Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/kCKinckaEBLRDAjB9u64XXImjhs.roa
File: kCKinckaEBLRDAjB9u64XXImjhs.roa (raw, json)
Hash identifier: ialMHCsTg7/PSqGWUyLI8dL4khtkonGp0QBf655Vfrg=
Subject key identifier: 90:22:A2:9D:C9:1A:10:12:D1:0C:08:C1:F6:EE:B8:5D:72:26:8E:1B
Certificate issuer: /CN=cc9c41a123764cf7dc0f2db9841f732a3b961343
Certificate serial: 01856FCB8CE268C297A43FC130AEA2685626
Authority key identifier: CC:9C:41:A1:23:76:4C:F7:DC:0F:2D:B9:84:1F:73:2A:3B:96:13:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zJxBoSN2TPfcDy25hB9zKjuWE0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/kCKinckaEBLRDAjB9u64XXImjhs.roa
Signing time: Mon 02 Jan 2023 00:04:48 +0000
ROA not before: Mon 02 Jan 2023 00:04:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201246
IP address blocks: 188.114.120.0/24 maxlen: 24
188.114.121.0/24 maxlen: 24
185.80.19.0/24 maxlen: 24
2a05:7980::/29 maxlen: 29
Validation: Failed, certificate revoked on Fri 10 Feb 2023 07:34:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:cb:8c:e2:68:c2:97:a4:3f:c1:30:ae:a2:68:56:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc9c41a123764cf7dc0f2db9841f732a3b961343
Validity
Not Before: Jan 2 00:04:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9022a29dc91a1012d10c08c1f6eeb85d72268e1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d0:91:68:1a:c7:43:1f:59:b9:17:96:14:68:
f4:31:8e:fe:e0:30:85:8a:f7:93:1b:cd:a5:11:33:
70:1b:c3:28:ac:73:0c:3d:51:15:02:38:e8:53:c2:
e3:c8:26:2e:76:79:47:5d:62:9a:fd:fb:59:fe:2b:
9a:b5:a0:ca:c9:9d:91:75:95:d5:73:ee:f0:cf:a5:
f6:ab:09:7b:66:91:54:f4:16:d4:b4:13:a5:46:22:
b6:5e:c3:e5:0f:8b:c3:8f:5d:45:59:fc:b3:d7:9e:
47:b1:6b:d4:25:80:ef:3e:a4:ea:21:cc:52:29:bd:
a1:7d:2d:a3:49:8e:3a:c2:30:04:82:c9:8c:a4:d6:
ea:a6:ce:a5:61:cd:3c:b0:ee:68:c7:83:88:ef:6e:
d3:97:d0:df:22:28:b5:01:dc:89:6a:4d:c4:77:c5:
21:0b:bb:f6:48:06:28:e5:89:e1:01:b6:ee:cc:fc:
1c:a1:f0:72:e5:f1:f2:37:32:48:cb:2e:bc:a0:7b:
92:8e:b7:19:6b:b2:6e:d0:a5:b7:70:02:90:97:fa:
d6:77:ff:22:3b:fe:c4:80:38:fc:fa:ad:3a:a8:b8:
ff:72:84:c9:39:4d:aa:79:4c:d2:00:4a:19:3c:18:
02:f0:92:24:8c:1c:be:fc:f6:fe:00:88:54:1c:7f:
94:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:22:A2:9D:C9:1A:10:12:D1:0C:08:C1:F6:EE:B8:5D:72:26:8E:1B
X509v3 Authority Key Identifier:
keyid:CC:9C:41:A1:23:76:4C:F7:DC:0F:2D:B9:84:1F:73:2A:3B:96:13:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zJxBoSN2TPfcDy25hB9zKjuWE0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/kCKinckaEBLRDAjB9u64XXImjhs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/zJxBoSN2TPfcDy25hB9zKjuWE0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.80.19.0/24
188.114.120.0/23
IPv6:
2a05:7980::/29
Signature Algorithm: sha256WithRSAEncryption
16:a5:05:c8:88:57:fc:20:4d:a5:b2:34:84:64:d4:25:d2:44:
e8:b9:f7:0c:79:c9:2b:9a:e7:a2:81:f7:89:5f:1e:65:d0:b4:
25:95:16:30:bc:0a:35:40:c2:d7:bd:c1:af:04:2b:6a:69:a3:
05:c6:09:e4:46:cf:28:9b:e0:65:a3:d2:d1:12:85:8e:fc:7b:
da:fe:86:d5:c6:4c:bf:86:9d:16:2e:dd:47:f6:dd:9b:4f:9a:
4f:5c:be:e2:9f:f5:44:9a:4b:22:3f:98:cd:b4:0c:6e:8e:57:
98:e7:aa:b6:4f:8e:56:c2:bf:a8:ed:79:8e:2b:4b:83:9a:a6:
90:2d:3d:4a:10:58:a0:8e:60:dd:f7:85:fe:1f:20:02:13:de:
35:81:71:96:18:d7:8c:c3:27:cf:a1:2c:f5:a5:c1:36:1e:0d:
78:b8:9a:ea:a8:76:0f:51:64:e8:d2:18:f6:e4:7a:e3:97:94:
6b:49:39:fb:24:27:77:04:4b:cb:40:0a:8e:e3:da:76:57:90:
39:bd:f1:06:b9:99:33:47:79:57:fb:6f:e5:5e:1f:22:cf:a0:
82:99:a6:2c:18:bd:45:15:29:9e:b5:ed:9f:f6:c3:de:5d:2e:
4c:8f:da:99:46:93:e2:0d:f2:e8:15:56:72:36:52:4a:ac:9f:
30:e4:0d:0d
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYVvy4ziaMKXpD/BMK6iaFYmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjOWM0MWExMjM3NjRjZjdkYzBmMmRiOTg0MWY3MzJhM2I5
NjEzNDMwHhcNMjMwMTAyMDAwNDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MDIyYTI5ZGM5MWExMDEyZDEwYzA4YzFmNmVlYjg1ZDcyMjY4ZTFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitCRaBrHQx9ZuReWFGj0MY7+4DCF
iveTG82lETNwG8MorHMMPVEVAjjoU8LjyCYudnlHXWKa/ftZ/iuataDKyZ2RdZXV
c+7wz6X2qwl7ZpFU9BbUtBOlRiK2XsPlD4vDj11FWfyz155HsWvUJYDvPqTqIcxS
Kb2hfS2jSY46wjAEgsmMpNbqps6lYc08sO5ox4OI727Tl9DfIii1AdyJak3Ed8Uh
C7v2SAYo5YnhAbbuzPwcofBy5fHyNzJIyy68oHuSjrcZa7Ju0KW3cAKQl/rWd/8i
O/7EgDj8+q06qLj/coTJOU2qeUzSAEoZPBgC8JIkjBy+/Pb+AIhUHH+UxQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFJAiop3JGhAS0QwIwfbuuF1yJo4bMB8GA1UdIwQY
MBaAFMycQaEjdkz33A8tuYQfcyo7lhNDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekp4Qm9TTjJUUGZjRHkyNWhCOXpLanVXRTBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My8wZmViODktN2Q4Yy00MzAwLTk5YjUt
MDYyNDdhOTc4ZDY5LzEva0NLaW5ja2FFQkxSREFqQjl1NjRYWEltamhzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My8wZmViODktN2Q4Yy00MzAwLTk5YjUtMDYyNDdhOTc4ZDY5
LzEvekp4Qm9TTjJUUGZjRHkyNWhCOXpLanVXRTBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAuVATAwQB
vHJ4MA0EAgACMAcDBQMqBXmAMA0GCSqGSIb3DQEBCwUAA4IBAQAWpQXIiFf8IE2l
sjSEZNQl0kToufcMeckrmueigfeJXx5l0LQllRYwvAo1QMLXvcGvBCtqaaMFxgnk
Rs8om+Blo9LREoWO/Hva/obVxky/hp0WLt1H9t2bT5pPXL7in/VEmksiP5jNtAxu
jleY56q2T45Wwr+o7XmOK0uDmqaQLT1KEFigjmDd94X+HyACE941gXGWGNeMwyfP
oSz1pcE2Hg14uJrqqHYPUWTo0hj25Hrjl5RrSTn7JCd3BEvLQAqO49p2V5A5vfEG
uZkzR3lX+2/lXh8iz6CCmaYsGL1FFSmete2f9sPeXS5Mj9qZRpPiDfLoFVZyNlJK
rJ8w5A0N
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:31 2024 by rpki-client on console-ams.rpki-client.org