Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/kRZ4AQJ8hRtIbbX51RrgH4h0kfs.roa
File: kRZ4AQJ8hRtIbbX51RrgH4h0kfs.roa (raw, json)
Hash identifier: x3Qu3qFKLeInoW8XMcT+zpH8/tDjTFCfRI+pvx22Ay8=
Subject key identifier: 91:16:78:01:02:7C:85:1B:48:6D:B5:F9:D5:1A:E0:1F:88:74:91:FB
Certificate issuer: /CN=38ead5deb53500f2548ae1812c087e32a47fc8b4
Certificate serial: 01857127A00085954DDF131C3BDD38C45B37
Authority key identifier: 38:EA:D5:DE:B5:35:00:F2:54:8A:E1:81:2C:08:7E:32:A4:7F:C8:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OOrV3rU1APJUiuGBLAh-MqR_yLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/kRZ4AQJ8hRtIbbX51RrgH4h0kfs.roa
Signing time: Mon 02 Jan 2023 06:25:00 +0000
ROA not before: Mon 02 Jan 2023 06:25:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9085
IP address blocks: 193.42.211.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:27:a0:00:85:95:4d:df:13:1c:3b:dd:38:c4:5b:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38ead5deb53500f2548ae1812c087e32a47fc8b4
Validity
Not Before: Jan 2 06:25:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=91167801027c851b486db5f9d51ae01f887491fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:07:49:3f:20:34:08:e3:2a:e5:8c:c9:e8:6b:
87:3b:8f:eb:5f:8a:43:ce:74:17:d5:4c:dc:cc:c1:
d0:fa:ad:d6:02:43:10:c9:33:25:44:38:b8:67:87:
a4:a2:10:68:9c:c5:f5:c6:37:0f:45:53:6a:9f:1a:
2b:ed:b4:6d:99:d1:3f:88:7a:00:e0:c5:03:00:93:
19:b9:7a:96:b5:93:f5:7a:18:f1:74:8d:cd:1d:43:
55:7b:09:04:56:75:98:d6:22:87:01:d2:d0:6c:e5:
92:5d:54:66:51:79:bd:c3:96:e1:2b:b0:ab:2f:f1:
27:59:52:fc:64:0c:ba:e6:b3:98:70:8c:f3:53:54:
7c:a6:35:f9:e6:67:50:08:ef:20:9f:8d:ae:47:5c:
02:e6:75:4f:a2:5c:50:38:a0:15:a1:d1:12:7a:cf:
40:d8:f2:51:e9:c3:0c:9c:3c:32:4c:f1:2d:58:07:
0c:82:4e:a2:2e:9e:6a:1b:51:57:9f:d0:96:33:58:
32:00:7e:f9:f8:24:a5:60:5f:87:ed:b7:71:fd:7d:
fd:8f:7c:88:86:38:45:7f:05:d2:f2:b4:d6:ab:1d:
9b:a0:48:d9:3d:06:fe:2e:e3:27:73:b5:f8:00:d8:
e2:8f:ea:60:b1:2b:44:1d:00:0a:fa:d8:88:45:9b:
e2:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:16:78:01:02:7C:85:1B:48:6D:B5:F9:D5:1A:E0:1F:88:74:91:FB
X509v3 Authority Key Identifier:
keyid:38:EA:D5:DE:B5:35:00:F2:54:8A:E1:81:2C:08:7E:32:A4:7F:C8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OOrV3rU1APJUiuGBLAh-MqR_yLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/kRZ4AQJ8hRtIbbX51RrgH4h0kfs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/OOrV3rU1APJUiuGBLAh-MqR_yLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.42.211.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:96:22:f1:73:03:f4:a8:2e:de:69:5c:2b:44:fa:06:b8:63:
67:37:98:ea:16:01:98:ba:c6:d5:ce:c7:88:2b:0f:50:80:41:
a3:ed:57:72:6b:c6:09:38:82:8a:69:93:4f:50:a8:48:35:2c:
88:db:ff:1a:72:f6:bc:4c:f1:91:a8:6f:e0:00:ea:30:ff:b6:
ed:03:79:3f:3d:37:d9:2c:82:04:ec:5e:b8:ab:2a:f5:ed:83:
b0:d2:53:4d:78:ab:b0:8b:52:c5:a7:9a:f2:ca:1d:4b:d3:5e:
e9:53:1d:20:15:ee:ae:23:9b:9f:3f:c2:6a:b3:fc:05:3a:3e:
21:56:df:d5:23:bd:2c:83:4b:85:7a:81:fb:3b:00:b0:b3:55:
83:d9:ef:be:f2:15:60:3a:76:57:87:81:72:e4:fb:58:27:c0:
46:bd:c2:6d:5e:7c:ef:73:29:8e:5d:65:f9:57:1b:3d:17:55:
d4:e4:5d:c3:1f:fe:39:45:68:d7:21:73:8e:86:b9:e8:03:a1:
58:fd:f5:f4:47:04:bb:2a:03:27:70:71:b2:09:9f:d2:39:58:
59:5b:2e:7b:ad:1a:ae:76:42:cc:f3:16:1d:67:c4:c4:c7:06:
d9:4b:bc:ce:37:82:98:bb:c2:51:a7:3d:d7:85:41:74:60:b7:
4a:22:93:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:55 2024 by rpki-client on console-ams.rpki-client.org