Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/28e113-3931-4d3d-b793-ecb80702a117/1/klOTGViaSSWHa2QD6ltrVDDLxE8.roa
File: klOTGViaSSWHa2QD6ltrVDDLxE8.roa (raw, json)
Hash identifier: kRW0VKi2HHegROwtgcaJBGsDhQEwPTl3EPFJngCdh+o=
Subject key identifier: 92:53:93:19:58:9A:49:25:87:6B:64:03:EA:5B:6B:54:30:CB:C4:4F
Certificate issuer: /CN=8e90bd2870050c84477a161eb090f05eb962016c
Certificate serial: 01856CB835987F64612E93519E9DAD8F3C78
Authority key identifier: 8E:90:BD:28:70:05:0C:84:47:7A:16:1E:B0:90:F0:5E:B9:62:01:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jpC9KHAFDIRHehYesJDwXrliAWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/28e113-3931-4d3d-b793-ecb80702a117/1/klOTGViaSSWHa2QD6ltrVDDLxE8.roa
Signing time: Sun 01 Jan 2023 09:44:49 +0000
ROA not before: Sun 01 Jan 2023 09:44:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1213
IP address blocks: 136.201.0.0/16 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:b8:35:98:7f:64:61:2e:93:51:9e:9d:ad:8f:3c:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e90bd2870050c84477a161eb090f05eb962016c
Validity
Not Before: Jan 1 09:44:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=92539319589a4925876b6403ea5b6b5430cbc44f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:3d:85:fc:33:2f:1e:2b:79:43:2a:6c:9d:1f:
50:b2:fe:46:6a:76:4b:df:27:b3:9d:6c:ab:23:77:
b9:0c:1f:ad:09:0a:40:2c:d4:e6:6c:6f:d2:78:54:
2d:16:aa:09:db:f5:eb:97:7d:66:3d:04:42:c0:b1:
1f:16:05:55:af:d5:0c:68:f8:c6:ef:fd:e2:7d:da:
70:f0:d2:7b:42:cd:bb:9f:13:83:f6:00:6b:ce:da:
f0:79:d1:cd:db:27:c7:92:ea:7b:69:6c:86:c0:dc:
70:75:c6:df:7c:67:58:52:1f:56:d8:66:f9:71:c4:
51:1e:71:e2:29:48:7c:f1:e3:73:44:93:c8:e6:69:
d8:a9:af:ac:df:a7:a3:d1:8e:ad:ce:7c:73:5f:2b:
48:e7:c8:29:c8:f5:2b:3b:35:4b:3d:7a:a8:34:92:
ff:9a:b0:99:87:34:d8:fb:32:9f:b5:49:48:8b:9d:
57:63:f8:37:34:dc:27:2e:0c:79:3e:ea:1f:9a:9e:
00:40:4a:2c:74:18:5e:c4:b9:84:7f:f4:95:f7:7b:
fc:24:35:fc:9d:06:97:88:2c:d1:58:30:ac:ca:b3:
b5:f7:d3:df:23:ee:a6:1a:54:3c:3d:d1:9c:e1:de:
6a:cc:3d:42:67:a3:10:bd:22:65:10:27:46:c1:2b:
e6:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:53:93:19:58:9A:49:25:87:6B:64:03:EA:5B:6B:54:30:CB:C4:4F
X509v3 Authority Key Identifier:
keyid:8E:90:BD:28:70:05:0C:84:47:7A:16:1E:B0:90:F0:5E:B9:62:01:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jpC9KHAFDIRHehYesJDwXrliAWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/28e113-3931-4d3d-b793-ecb80702a117/1/klOTGViaSSWHa2QD6ltrVDDLxE8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/28e113-3931-4d3d-b793-ecb80702a117/1/jpC9KHAFDIRHehYesJDwXrliAWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
136.201.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6f:c6:e4:93:39:d2:fb:d6:9e:b6:f8:8d:b8:c5:6c:38:13:42:
66:b3:e4:e1:fe:52:bf:ab:dd:a4:3b:36:25:e1:d7:75:86:46:
d5:47:ed:25:3f:d9:ab:80:0d:a0:c4:8d:f7:2d:d0:b7:f4:e6:
ec:ef:d1:22:b3:f2:f1:67:c6:3f:ba:8d:9d:40:e1:82:92:66:
dc:c2:61:99:24:de:a1:99:8b:74:b0:46:34:81:b3:ab:b8:9d:
34:ae:70:c1:8d:ae:5f:f8:9b:a2:98:a1:7f:4f:af:9a:5b:9e:
47:72:5c:35:29:f3:cc:a2:cc:74:6d:ff:a3:c4:9f:12:1f:c2:
ac:af:64:d8:42:2b:99:4d:b5:09:28:6f:7c:7f:6b:e8:75:c5:
90:1a:93:a4:2d:9b:6a:6d:6b:dd:5f:0f:e4:69:1f:c2:71:23:
98:55:d4:63:8f:e5:9d:f3:dd:83:ab:81:3e:d1:a6:24:28:6d:
40:2a:fd:db:38:30:e0:46:15:0a:9b:54:3e:4d:7c:67:d8:67:
10:c2:f0:fd:2d:43:db:ee:ea:56:9c:63:1e:cf:12:15:50:f3:
ca:80:16:b6:c7:f5:97:0e:02:6f:77:1a:1a:dc:bf:8d:7e:05:
51:bf:2f:c0:34:df:c4:d1:82:b5:c5:e3:7a:c0:aa:dc:54:a1:
57:9d:0d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:49 2024 by rpki-client on console-fra.rpki-client.org