Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/KXPKmJsDfIHKxCTtdGeo7LJoFgk.roa
File: KXPKmJsDfIHKxCTtdGeo7LJoFgk.roa (raw, json)
Hash identifier: z30YsVU8LlhDrCGyOzDbt2IEWrMcj1Byr6E8FBT31Qw=
Subject key identifier: 29:73:CA:98:9B:03:7C:81:CA:C4:24:ED:74:67:A8:EC:B2:68:16:09
Certificate issuer: /CN=3e43277b7ca79d0e9e07fc4a4b318041df415cb3
Certificate serial: 018992EFF4E82E5C7F05C300C3E5C18305FA
Authority key identifier: 3E:43:27:7B:7C:A7:9D:0E:9E:07:FC:4A:4B:31:80:41:DF:41:5C:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PkMne3ynnQ6eB_xKSzGAQd9BXLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/KXPKmJsDfIHKxCTtdGeo7LJoFgk.roa
Signing time: Wed 26 Jul 2023 16:02:26 +0000
ROA not before: Wed 26 Jul 2023 16:02:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51264
IP address blocks: 91.228.218.0/24 maxlen: 24
194.143.146.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 02 Dec 2023 13:04:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:92:ef:f4:e8:2e:5c:7f:05:c3:00:c3:e5:c1:83:05:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e43277b7ca79d0e9e07fc4a4b318041df415cb3
Validity
Not Before: Jul 26 16:02:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2973ca989b037c81cac424ed7467a8ecb2681609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8e:76:44:26:ff:e3:bc:1e:d0:e8:c6:b7:f6:
af:c6:a9:5f:d6:fb:c0:2c:c6:21:8b:91:3a:80:76:
5c:ba:41:6d:2e:f7:6a:c7:a6:95:e5:47:c1:ef:69:
a0:02:0c:45:f7:1f:62:74:f6:27:61:76:9a:5c:13:
8e:b1:79:89:31:e9:79:97:95:af:b2:04:f1:f6:1e:
62:62:36:fc:2e:3c:8d:c5:cd:6a:7c:dc:dc:06:4e:
1a:ea:70:fa:12:0a:b9:0a:a8:f5:da:71:18:2b:a0:
9b:b9:5d:5e:5c:c5:37:7d:4e:52:5d:0f:6e:1d:93:
8d:b3:25:d4:f5:aa:5a:e8:20:3a:59:3d:fe:05:b3:
73:f7:f7:c2:d0:f0:fa:92:98:79:7e:cf:37:75:a0:
e6:bf:33:f5:73:d4:b9:7a:db:b2:0d:ec:cf:92:8d:
a3:7a:74:9e:5f:98:b5:88:c3:a9:21:21:cc:bd:86:
27:a2:e4:96:81:26:28:6d:eb:00:84:4f:64:f1:44:
f6:1c:26:ad:33:61:86:3d:65:14:e5:8b:52:93:ae:
64:4d:f5:a2:5d:ae:0b:77:1c:22:c4:6d:37:8f:4a:
3c:91:a6:f3:5d:c0:0f:ad:27:26:b7:42:fa:9c:89:
e3:f8:94:14:b5:c8:a5:1b:95:e1:ea:1a:c2:be:44:
0f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:73:CA:98:9B:03:7C:81:CA:C4:24:ED:74:67:A8:EC:B2:68:16:09
X509v3 Authority Key Identifier:
keyid:3E:43:27:7B:7C:A7:9D:0E:9E:07:FC:4A:4B:31:80:41:DF:41:5C:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PkMne3ynnQ6eB_xKSzGAQd9BXLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/KXPKmJsDfIHKxCTtdGeo7LJoFgk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.218.0/24
194.143.146.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:5e:ca:1e:35:5a:6f:15:4f:fa:5f:43:a3:35:c7:44:bd:c1:
2a:49:80:bc:b0:63:c5:29:aa:e5:92:44:57:78:86:cf:a1:14:
40:21:d1:9e:a9:2e:29:b6:a6:b5:fd:4b:2a:b3:d5:10:1b:8c:
4a:d6:94:aa:c6:0a:8f:c1:0a:b5:6a:32:86:2e:ae:16:d5:67:
16:72:78:67:8b:5a:e9:ff:c0:c2:11:6d:77:15:2c:b5:45:e5:
49:f3:3d:76:0f:50:64:bc:05:50:dc:96:44:40:e0:d5:19:38:
92:7b:18:7d:f0:20:3e:64:ba:84:b7:b6:bc:32:1c:c3:0e:0e:
d0:f1:a7:f1:cc:9a:4e:86:81:0c:fd:19:7a:54:1c:0c:ce:60:
16:eb:f6:08:44:a4:b6:02:1e:21:f4:85:26:eb:b9:2e:f8:d1:
1e:89:22:2f:33:36:7b:f3:16:01:71:11:0d:96:05:9a:35:90:
bc:35:c9:bf:bd:32:bc:c4:3a:74:6b:40:0a:0b:a0:0f:cb:9d:
6a:fe:80:9b:49:01:8a:88:ff:92:07:83:04:88:b5:a7:e0:40:
7b:d4:0f:9a:b5:86:f4:59:9b:3a:91:53:0e:1a:c2:d4:56:bf:
d4:55:dc:29:b7:31:cd:f1:e7:12:06:f3:da:3e:cf:e7:c9:d0:
e3:f7:21:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:43 2024 by rpki-client on console-fra.rpki-client.org