Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/kg04CTql5YeHpl0ekmzooGYoqgQ.roa
File: kg04CTql5YeHpl0ekmzooGYoqgQ.roa (raw, json)
Hash identifier: cvrhLSsGXgim376FILovxdl9N9pupmj0QnwJ3h7TKBc=
Subject key identifier: 92:0D:38:09:3A:A5:E5:87:87:A6:5D:1E:92:6C:E8:A0:66:28:AA:04
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 018C3AACD713639F78B559F2549BF2AC7429
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/kg04CTql5YeHpl0ekmzooGYoqgQ.roa
Signing time: Tue 05 Dec 2023 15:50:54 +0000
ROA not before: Tue 05 Dec 2023 15:50:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211849
IP address blocks: 193.37.197.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:3a:ac:d7:13:63:9f:78:b5:59:f2:54:9b:f2:ac:74:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Dec 5 15:50:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=920d38093aa5e58787a65d1e926ce8a06628aa04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:08:f5:32:c2:c3:c4:ba:2b:03:f8:7b:5e:6e:
86:75:b1:a3:2d:68:40:84:55:14:6b:c6:b3:d2:b5:
05:39:97:0b:e0:6a:eb:17:0a:96:03:43:c1:85:74:
1b:69:79:ac:2a:a6:19:32:4c:c0:41:90:7a:4b:50:
87:42:a5:d0:3f:36:d8:3c:e3:0a:93:b2:d4:89:36:
78:ca:05:81:5b:41:27:0e:65:d9:a1:34:4a:08:de:
ea:b5:b9:fd:2a:33:04:41:05:8c:7a:4b:da:b2:f7:
3a:e8:7d:f1:4d:a6:1a:cf:5e:22:67:7a:d3:61:e2:
d6:9b:36:ab:45:72:9d:db:82:63:1a:39:48:8b:a6:
5c:f6:77:79:39:07:43:20:6b:08:30:03:aa:b0:5f:
24:3f:1a:53:51:c2:57:b4:48:53:64:7f:86:5c:b7:
19:73:18:1b:64:55:6c:47:d9:9b:ac:4f:d4:59:ab:
41:b1:a7:c6:2e:f0:c2:8c:99:06:0a:b3:bc:6b:bc:
1c:5c:3a:33:2b:03:9d:87:92:be:01:f8:37:4b:e8:
e6:fd:07:5a:c9:87:50:7f:fe:5a:91:04:1d:45:a5:
d8:2c:f6:90:3a:f5:f2:71:48:65:7e:ac:67:35:3e:
88:0a:6c:0c:be:e2:11:b0:17:f8:b1:81:fb:a7:2a:
bb:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:0D:38:09:3A:A5:E5:87:87:A6:5D:1E:92:6C:E8:A0:66:28:AA:04
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/kg04CTql5YeHpl0ekmzooGYoqgQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.37.197.0/24
Signature Algorithm: sha256WithRSAEncryption
62:50:fa:5f:78:18:b8:d5:b4:19:b7:03:b3:1f:a3:3c:42:a2:
26:f9:1c:96:32:4a:dc:3f:c9:eb:17:85:51:5b:25:d9:d6:5f:
b0:04:74:82:08:2e:b4:2d:b3:f9:1e:14:1b:1e:80:3e:76:50:
4a:e1:4e:66:ba:d2:53:d7:f6:8d:1b:ec:c2:4f:8e:ff:4a:bf:
d6:2e:66:a4:32:67:9c:9f:48:ee:9c:49:cd:d0:b0:3e:60:bc:
f2:f0:06:42:13:8a:0b:89:83:70:56:df:37:b9:c4:85:db:15:
5e:b0:95:27:43:f8:d1:41:95:2a:56:b0:3c:42:26:5e:27:d2:
de:09:81:d3:4b:06:eb:dd:22:8b:c0:c5:4d:8a:a9:7a:bc:90:
75:70:30:af:19:17:20:fd:4d:e8:83:12:32:f3:0a:b7:75:00:
b7:45:31:6a:92:29:6d:15:bd:6e:6a:35:82:0e:7b:15:6d:72:
37:2b:3a:b8:79:69:c5:62:fb:bb:65:3d:26:1b:60:4e:0f:30:
25:0a:3e:36:d1:55:69:b7:44:2e:62:f6:3b:74:ec:43:66:29:
5b:e6:41:15:d8:7f:61:80:d6:ba:aa:0b:ed:49:2e:fd:d7:67:
97:d2:1a:fd:87:70:7e:12:6c:db:6b:64:4d:b1:d0:61:02:f0:
b4:59:cd:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:48 2024 by rpki-client on console-ams.rpki-client.org