Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/KP9nGSuJYhy4lJsl3LhBaaa8J28.roa
File: KP9nGSuJYhy4lJsl3LhBaaa8J28.roa (raw, json)
Hash identifier: hlX7xusgnusGiFVdIl9EgDQaQH2yTqIfyKKrQ8bmYo8=
Subject key identifier: 28:FF:67:19:2B:89:62:1C:B8:94:9B:25:DC:B8:41:69:A6:BC:27:6F
Certificate issuer: /CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9
Certificate serial: 01856ECBA5541518E98AF7357895619CCF81
Authority key identifier: 73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/KP9nGSuJYhy4lJsl3LhBaaa8J28.roa
Signing time: Sun 01 Jan 2023 19:25:17 +0000
ROA not before: Sun 01 Jan 2023 19:25:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61060
IP address blocks: 91.244.224.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:cb:a5:54:15:18:e9:8a:f7:35:78:95:61:9c:cf:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9
Validity
Not Before: Jan 1 19:25:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=28ff67192b89621cb8949b25dcb84169a6bc276f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:37:45:d8:3b:4d:db:da:70:87:e5:ce:48:45:
6b:8e:c8:de:20:cf:e5:fb:11:f7:b0:a8:07:b9:fa:
ac:21:cd:b3:08:88:d3:ba:a1:58:87:18:91:67:2b:
e7:dc:6c:94:f8:d5:90:bd:22:9a:6e:8b:b2:23:52:
01:cd:e9:44:47:31:e6:da:90:dc:0e:0e:b2:36:e3:
65:c1:52:b4:1b:4c:5f:60:48:d7:43:e5:e6:d1:ca:
b7:ce:c9:d8:2c:ef:77:37:5d:12:3d:71:3e:56:16:
de:b6:d6:d5:2e:b4:be:f6:a1:75:ff:07:50:71:9e:
3d:2b:48:65:3e:f2:f9:d2:f4:67:36:50:36:b3:d7:
86:38:95:50:4b:0d:16:40:67:7b:d2:53:8c:96:c0:
31:42:c7:4c:a7:7a:d3:be:9d:86:88:0d:82:2b:95:
a0:06:0f:e1:a5:ed:3c:4f:c6:44:00:39:46:c0:8a:
1c:cb:29:27:9d:99:61:cc:bb:d4:37:a7:7f:a4:e4:
b2:34:bb:28:a3:8a:77:5b:fb:5d:d5:1f:3f:21:a9:
b6:ff:42:51:86:2e:bc:8f:45:fc:1f:a4:21:68:d0:
0c:a2:cd:1e:14:5d:9c:8c:61:0d:a8:6d:34:c3:41:
bc:f7:d7:d1:d6:c3:f3:97:f2:71:7f:ab:5b:d3:df:
e4:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:FF:67:19:2B:89:62:1C:B8:94:9B:25:DC:B8:41:69:A6:BC:27:6F
X509v3 Authority Key Identifier:
keyid:73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/KP9nGSuJYhy4lJsl3LhBaaa8J28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.244.224.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:e0:d5:54:92:d3:be:73:30:90:37:04:86:f3:08:0a:93:e5:
75:0b:b5:b6:34:d4:65:62:b5:fa:4a:32:c7:76:5c:cc:db:b9:
a6:fc:5e:13:fd:9f:a8:01:93:a8:0c:db:b8:5e:68:e1:0d:6e:
f9:51:ca:16:41:fd:ba:df:9f:0f:53:ea:86:31:06:2c:01:28:
9e:db:f1:f3:6c:5a:1b:e7:34:2e:ab:b9:ad:e9:05:38:46:cb:
f6:49:d9:b9:32:74:2e:23:aa:8e:6a:bb:f4:4f:fb:52:8a:3c:
7f:49:ad:15:66:43:a3:4a:f1:0f:aa:1a:ce:1d:cd:b4:92:0e:
ea:df:10:27:1d:e0:66:37:4e:67:eb:61:cc:e0:3f:4d:05:b2:
79:ff:c3:12:c4:db:1a:1a:1c:00:33:d4:51:61:d0:22:c9:46:
92:01:7d:66:75:f0:48:15:b5:65:a5:8c:6d:84:1b:16:70:82:
42:41:de:84:cc:9f:f8:75:1d:39:0a:17:5e:cc:8e:71:78:88:
90:5f:1b:e3:07:5c:80:df:90:0a:e4:7e:f3:19:51:07:b3:3b:
c0:8d:f5:21:e6:d8:a2:3a:6d:61:e0:54:9f:fb:2d:78:b1:aa:
cb:cb:81:af:8d:f4:08:cf:bd:e2:3c:f1:ee:02:24:12:a2:3e:
0a:77:3f:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:26 2024 by rpki-client on console-ams.rpki-client.org