Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/KtU2-WCcJoemn0IwRdSgY6Rxlvw.roa
File: KtU2-WCcJoemn0IwRdSgY6Rxlvw.roa (raw, json)
Hash identifier: IVUZS3NREBZUmWd73k6mAHi72THrSYel3p9NtxF9LR8=
Subject key identifier: 2A:D5:36:F9:60:9C:26:87:A6:9F:42:30:45:D4:A0:63:A4:71:96:FC
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01926B58C5233797BF529F9302774D05AD36
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/KtU2-WCcJoemn0IwRdSgY6Rxlvw.roa
Signing time: Tue 08 Oct 2024 08:57:12 +0000
ROA not before: Tue 08 Oct 2024 08:57:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214364
IP address blocks: 85.217.176.0/22 maxlen: 32
Validation: Failed, certificate revoked on Wed 06 Nov 2024 09:03:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:6b:58:c5:23:37:97:bf:52:9f:93:02:77:4d:05:ad:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 8 08:57:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2ad536f9609c2687a69f423045d4a063a47196fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a8:b5:aa:31:5d:0f:41:e8:7a:95:23:59:84:
5a:88:71:63:a0:ba:25:86:49:cd:45:0a:42:f1:de:
d1:87:22:d2:eb:15:8b:15:db:13:90:1c:cf:77:71:
c3:98:d0:cd:3c:5f:79:1f:69:a8:ea:fa:64:78:a4:
b8:1d:d6:71:f4:1a:0c:d3:95:e9:69:db:f4:a6:05:
00:24:95:7c:8c:af:00:47:bf:7c:9a:99:cf:5e:02:
de:94:22:03:d9:b2:5f:a7:2b:a7:5c:0d:8f:5b:53:
fd:a7:20:1c:a3:cf:0f:3f:06:00:c1:d6:6d:91:ff:
f0:9d:82:76:a8:ed:fc:a4:17:de:41:b0:32:15:ee:
e5:b3:24:fa:69:5e:36:40:05:90:f1:42:4d:01:76:
3d:5d:e6:c9:f0:6f:0f:d8:ab:ae:71:85:b7:02:e7:
7e:05:69:e0:23:70:e4:89:b1:0f:fe:0c:b7:84:e3:
df:f2:3a:eb:33:6d:f5:14:63:0e:d5:6e:66:c5:27:
87:a6:72:af:65:52:e6:c0:d4:23:96:64:79:f1:72:
c7:4c:f0:d1:b1:b3:2f:e5:67:37:a3:17:93:b0:59:
d8:da:97:66:d9:7e:f7:1c:2c:d4:d1:70:76:c1:5b:
45:f5:b8:c5:36:42:f5:9e:92:ec:67:e2:57:4e:4a:
e1:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:D5:36:F9:60:9C:26:87:A6:9F:42:30:45:D4:A0:63:A4:71:96:FC
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/KtU2-WCcJoemn0IwRdSgY6Rxlvw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.217.176.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:eb:cc:7e:54:f2:6d:d1:db:68:4f:ee:18:c1:6d:6f:58:60:
d9:f1:d3:0c:2a:e7:24:f9:37:11:8a:3d:7b:3e:0e:d8:d0:62:
38:a6:4b:6e:52:7b:b3:03:18:e1:f3:e8:d1:69:70:18:17:32:
81:79:7d:7b:9a:f7:0f:d6:e6:3a:65:65:00:5b:10:1b:b1:92:
36:ac:62:4c:42:29:64:25:d3:29:c4:63:9d:db:b0:38:e0:2d:
59:c5:6a:a8:a8:44:e8:e5:93:84:c8:e0:b8:07:21:63:f6:06:
d4:36:e3:92:df:01:6d:a1:60:e9:8b:79:83:29:e1:28:e6:7d:
8c:fd:ff:18:55:96:29:72:d1:b9:e9:61:0e:f7:08:ab:61:7e:
41:26:67:b3:f5:1d:07:dd:31:53:11:7f:0a:99:e3:1e:97:78:
61:b9:9d:dd:77:bd:31:2b:fd:f4:f5:ec:2c:e4:e2:f4:2d:3a:
eb:45:7c:c9:ae:3b:0a:03:7d:aa:0e:b1:95:77:af:3b:78:2f:
37:cb:f6:37:cc:14:61:31:a7:cd:0c:4f:1e:57:47:22:77:86:
ef:eb:8a:a9:5b:61:28:6d:45:a6:bf:5c:79:57:7a:96:57:51:
05:51:9c:9d:29:36:97:17:fe:72:88:86:43:22:2f:cb:46:e5:
84:ae:d6:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 6 10:44:27 2024 by rpki-client on console-ams.rpki-client.org