Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/KHcK6POhpBvZA7GFElpycqmRRmM.roa
File: KHcK6POhpBvZA7GFElpycqmRRmM.roa (raw, json)
Hash identifier: WhOOMWl9Qu5PZxaKfORWQMT6eqNrKa5iprk5gn+Y/iQ=
Subject key identifier: 28:77:0A:E8:F3:A1:A4:1B:D9:03:B1:85:12:5A:72:72:A9:91:46:63
Certificate issuer: /CN=1120a0ce013e2d52a6ff354a270894bb998e4547
Certificate serial: 018572557E1B1F4962A3BA5BE446A73E6DF5
Authority key identifier: 11:20:A0:CE:01:3E:2D:52:A6:FF:35:4A:27:08:94:BB:99:8E:45:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ESCgzgE-LVKm_zVKJwiUu5mORUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/KHcK6POhpBvZA7GFElpycqmRRmM.roa
Signing time: Mon 02 Jan 2023 11:54:43 +0000
ROA not before: Mon 02 Jan 2023 11:54:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200520
IP address blocks: 193.17.96.0/21 maxlen: 30
2a03:35c0::/32 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:29:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:55:7e:1b:1f:49:62:a3:ba:5b:e4:46:a7:3e:6d:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1120a0ce013e2d52a6ff354a270894bb998e4547
Validity
Not Before: Jan 2 11:54:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=28770ae8f3a1a41bd903b185125a7272a9914663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a5:06:fd:a4:23:2d:d1:3a:72:26:e1:8c:93:
55:fa:29:95:2f:65:7d:31:54:ed:49:09:8d:07:a8:
3b:63:10:2e:01:12:fc:5f:03:39:44:eb:c0:66:93:
2b:a6:10:93:02:2d:24:5e:7b:2b:67:6e:20:f1:19:
50:ec:04:a9:b1:c3:68:e1:73:a8:bc:90:d0:83:de:
73:aa:f9:cf:e0:c5:f2:3e:0d:dd:f7:63:5a:ee:d0:
7a:d4:99:9b:63:8c:fd:ee:88:84:08:46:c0:35:10:
26:1b:2f:eb:e9:59:32:f2:7a:be:53:58:23:0b:8b:
b3:6f:16:db:85:20:52:16:a7:25:09:c7:1c:50:f2:
9a:0d:c1:ac:8b:3c:c2:d4:83:dd:48:7a:6b:7c:22:
6e:fe:cb:a4:a0:16:c8:39:f1:62:45:91:0c:6f:15:
19:53:87:19:c1:14:ee:24:c7:58:e5:ec:22:b3:e4:
49:8b:f0:c3:76:d0:25:db:ee:31:46:34:de:de:74:
e2:3f:b0:f2:d9:cc:6b:ef:d7:fc:94:e0:0b:38:f6:
43:02:58:b3:ba:43:80:e1:2e:66:3c:67:2a:de:13:
fe:63:01:45:6e:b4:5b:82:57:b8:ca:30:98:54:ae:
3b:58:f1:d6:52:95:0a:e5:a9:b8:38:3d:5b:a1:6e:
25:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:77:0A:E8:F3:A1:A4:1B:D9:03:B1:85:12:5A:72:72:A9:91:46:63
X509v3 Authority Key Identifier:
keyid:11:20:A0:CE:01:3E:2D:52:A6:FF:35:4A:27:08:94:BB:99:8E:45:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESCgzgE-LVKm_zVKJwiUu5mORUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/KHcK6POhpBvZA7GFElpycqmRRmM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/ESCgzgE-LVKm_zVKJwiUu5mORUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.96.0/21
IPv6:
2a03:35c0::/32
Signature Algorithm: sha256WithRSAEncryption
79:9f:c6:eb:39:17:f3:dd:71:a2:e1:14:ae:27:bb:e9:91:15:
c9:86:c2:da:b9:59:a9:4c:9c:90:4e:65:01:28:bb:f2:05:a0:
cf:99:ae:98:98:4f:96:8e:a1:30:5d:c8:fb:60:d0:ac:00:c9:
b6:b9:fc:4d:23:62:94:c2:c8:71:b5:0d:25:f6:58:76:b7:38:
64:89:66:62:9d:cd:b1:0e:40:ac:e8:de:bd:a2:27:83:dd:ef:
66:6c:2f:0c:f4:28:2d:87:2a:89:25:ba:3b:2a:79:1d:a7:d4:
b0:3f:21:d4:08:24:a1:64:30:98:37:a4:a8:a6:74:5f:54:bc:
fa:6c:e0:6d:e8:01:53:11:ca:af:b7:6e:32:24:7d:10:3a:33:
5e:81:31:6f:54:e6:0c:fa:20:04:8a:eb:c2:af:ea:8b:0e:59:
ce:be:e2:03:81:36:93:d4:54:29:b2:4a:ac:04:ff:44:1c:0c:
cb:94:c1:23:49:09:91:0c:64:72:e5:ad:22:1b:ac:37:39:e1:
60:f0:71:83:bf:e4:67:35:6a:c5:6f:e2:2b:47:da:ad:0b:e4:
46:10:89:b6:60:55:85:11:79:8e:e9:1b:a0:8e:9d:67:c9:1d:
f8:70:cd:58:4c:9d:cd:c7:f8:10:0c:b4:9d:ed:6a:9c:c3:ce:
57:4c:30:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:13:54 2024 by rpki-client on console-ams.rpki-client.org