Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/KOZC_ahFUGzmKweW_s9VY-MKicc.roa
File: KOZC_ahFUGzmKweW_s9VY-MKicc.roa (raw, json)
Hash identifier: j2neamIaB6Ou6Ful4/FI7Woh1UBwr1CQ1t7ZTiCufbM=
Subject key identifier: 28:E6:42:FD:A8:45:50:6C:E6:2B:07:96:FE:CF:55:63:E3:0A:89:C7
Certificate issuer: /CN=fc44297e9271c6edf064915f6180ae12690dda8b
Certificate serial: 01856E6673CC62743191F512C698409F516A
Authority key identifier: FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/KOZC_ahFUGzmKweW_s9VY-MKicc.roa
Signing time: Sun 01 Jan 2023 17:34:46 +0000
ROA not before: Sun 01 Jan 2023 17:34:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 134963
IP address blocks: 194.30.142.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:66:73:cc:62:74:31:91:f5:12:c6:98:40:9f:51:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc44297e9271c6edf064915f6180ae12690dda8b
Validity
Not Before: Jan 1 17:34:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=28e642fda845506ce62b0796fecf5563e30a89c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:95:94:38:5c:a7:29:52:d9:f2:bc:21:ee:4d:
40:21:b4:67:37:ff:e2:ee:81:80:1e:9a:37:6f:d1:
07:89:eb:97:60:d7:53:c0:9f:43:f9:48:4f:c6:ec:
14:24:5a:44:b0:09:17:d5:cc:30:0d:60:1c:ea:07:
a3:62:6f:d5:db:69:6f:f5:94:22:8b:ae:16:2e:6b:
c2:65:fe:f3:53:8c:31:fa:50:5c:5e:05:c3:87:2d:
45:3b:38:6f:97:43:54:b5:03:c9:bb:94:80:b8:fc:
2d:14:bf:f4:ba:ac:5b:a7:53:7f:0d:0e:31:b7:92:
d7:59:09:ad:69:9b:6a:df:e3:cb:f7:43:9a:42:d1:
0a:a8:d5:03:30:b9:44:05:55:a2:1d:05:4d:4d:11:
50:79:ce:47:fd:83:6c:fa:1c:89:d7:62:14:ad:6a:
52:e3:5b:29:66:2c:d7:2f:b1:a4:ec:e9:58:14:6a:
1b:a1:b4:95:f5:92:4d:34:26:0c:9b:e3:fd:21:8c:
f6:b9:13:67:a9:14:64:bc:7c:3b:b5:f9:13:1e:9e:
5b:a6:cc:23:51:b1:60:27:c0:d5:58:fe:19:ce:4d:
2c:de:a8:bf:e3:80:88:33:ea:01:e5:27:a0:dc:93:
fe:b6:38:9f:84:c5:16:15:50:d8:7b:d5:17:7a:1f:
2a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:E6:42:FD:A8:45:50:6C:E6:2B:07:96:FE:CF:55:63:E3:0A:89:C7
X509v3 Authority Key Identifier:
keyid:FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/KOZC_ahFUGzmKweW_s9VY-MKicc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.30.142.0/24
Signature Algorithm: sha256WithRSAEncryption
45:e4:e6:99:eb:07:20:16:60:7e:36:17:98:76:80:63:86:45:
c4:7c:0e:7c:08:9a:29:be:aa:db:53:a7:d2:37:04:d3:5b:46:
68:67:27:de:c2:d0:3a:27:56:34:a7:30:0a:88:ce:d5:3f:93:
7d:a2:e7:70:c3:f2:d3:53:69:e6:b1:5e:40:03:8a:4b:96:5f:
05:89:5a:ce:ed:02:7a:38:03:31:7f:10:f4:0d:92:07:e4:18:
18:31:29:a2:33:ae:55:4a:56:2a:bf:8d:50:3d:8b:97:31:fb:
2e:1a:45:93:db:cf:a8:f3:ca:bd:5c:d7:9c:41:46:da:1e:5e:
8a:5e:ed:e7:9b:e4:4a:54:ef:28:cb:4b:9c:99:6b:11:71:46:
f3:99:b5:c9:4c:c9:35:70:b5:80:3d:df:e8:eb:40:d0:2b:d7:
f4:6f:16:64:61:ec:d9:2d:39:37:db:5c:8e:c2:3f:d8:17:46:
b6:b7:1e:ec:6b:17:f6:97:b8:5d:14:87:42:c8:56:11:ea:89:
b0:3a:b0:ea:af:08:f7:58:2d:3a:fe:b7:b5:a6:a4:34:ad:ab:
23:a9:62:1b:56:d3:5e:d8:3d:60:5b:1e:67:1f:83:77:85:5b:
8f:ac:fd:95:e0:22:f4:b0:cf:b1:e5:57:97:56:a7:05:27:0d:
b8:45:68:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:10 2024 by rpki-client on console-fra.rpki-client.org