Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/KRKqzyW7beX6aJkB8IEeUhvcoI4.roa
File: KRKqzyW7beX6aJkB8IEeUhvcoI4.roa (raw, json)
Hash identifier: QMqLvzkcjXa6YuWKNJryTSg26ZWzzHQCcK1khkEk4fQ=
Subject key identifier: 29:12:AA:CF:25:BB:6D:E5:FA:68:99:01:F0:81:1E:52:1B:DC:A0:8E
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018A07D5C80544C5AF55BFD3361C7A97B8C9
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/KRKqzyW7beX6aJkB8IEeUhvcoI4.roa
Signing time: Fri 18 Aug 2023 08:49:25 +0000
ROA not before: Fri 18 Aug 2023 08:49:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34984
IP address blocks: 2.59.255.0/24 maxlen: 24
94.156.10.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:07:d5:c8:05:44:c5:af:55:bf:d3:36:1c:7a:97:b8:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 18 08:49:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2912aacf25bb6de5fa689901f0811e521bdca08e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d0:68:e3:1e:42:e9:38:10:da:8f:a8:60:d5:
39:13:aa:16:56:f1:30:e4:07:36:b7:7c:84:7c:84:
dd:7f:f3:67:26:e7:fb:3b:86:d8:6d:cd:ff:65:e6:
3a:21:c4:28:1c:c1:c4:bf:9b:11:e0:a0:cc:59:ab:
be:43:25:5f:70:2d:eb:89:e2:39:be:8c:f7:b5:b9:
82:c2:6d:70:e5:9e:4d:94:9e:88:19:38:dc:8e:75:
7f:1c:51:4a:a3:07:47:28:00:05:4e:e0:21:29:61:
bd:c6:3f:31:47:dd:2d:d8:02:90:08:1c:27:18:a2:
71:d5:6a:8c:04:3b:5e:70:50:0d:d7:fc:bd:94:df:
e3:f4:89:d2:4a:0c:f6:3e:f5:2c:e1:32:c7:0d:8e:
cc:54:46:06:40:46:55:29:77:16:c0:f4:74:4b:07:
75:5d:3c:5e:c7:ac:0a:be:d5:c3:1a:fd:ad:f1:bd:
ac:df:45:71:5e:35:51:35:28:00:10:d5:35:4d:cc:
63:bb:22:72:40:f6:01:39:92:68:a7:10:ce:05:c3:
e1:f7:25:01:9a:74:18:db:97:03:21:31:f8:f3:a0:
18:d8:40:a3:16:fd:40:31:af:ef:04:aa:06:9e:d5:
74:e2:9d:47:4d:74:f6:aa:71:da:93:27:38:fb:7a:
16:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:12:AA:CF:25:BB:6D:E5:FA:68:99:01:F0:81:1E:52:1B:DC:A0:8E
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/KRKqzyW7beX6aJkB8IEeUhvcoI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.255.0/24
94.156.10.0/24
Signature Algorithm: sha256WithRSAEncryption
68:59:7e:f8:a2:b3:0d:5b:ce:a7:a2:72:1b:8a:c5:22:51:47:
d5:e3:ea:66:49:e0:42:03:4b:3a:25:93:29:6c:25:20:65:70:
4f:f4:00:2c:42:a1:54:72:f3:d6:6b:86:c6:1a:c9:6b:0f:af:
1d:b7:f5:c7:fb:72:15:a3:68:56:cf:b1:33:7d:a9:8a:78:96:
4a:36:1c:bf:a1:4e:e7:80:0a:72:f7:dd:d1:7c:9d:73:51:32:
6a:9b:ef:3d:b5:08:cd:24:d3:8b:c1:10:a8:58:6f:ca:d7:ef:
f4:3c:47:61:ab:ba:26:91:51:91:3e:b5:9e:44:9c:10:70:08:
ee:e5:48:74:bf:3d:3a:e7:a7:ec:8e:fe:60:5d:be:54:6a:f8:
f2:4c:78:9b:1f:f9:f8:7e:40:92:61:18:6b:37:58:d5:0f:23:
3b:b4:fa:d7:35:83:55:33:2a:69:49:b8:d2:2e:00:01:c8:60:
97:c3:9e:94:bd:5c:81:8d:ee:d4:87:f7:13:2f:15:86:13:6d:
9c:96:0e:d0:c4:bd:66:71:cc:a9:dd:0b:3f:8b:4c:56:b1:62:
94:95:18:8b:3a:5d:6b:c7:a8:b3:01:e8:26:78:fa:ef:a7:1c:
f2:26:77:1c:b9:a7:d8:30:24:c7:91:46:1a:00:57:6a:b7:5a:
b9:39:66:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 19 19:00:10 2023 by rpki-client on console-ams.rpki-client.org