Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/e81755-4592-4f20-af70-caf951e1531d/1/KsOob9E587B3fcvlYb4a98WsGxw.roa
File: KsOob9E587B3fcvlYb4a98WsGxw.roa (raw, json)
Hash identifier: e9XsWnOJNdTbgmCfTqvi9JObSLSxb8GswsDROH4th6s=
Subject key identifier: 2A:C3:A8:6F:D1:39:F3:B0:77:7D:CB:E5:61:BE:1A:F7:C5:AC:1B:1C
Certificate issuer: /CN=730e19bf2f2fdb730232da2c4551a312ba3e2ee2
Certificate serial: 01856EB8F85DAF5A6CBDC5354624573ADA6E
Authority key identifier: 73:0E:19:BF:2F:2F:DB:73:02:32:DA:2C:45:51:A3:12:BA:3E:2E:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cw4Zvy8v23MCMtosRVGjEro-LuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/e81755-4592-4f20-af70-caf951e1531d/1/KsOob9E587B3fcvlYb4a98WsGxw.roa
Signing time: Sun 01 Jan 2023 19:04:54 +0000
ROA not before: Sun 01 Jan 2023 19:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 93.190.218.0/24 maxlen: 24
93.190.219.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:b8:f8:5d:af:5a:6c:bd:c5:35:46:24:57:3a:da:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=730e19bf2f2fdb730232da2c4551a312ba3e2ee2
Validity
Not Before: Jan 1 19:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2ac3a86fd139f3b0777dcbe561be1af7c5ac1b1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:27:52:81:41:a1:53:58:93:f7:38:a1:0b:8c:
01:05:d5:1e:33:fc:81:07:22:c6:48:90:11:ce:e5:
e6:7e:92:f1:ef:6a:ef:a7:7c:84:96:9c:a1:71:1b:
21:ca:17:f9:b0:93:7c:06:65:ee:4c:15:27:a2:a6:
ea:fe:00:52:87:02:21:e9:45:8a:22:0e:54:9e:4a:
08:e5:3a:f8:83:f2:76:cb:99:c0:d3:b0:fc:9c:cb:
33:9c:0a:00:03:5b:92:4f:b0:46:9d:fb:09:80:eb:
c8:ad:5d:27:a2:64:72:0b:3c:08:54:73:1c:b8:1a:
d9:15:21:7f:ce:15:5c:bb:d9:cd:c1:6c:1b:d5:55:
4e:92:58:86:9e:df:20:63:0b:37:e9:05:ee:92:bc:
f0:37:1c:3a:14:56:b9:b0:2e:85:1e:8c:70:c8:97:
31:62:fa:f7:02:af:4a:f8:bd:62:4b:99:54:91:8c:
45:fe:c6:55:7b:da:61:97:32:fa:99:dd:7d:5f:e3:
26:50:cd:45:ef:29:75:8e:e8:04:85:28:02:37:15:
25:89:f9:2f:a9:42:ab:f3:c6:5a:d6:44:50:fb:c1:
8d:92:6d:f0:86:b0:33:14:b1:ca:34:ef:40:06:90:
03:73:dd:5d:2e:e8:1a:96:82:24:a4:4d:6f:15:ed:
2b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:C3:A8:6F:D1:39:F3:B0:77:7D:CB:E5:61:BE:1A:F7:C5:AC:1B:1C
X509v3 Authority Key Identifier:
keyid:73:0E:19:BF:2F:2F:DB:73:02:32:DA:2C:45:51:A3:12:BA:3E:2E:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cw4Zvy8v23MCMtosRVGjEro-LuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/e81755-4592-4f20-af70-caf951e1531d/1/KsOob9E587B3fcvlYb4a98WsGxw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/e81755-4592-4f20-af70-caf951e1531d/1/cw4Zvy8v23MCMtosRVGjEro-LuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.190.218.0/23
Signature Algorithm: sha256WithRSAEncryption
dc:31:22:1b:2c:c4:93:9e:94:1a:e0:4a:bb:e7:95:b2:09:25:
42:aa:ff:f6:41:a6:5d:5a:51:ff:06:9a:eb:5a:6d:ef:ab:10:
c8:12:f9:de:68:5d:4d:88:94:7f:fe:83:bf:5e:06:8a:9b:88:
c1:17:ac:67:e5:71:26:aa:f8:df:27:3b:1b:a7:dd:7d:21:4a:
b4:d5:f6:0b:f6:69:59:06:d8:8c:39:43:ee:35:47:58:73:bf:
9d:38:47:7b:7e:d4:07:73:03:97:d7:5d:a9:a2:25:b5:f8:52:
3d:c6:a5:8d:da:a5:50:bd:d4:9f:f0:e2:9f:60:e0:ca:64:c6:
f8:1e:9d:eb:8a:56:c8:2c:74:79:e7:06:78:61:65:14:31:09:
e0:4c:cd:5d:91:e2:89:2f:0c:17:6e:0d:f3:b5:4c:9d:56:bc:
3b:a4:5f:c7:75:77:9d:da:63:2d:ee:43:dd:d8:8d:50:23:ac:
76:43:ef:4e:15:3f:5a:72:31:03:88:3b:32:64:c4:ed:50:ec:
2f:d1:49:f4:cf:bb:28:32:20:97:77:35:f3:57:03:7b:ce:6b:
d8:ce:58:cd:e2:fa:ae:a7:05:3b:b5:ef:ce:8d:26:95:30:c7:
eb:42:f9:86:14:88:87:d8:cb:06:9e:da:64:ff:89:1c:45:43:
9a:57:4a:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:16:33 2024 by rpki-client on console-ams.rpki-client.org