Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/430cf7-4407-4247-b2da-5a10d19cf1f3/1/KUsinyONCD44DZUdQboKQOZKRIk.roa
File: KUsinyONCD44DZUdQboKQOZKRIk.roa (raw, json)
Hash identifier: TF8SyEJDLQnL1RoP58Ca+HL0zPFehqKc7gEguxJAVjM=
Subject key identifier: 29:4B:22:9F:23:8D:08:3E:38:0D:95:1D:41:BA:0A:40:E6:4A:44:89
Certificate issuer: /CN=69f295a3108f5cf1d326ffe9bf610fbcf18d72df
Certificate serial: 018CC6B8C236CFFF17CB95D2AFF5F4CA70F0
Authority key identifier: 69:F2:95:A3:10:8F:5C:F1:D3:26:FF:E9:BF:61:0F:BC:F1:8D:72:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afKVoxCPXPHTJv_pv2EPvPGNct8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/430cf7-4407-4247-b2da-5a10d19cf1f3/1/KUsinyONCD44DZUdQboKQOZKRIk.roa
Signing time: Mon 01 Jan 2024 20:30:46 +0000
ROA not before: Mon 01 Jan 2024 20:30:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 40987
IP address blocks: 185.223.44.0/24 maxlen: 24
185.223.45.0/24 maxlen: 24
185.223.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 28 Apr 2024 12:36:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:c2:36:cf:ff:17:cb:95:d2:af:f5:f4:ca:70:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f295a3108f5cf1d326ffe9bf610fbcf18d72df
Validity
Not Before: Jan 1 20:30:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=294b229f238d083e380d951d41ba0a40e64a4489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:bc:21:39:96:39:75:f9:f2:71:a2:8f:09:e8:
7d:f7:7d:3d:15:36:4e:d1:9f:5e:c3:22:67:f6:4c:
b4:82:2a:11:fa:07:83:ed:da:77:e3:15:c4:e9:8d:
26:e4:b5:a8:16:03:20:ba:fd:a1:f6:da:f5:6f:fa:
66:86:e0:60:7c:7d:16:61:ac:c9:ab:5f:b0:bd:44:
5e:2a:79:71:18:18:b8:17:b7:16:c3:ab:64:df:76:
55:15:ab:06:3b:d9:ac:e6:df:60:2e:eb:09:49:ae:
56:26:94:6d:32:cf:21:1e:45:5f:41:ed:4c:c9:fc:
f2:a7:07:11:3d:d9:54:7d:e4:bf:35:63:c0:3d:f7:
ad:5d:db:35:6a:e3:b5:af:ae:b2:43:c3:7f:b0:b1:
3b:6c:96:20:c6:03:40:76:d2:04:8a:31:fd:24:79:
6c:2d:c7:56:35:9b:b1:5b:43:3e:ac:47:b4:43:1b:
de:d1:aa:86:52:2b:46:26:f2:92:10:6d:2e:3f:7b:
7c:bd:25:07:fb:41:a8:c5:f9:d3:17:10:5a:fb:18:
63:c6:ff:5b:5b:21:fb:6a:0a:5c:e3:45:b4:b8:dd:
23:c2:15:d1:60:5c:ba:cb:18:28:5e:fd:b3:36:50:
27:4a:86:36:ee:b9:42:70:2d:5f:23:fd:8a:e3:e5:
66:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:4B:22:9F:23:8D:08:3E:38:0D:95:1D:41:BA:0A:40:E6:4A:44:89
X509v3 Authority Key Identifier:
keyid:69:F2:95:A3:10:8F:5C:F1:D3:26:FF:E9:BF:61:0F:BC:F1:8D:72:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afKVoxCPXPHTJv_pv2EPvPGNct8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/430cf7-4407-4247-b2da-5a10d19cf1f3/1/KUsinyONCD44DZUdQboKQOZKRIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/430cf7-4407-4247-b2da-5a10d19cf1f3/1/afKVoxCPXPHTJv_pv2EPvPGNct8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.223.44.0-185.223.46.255
Signature Algorithm: sha256WithRSAEncryption
a8:7d:98:3e:36:dc:9e:4a:f5:5b:e5:90:10:83:fa:c5:e1:42:
c5:49:4d:c9:e5:76:4e:47:79:47:9c:81:3b:2e:9b:83:d3:aa:
dc:a9:14:36:8e:16:46:49:32:28:29:5f:80:a7:12:a6:18:09:
c8:ed:48:cd:49:f4:0d:5c:49:f1:6e:14:30:74:0c:bf:b8:95:
12:77:a7:e3:f4:88:42:1f:47:8f:b1:63:c0:4c:4e:a7:b4:fa:
59:72:9b:23:aa:60:5b:5e:0e:3f:cb:46:b5:1f:71:dc:ec:94:
2a:d4:86:a6:ed:e4:e6:c1:18:33:90:84:c1:a6:b5:bf:0e:38:
d3:60:e0:0e:a1:4d:19:5b:d0:ba:ef:f2:8f:7d:5a:dd:6c:47:
20:91:d7:31:0a:a0:38:db:78:e6:11:31:b4:ae:7f:0b:b1:fe:
77:41:12:07:35:3e:85:83:c1:34:bb:44:2f:73:46:e8:64:fc:
72:25:08:cb:fa:bb:79:29:49:de:0f:4c:7c:c6:e0:6a:42:e4:
64:a7:ba:1a:48:cb:0c:6e:ab:2c:73:b7:52:9f:8b:f6:12:7f:
6a:ed:1b:fc:65:a4:cc:c5:9f:d7:43:38:ac:fd:26:61:56:86:
41:49:eb:68:9c:da:2e:c2:6d:de:f7:ef:c7:7d:0b:fd:e0:b3:
78:58:f2:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:26 2024 by rpki-client on console-fra.rpki-client.org