Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/adcff5-b2b1-48df-b756-6fb4bee99e63/1/kgZfVlWh3H8gOkaDS-W7vvZhJ2k.roa
File: kgZfVlWh3H8gOkaDS-W7vvZhJ2k.roa (raw, json)
Hash identifier: CvA4RKCMG+B/rIzo41/O2z9ukAshmhhVpzrH76HFyB4=
Subject key identifier: 92:06:5F:56:55:A1:DC:7F:20:3A:46:83:4B:E5:BB:BE:F6:61:27:69
Certificate issuer: /CN=8ffdfaeb5a94eb027ec838af530f3c10b39b1cd9
Certificate serial: 01856F5DED42A6FB6E0EBE0637B474579ED7
Authority key identifier: 8F:FD:FA:EB:5A:94:EB:02:7E:C8:38:AF:53:0F:3C:10:B3:9B:1C:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j_3661qU6wJ-yDivUw88ELObHNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/adcff5-b2b1-48df-b756-6fb4bee99e63/1/kgZfVlWh3H8gOkaDS-W7vvZhJ2k.roa
Signing time: Sun 01 Jan 2023 22:05:04 +0000
ROA not before: Sun 01 Jan 2023 22:05:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 28933
IP address blocks: 212.101.128.0/18 maxlen: 18
195.47.197.0/24 maxlen: 24
2a00:1368::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:ed:42:a6:fb:6e:0e:be:06:37:b4:74:57:9e:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ffdfaeb5a94eb027ec838af530f3c10b39b1cd9
Validity
Not Before: Jan 1 22:05:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=92065f5655a1dc7f203a46834be5bbbef6612769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:c5:49:07:39:05:5c:76:16:f7:7f:3a:c7:93:
a0:5e:f9:96:6d:ee:d3:29:71:ae:56:ab:b2:be:3a:
c6:0b:07:66:6e:63:9d:e1:d2:e9:f3:2d:23:21:8e:
c7:5c:11:a9:5d:82:21:8a:9a:57:fa:d0:65:07:09:
f0:2c:cc:e1:11:69:f2:7d:4d:a3:4a:00:7f:be:f6:
a9:c8:6d:bd:21:41:9c:7d:a1:9f:41:de:13:c0:af:
e2:e2:4a:4e:85:3f:93:4c:8f:ab:cd:0e:9f:10:25:
be:2c:d9:47:38:eb:b5:ff:68:72:c0:6b:89:48:4a:
03:43:a8:78:2c:a0:5a:ab:05:0b:29:fc:64:2b:15:
8e:67:2d:91:21:f0:d4:e9:f1:dc:29:87:3c:2a:10:
33:59:8f:4c:80:47:38:85:98:bb:ec:7a:b9:cf:26:
00:20:15:09:c4:08:e5:1a:cd:e5:eb:3b:cc:7e:c8:
64:11:6c:a8:65:26:97:69:7a:02:8a:91:77:01:c0:
4b:66:da:22:54:49:4c:ea:3a:91:47:64:4e:aa:b7:
27:4d:61:da:d4:97:1f:3e:39:94:13:d5:dc:4d:8d:
25:10:13:64:96:90:8c:e6:ea:12:1e:58:ff:92:76:
d8:d3:ea:97:b8:a9:07:20:32:15:0c:17:2e:28:e6:
0e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:06:5F:56:55:A1:DC:7F:20:3A:46:83:4B:E5:BB:BE:F6:61:27:69
X509v3 Authority Key Identifier:
keyid:8F:FD:FA:EB:5A:94:EB:02:7E:C8:38:AF:53:0F:3C:10:B3:9B:1C:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j_3661qU6wJ-yDivUw88ELObHNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/adcff5-b2b1-48df-b756-6fb4bee99e63/1/kgZfVlWh3H8gOkaDS-W7vvZhJ2k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/adcff5-b2b1-48df-b756-6fb4bee99e63/1/j_3661qU6wJ-yDivUw88ELObHNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.47.197.0/24
212.101.128.0/18
IPv6:
2a00:1368::/32
Signature Algorithm: sha256WithRSAEncryption
6d:9f:87:e6:d0:4e:78:d6:26:99:d4:da:34:d3:c2:70:6e:be:
1c:b1:97:73:14:a4:28:99:ec:a5:16:6d:71:b2:37:32:9c:13:
04:d3:1b:b3:10:6a:2e:3c:ff:e8:b5:f5:37:87:53:bd:8c:ad:
f5:0a:ca:ff:1c:03:3b:78:2a:21:d7:a5:4e:6a:f0:4a:f3:c3:
83:9e:d2:6b:d6:94:ab:f7:99:ed:9b:21:7b:16:0d:2f:90:0a:
82:72:a4:c1:b4:ae:5d:e2:80:db:30:ec:f0:7e:25:4c:1f:6d:
c6:b3:8e:36:dd:12:42:7f:fe:45:64:f7:dd:f6:88:f3:9d:d1:
35:59:46:a3:98:01:08:46:02:d7:b3:d3:b5:1e:eb:87:81:34:
c1:11:a7:0a:0f:83:5d:f8:fe:b7:d6:d0:97:85:bd:7c:6d:53:
db:76:79:ae:11:36:83:19:ec:3a:4d:c5:88:9d:32:19:f3:9a:
0d:01:87:a0:07:25:50:e4:0c:75:d4:a0:c3:39:14:0f:71:b7:
02:2e:e0:3f:54:ee:95:27:f3:ad:48:9a:8b:f3:a3:7b:04:3a:
9e:03:41:ac:55:0e:10:a8:73:41:d6:aa:ca:eb:02:a4:17:a8:
7d:36:8b:cb:f2:ce:61:5b:b2:47:50:dc:ea:ac:b8:d2:47:01:
67:b1:aa:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:58 2024 by rpki-client on console-fra.rpki-client.org