Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/kSk8REchjDPinJMTKItuFGZcGjs.roa
File: kSk8REchjDPinJMTKItuFGZcGjs.roa (raw, json)
Hash identifier: HfuosMw7WnHk7GWwmduC8i1PtljDXQdnh4TBJF5gZ7s=
Subject key identifier: 91:29:3C:44:47:21:8C:33:E2:9C:93:13:28:8B:6E:14:66:5C:1A:3B
Certificate issuer: /CN=9a5550e908a9b9688c29aac9895353dea836c45a
Certificate serial: 01856F5DD394490453141DFA043471238DB9
Authority key identifier: 9A:55:50:E9:08:A9:B9:68:8C:29:AA:C9:89:53:53:DE:A8:36:C4:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mlVQ6QipuWiMKarJiVNT3qg2xFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/kSk8REchjDPinJMTKItuFGZcGjs.roa
Signing time: Sun 01 Jan 2023 22:04:58 +0000
ROA not before: Sun 01 Jan 2023 22:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 185.11.126.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:d3:94:49:04:53:14:1d:fa:04:34:71:23:8d:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a5550e908a9b9688c29aac9895353dea836c45a
Validity
Not Before: Jan 1 22:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=91293c4447218c33e29c9313288b6e14665c1a3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a9:ae:e5:9b:36:3e:68:cb:d2:35:a3:2b:80:
1f:fe:e8:27:81:11:ba:da:cc:9e:88:39:52:4f:6b:
17:1b:7d:31:27:02:a8:f7:bd:9a:fd:ca:59:59:b5:
05:3a:e5:7a:dc:57:64:e6:14:7f:37:9c:e5:79:6b:
a5:da:01:28:7d:49:f7:bb:a8:ee:5e:2e:2c:41:98:
7f:f6:ae:77:3e:fc:30:f3:1f:d5:26:c8:56:a2:74:
28:a8:90:96:bc:05:d5:bb:b9:49:1d:53:66:eb:cf:
43:9e:46:76:02:c8:fe:e6:bb:a7:2b:c3:17:43:9d:
0d:ff:cf:13:a5:17:fd:12:60:b6:d5:7e:08:12:97:
9e:29:6b:cc:83:ab:f5:36:8b:c9:af:38:88:a8:19:
89:b5:24:cf:00:75:15:a1:5e:1d:58:40:96:e0:3b:
48:72:70:c8:52:da:83:aa:5c:df:f7:77:b9:60:2a:
2e:37:cf:08:69:9e:98:18:e2:9b:a1:f0:d4:0e:a8:
a2:c8:3b:cd:90:f7:1b:dc:f8:f2:80:49:bc:9d:12:
18:57:52:08:52:ba:7e:fa:c9:25:2f:08:27:1e:2f:
e9:7b:c6:60:97:8e:8b:5e:5e:f0:af:be:16:35:1a:
c5:a5:1a:86:8f:54:a9:45:bc:67:f6:b6:76:25:6f:
e5:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:29:3C:44:47:21:8C:33:E2:9C:93:13:28:8B:6E:14:66:5C:1A:3B
X509v3 Authority Key Identifier:
keyid:9A:55:50:E9:08:A9:B9:68:8C:29:AA:C9:89:53:53:DE:A8:36:C4:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mlVQ6QipuWiMKarJiVNT3qg2xFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/kSk8REchjDPinJMTKItuFGZcGjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/mlVQ6QipuWiMKarJiVNT3qg2xFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.11.126.0/24
Signature Algorithm: sha256WithRSAEncryption
10:15:8f:9a:c2:d1:aa:1d:b0:fb:2a:ce:af:7c:6d:10:bb:41:
ae:0d:b7:2b:07:a9:83:ba:11:b3:5b:45:82:62:a1:ba:e9:c2:
a2:c9:01:d6:83:c9:bd:58:4f:95:55:eb:70:37:79:0f:81:ca:
80:71:f7:74:c1:53:28:86:af:38:a9:c4:87:e1:88:fe:69:e6:
c6:27:6c:d4:e6:91:72:49:93:92:6d:e6:77:e4:53:f1:ed:5f:
14:96:1b:e9:c2:e9:18:5a:b3:87:06:7e:73:d6:85:5b:c2:ca:
49:97:10:db:90:01:97:cb:f8:88:a9:66:83:f8:96:47:ad:e6:
3f:bd:90:ca:cb:e0:a5:58:5e:1f:6c:6e:5d:05:60:f8:a9:3c:
a0:06:d7:e4:4f:87:08:ba:03:97:1f:09:5a:09:9d:ff:95:73:
39:4c:2e:1b:4b:1c:05:21:7e:6b:fe:2c:7b:48:9c:b2:2e:bb:
c0:a0:1a:3e:79:fd:93:d7:ff:39:25:3b:50:27:5b:e2:08:1a:
6b:d6:a2:93:fd:d2:fa:c8:73:56:79:66:c0:c2:b5:97:fc:77:
d3:d1:bb:64:4c:23:e3:45:2e:4d:25:30:7d:4b:8b:39:5b:de:
e3:0e:b7:cd:f2:55:b7:88:7e:33:ea:02:8f:78:ea:d3:71:97:
cb:89:af:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:11 2024 by rpki-client on console-ams.rpki-client.org