Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/KRPsDXWNz7kY-4HyvrunGLDzXGA.roa
File: KRPsDXWNz7kY-4HyvrunGLDzXGA.roa (raw, json)
Hash identifier: BEzxA2bBGHcwTgR4CYyNkkK5xve/xZWgtWzFLcutLzo=
Subject key identifier: 29:13:EC:0D:75:8D:CF:B9:18:FB:81:F2:BE:BB:A7:18:B0:F3:5C:60
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018CBA407FA1F7F23CE21755188C57E1C238
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/KRPsDXWNz7kY-4HyvrunGLDzXGA.roa
Signing time: Sat 30 Dec 2023 10:23:58 +0000
ROA not before: Sat 30 Dec 2023 10:23:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 399045
IP address blocks: 194.87.201.0/24 maxlen: 24
195.133.72.0/24 maxlen: 24
194.87.245.0/24 maxlen: 24
194.87.151.0/24 maxlen: 24
194.87.88.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ba:40:7f:a1:f7:f2:3c:e2:17:55:18:8c:57:e1:c2:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Dec 30 10:23:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2913ec0d758dcfb918fb81f2bebba718b0f35c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e5:f6:48:9b:24:b4:99:df:be:ab:b1:55:15:
7f:76:c2:70:2f:16:c1:7b:a7:02:fc:f1:e6:64:0d:
a3:cc:84:a4:ec:75:e2:ff:ad:55:aa:1c:3a:22:12:
4e:56:04:73:8b:7c:d1:11:7e:eb:1d:5b:6c:af:70:
94:dd:01:6d:12:ba:d9:66:bc:12:5f:e9:15:85:3e:
bb:49:f6:15:b3:b4:5c:c6:95:2f:23:61:06:ef:bc:
1e:0d:ca:9a:b7:90:e7:d9:0d:02:bb:4d:54:d7:74:
93:fa:de:47:01:9d:5a:1c:b2:36:7d:cc:57:58:d3:
b8:4a:66:e7:85:81:91:f7:7c:89:cf:e1:e6:8e:95:
59:79:a0:6b:e3:2b:11:1c:76:5e:ad:77:26:87:89:
f2:6e:f2:ea:d6:00:3d:42:98:1d:e3:97:3a:68:16:
e0:65:7e:06:98:56:8e:39:7f:9d:3b:4e:79:00:17:
69:03:44:09:b0:3b:40:e6:58:0c:7e:e4:f5:c7:7c:
f1:31:c2:ce:a3:18:f7:59:5a:fb:63:fc:35:14:5d:
4a:46:7e:50:d8:1a:71:3e:35:3b:6b:62:a9:f7:70:
c4:6a:79:48:d0:c0:c6:b9:7f:ba:b5:4e:d7:fd:83:
a5:ed:4b:75:c9:ec:dd:fc:8d:25:e2:50:21:fb:b9:
e3:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:13:EC:0D:75:8D:CF:B9:18:FB:81:F2:BE:BB:A7:18:B0:F3:5C:60
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/KRPsDXWNz7kY-4HyvrunGLDzXGA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.88.0/24
194.87.151.0/24
194.87.201.0/24
194.87.245.0/24
195.133.72.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:02:42:3b:33:32:31:3b:22:8c:e0:12:a4:16:b8:7c:2c:36:
cb:69:1e:d0:f1:f2:22:60:22:6c:ae:19:15:f8:40:a6:89:97:
c5:5a:a1:3e:af:2d:13:b0:e8:32:70:00:1b:02:46:88:40:ab:
c4:53:d2:f1:d2:85:24:62:ff:e7:0e:36:30:be:dc:de:2a:1f:
ff:23:e8:90:d5:fe:96:31:b0:30:55:86:e2:9c:04:80:22:cc:
09:40:92:dd:16:fd:f2:bd:8d:e1:10:30:63:5a:e6:ce:e1:81:
1d:97:08:89:dd:20:d8:c0:fa:38:01:9b:14:cd:59:4d:12:cc:
2a:6f:b1:70:83:6e:75:b0:b0:2e:34:39:07:88:9b:c4:13:2a:
11:55:87:09:5d:0c:0f:fa:cc:26:09:c2:ac:b2:77:12:37:23:
c5:c3:e8:65:8b:c6:dd:1d:47:16:ec:aa:6e:61:39:b7:ec:ec:
dc:63:ef:11:e5:05:25:19:dc:e2:bf:a9:d6:ec:9d:be:79:40:
02:5d:e6:05:cf:56:18:2b:0f:53:bb:cd:23:c5:04:89:5c:2d:
7f:ff:ad:90:19:83:0d:2f:cb:76:31:4f:bf:70:88:48:0f:2c:
0a:75:7c:be:95:74:7e:67:d7:6b:46:16:f2:88:f5:24:b2:55:
99:d8:b5:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:19:18 2024 by rpki-client on console-ams.rpki-client.org