0492eede59b045b5be1fd4eb9161bc417
Validity
Not Before: Jan 1 21:15:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9019cc93972d55d5642c28a3ed87e1349f6aca06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ad:a5:52:de:09:aa:fa:d0:82:b7:32:33:a7:
63:e3:b4:ed:8c:31:85:27:16:01:81:9b:d3:0c:8d:
97:cc:0a:76:2f:ec:fb:17:a0:5e:66:9d:5c:9e:0c:
6e:39:21:08:38:b8:bf:07:d6:90:75:ae:49:fc:9e:
63:e1:2c:14:b8:da:29:49:42:5e:f9:9a:24:87:ca:
fe:b2:dc:8b:60:ac:2f:38:f2:15:78:35:41:0a:af:
ba:53:fc:db:a8:bc:68:90:3a:7c:fc:de:3e:31:a5:
bb:75:d3:61:1a:b5:7c:88:2e:b7:86:2e:27:9a:c7:
39:34:84:09:b5:c2:99:08:f0:22:5e:fb:fc:d5:36:
46:de:cd:9a:29:a1:55:3f:ee:e3:f8:c2:65:b0:44:
ae:31:83:2c:57:4d:5d:a1:10:f3:68:00:ec:13:ea:
11:41:7c:cc:77:65:cd:73:2e:62:0c:30:36:1e:91:
4d:bd:6e:89:8f:65:03:7d:cf:36:ca:58:7f:ab:c0:
d1:7e:ea:17:62:57:96:5f:9f:2a:0e:07:76:0a:84:
c8:f3:62:5a:55:6c:6f:29:32:59:fe:ae:0f:a1:a7:
59:22:87:e9:8e:97:84:dc:ac:40:eb:c0:b0:7b:59:
89:de:27:a2:49:73:c5:de:34:f1:c6:e9:07:9c:49:
ce:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:19:CC:93:97:2D:55:D5:64:2C:28:A3:ED:87:E1:34:9F:6A:CA:06
X509v3 Authority Key Identifier:
keyid:39:72:45:D0:49:2E:ED:E5:9B:04:5B:5B:E1:FD:4E:B9:16:1B:C4:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXJF0Eku7eWbBFtb4f1OuRYbxBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/kBnMk5ctVdVkLCij7YfhNJ9qygY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.134.208.0/22
Signature Algorithm: sha256WithRSAEncryption
69:ee:72:f8:b6:9b:cd:19:da:68:3b:56:f5:b4:9f:2d:48:f9:
55:c7:4d:49:cb:bc:95:b4:e3:b5:51:d5:a2:f0:75:e9:a9:47:
0b:93:ff:48:e2:66:e0:17:67:38:13:1a:43:06:0e:73:5d:ee:
ad:e9:04:48:04:98:18:d0:5c:77:86:35:43:c0:2f:0d:77:7d:
7f:8b:8b:b9:c6:19:3f:49:21:a5:f6:14:4c:1d:ed:e6:d0:30:
bf:51:0c:74:cd:99:88:05:92:13:dc:b3:79:a6:bb:24:31:d7:
d5:0d:e3:dc:95:f7:75:d1:e5:e6:c4:04:7f:c7:c6:23:8f:17:
d1:84:11:23:06:e1:aa:05:bf:ba:94:50:f0:8c:12:70:6a:0e:
75:53:45:bd:54:1f:dd:99:12:d3:e8:e1:e9:04:95:8f:a0:c6:
fe:ea:d5:ba:b9:13:65:b5:b6:b6:89:43:96:09:0c:65:a0:00:
7b:4c:0b:76:c8:d8:de:8c:bf:e3:9b:e4:e2:a2:78:2a:60:6b:
14:a1:0a:7a:13:54:bf:ea:36:25:b2:d2:89:66:b3:ce:0d:0e:
cf:17:50:8a:e0:8d:39:83:fb:ea:06:34:07:3e:6a:42:f1:96:
98:d1:a3:40:4b:a5:db:e4:d0:cc:84:85:77:31:6d:07:44:a1:
f6:5e:0e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:56:22 2024 by rpki-client on console-ams.rpki-client.org