Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/K9R_3fPd2S58hF1ueX872Bz_M20.roa
File: K9R_3fPd2S58hF1ueX872Bz_M20.roa (raw, json)
Hash identifier: TKbii50ogxlEXROAxIct+knKkDfIcGnt7GLEB3uCca0=
Subject key identifier: 2B:D4:7F:DD:F3:DD:D9:2E:7C:84:5D:6E:79:7F:3B:D8:1C:FF:33:6D
Certificate issuer: /CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4
Certificate serial: 01894F5AB4F01B580461359E20B20C709EEC
Authority key identifier: 35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/K9R_3fPd2S58hF1ueX872Bz_M20.roa
Signing time: Thu 13 Jul 2023 13:04:51 +0000
ROA not before: Thu 13 Jul 2023 13:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202563
IP address blocks: 94.240.15.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:4f:5a:b4:f0:1b:58:04:61:35:9e:20:b2:0c:70:9e:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4
Validity
Not Before: Jul 13 13:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2bd47fddf3ddd92e7c845d6e797f3bd81cff336d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:3d:db:68:9f:17:ec:1c:08:6a:6c:5b:35:28:
45:1b:9f:3c:b2:9a:73:e3:08:63:2c:b5:39:35:81:
2e:ac:76:71:df:c4:b6:ed:98:e7:e8:fa:53:46:af:
45:cd:b5:ed:3e:d1:a3:a8:9c:37:e1:b4:4c:65:e7:
b8:99:ed:c4:e5:c1:93:82:a0:7f:2d:8f:9f:51:e9:
01:f3:c2:66:31:99:91:18:08:01:7a:95:55:38:94:
15:57:02:b8:25:6d:19:e5:ec:5e:8e:b5:c7:3b:88:
db:c5:87:2b:30:94:c6:a9:cd:ef:9d:4c:8b:0e:e6:
80:e2:a7:a0:68:cf:8a:b4:ba:5f:2b:3d:85:e5:48:
a5:ba:4a:74:19:95:e5:a5:e8:d5:d2:bd:5c:d4:a0:
cf:e2:57:f3:9f:7b:fd:2f:28:ed:25:50:af:f0:43:
bd:ca:25:27:be:c0:e5:3f:a4:5c:52:9b:31:cb:a1:
fa:83:33:7f:51:c4:2d:fd:11:fd:04:ab:16:6c:65:
dd:49:13:d7:37:b2:03:38:58:8d:e9:69:c1:35:6c:
f0:63:0c:5c:1a:07:3f:3f:54:2e:58:d1:7c:e1:a8:
02:4d:f8:25:8b:a4:f5:0b:75:7e:6b:74:ce:74:87:
14:67:89:4c:4c:ab:f7:e0:98:b3:63:03:42:b9:2d:
e8:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:D4:7F:DD:F3:DD:D9:2E:7C:84:5D:6E:79:7F:3B:D8:1C:FF:33:6D
X509v3 Authority Key Identifier:
keyid:35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/K9R_3fPd2S58hF1ueX872Bz_M20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.240.15.0/24
Signature Algorithm: sha256WithRSAEncryption
01:95:b8:f9:9f:38:67:05:c3:d3:31:69:e4:bb:31:99:6c:c7:
51:6d:4e:0d:dc:91:85:f0:9f:bc:6d:a7:c9:0e:fc:08:02:6f:
e9:5d:99:59:88:0b:d6:8f:f3:8b:b2:31:48:fa:a7:a0:f6:c5:
c2:8b:58:29:58:d8:73:51:8d:b4:52:ee:39:b3:c7:52:5f:65:
da:cb:1b:f7:08:bc:5a:06:1a:ff:91:82:9e:18:f8:18:01:b8:
01:41:8a:41:28:e7:8a:e9:9b:c4:44:80:5a:0b:2e:7a:12:a8:
ff:d2:7c:af:ec:f2:df:60:86:4b:0c:3d:d7:47:e2:32:ee:e2:
b3:5d:ce:1a:74:a5:79:3c:c1:a6:67:04:75:e4:a5:ff:c0:2f:
a6:b4:98:26:49:cb:3e:6d:0c:1e:c1:d9:05:41:1b:c1:cb:d3:
e5:7d:1f:21:d6:83:41:46:5f:e2:4d:9d:ce:36:11:dc:00:3f:
27:3c:5c:6c:c4:4a:0c:70:f8:6a:83:0e:80:0e:f3:2d:0d:b4:
7a:49:ab:0a:a7:9e:df:ae:6d:fd:ec:cd:6e:8c:15:bb:8b:7e:
7e:cf:5f:ca:52:07:c2:c0:53:a4:db:76:87:ce:7a:bf:e9:44:
45:73:d4:09:9c:e3:40:7f:f6:02:35:3c:d7:81:82:d3:54:1d:
03:7c:63:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:18 2024 by rpki-client on console-fra.rpki-client.org