Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/KtGUu0rYF8em9PknAOPnK0Fun6g.roa
File: KtGUu0rYF8em9PknAOPnK0Fun6g.roa (raw, json)
Hash identifier: M449wwFe7Tth3ql5CCaj6Yv+Glfa/g2X89sKhsWedPk=
Subject key identifier: 2A:D1:94:BB:4A:D8:17:C7:A6:F4:F9:27:00:E3:E7:2B:41:6E:9F:A8
Certificate issuer: /CN=75386a6fae1e55f576a405bd74b7f08e7a6c4653
Certificate serial: 018CC3B68089B486AF447D5792A6B7DCA44B
Authority key identifier: 75:38:6A:6F:AE:1E:55:F5:76:A4:05:BD:74:B7:F0:8E:7A:6C:46:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dThqb64eVfV2pAW9dLfwjnpsRlM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/KtGUu0rYF8em9PknAOPnK0Fun6g.roa
Signing time: Mon 01 Jan 2024 06:29:26 +0000
ROA not before: Mon 01 Jan 2024 06:29:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216288
IP address blocks: 194.147.44.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 10 Aug 2024 10:04:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:80:89:b4:86:af:44:7d:57:92:a6:b7:dc:a4:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75386a6fae1e55f576a405bd74b7f08e7a6c4653
Validity
Not Before: Jan 1 06:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2ad194bb4ad817c7a6f4f92700e3e72b416e9fa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4f:15:81:71:46:8e:ef:5f:7c:82:8d:b3:cf:
68:de:d2:13:b4:e2:f9:07:e6:39:f5:5d:0b:54:59:
90:ea:16:75:6a:ba:3e:a7:87:36:11:00:de:b5:fa:
e8:45:be:c6:a8:e4:ef:91:54:9a:03:3e:01:61:fe:
e2:c4:25:68:cb:d1:48:c2:eb:ad:2d:8d:a1:6a:69:
cc:96:a3:2c:4c:e3:bb:05:19:cb:ad:55:14:a6:80:
fe:e6:b3:1a:e1:f4:83:27:58:4b:78:8f:35:78:b4:
7a:26:d1:b2:c4:3c:30:a5:2e:d8:ae:5a:9d:29:94:
83:2e:0b:6f:26:20:de:04:d5:56:27:f9:d2:de:09:
5b:31:75:2e:e9:9a:20:21:59:0a:bd:de:53:46:78:
1c:35:68:31:9f:68:df:0c:20:2e:58:52:79:33:89:
c0:b0:e4:01:a4:c8:31:6e:eb:fc:42:e4:08:ef:80:
8c:7e:e2:97:6d:37:90:0d:0c:8c:76:1a:85:06:c9:
f4:45:a1:5f:37:80:73:fe:b0:65:40:02:c9:63:ed:
a4:a2:1a:ce:a0:8e:27:66:ee:cf:6c:df:fa:1c:2c:
6a:96:96:a3:b7:7b:43:56:43:e6:da:9e:7f:a3:e1:
c3:71:08:88:65:d3:79:27:0b:be:fb:8d:87:7f:a5:
02:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:D1:94:BB:4A:D8:17:C7:A6:F4:F9:27:00:E3:E7:2B:41:6E:9F:A8
X509v3 Authority Key Identifier:
keyid:75:38:6A:6F:AE:1E:55:F5:76:A4:05:BD:74:B7:F0:8E:7A:6C:46:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dThqb64eVfV2pAW9dLfwjnpsRlM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/KtGUu0rYF8em9PknAOPnK0Fun6g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/dThqb64eVfV2pAW9dLfwjnpsRlM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.44.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:3a:13:9c:a6:11:db:7f:24:e2:6a:43:3b:89:6d:5e:b5:28:
f2:5d:f8:82:90:39:10:1c:b1:14:8c:56:d8:87:89:55:c1:6d:
3e:bf:e9:9e:d5:53:6a:aa:16:8b:08:26:13:9d:4f:3f:d0:7e:
05:2e:e1:aa:a8:0c:d1:09:d8:cc:ca:a1:97:3c:61:35:33:41:
07:9f:8a:42:6d:bc:49:bc:e2:31:f1:cb:7c:01:4e:03:65:b9:
88:f1:ab:20:91:cf:cf:9d:ec:fe:e8:68:1b:b7:d1:f7:30:f6:
b4:75:08:68:9b:79:34:06:e5:a5:6d:3e:08:b9:32:3a:d1:e4:
1c:0d:24:ed:0d:e9:2c:51:ec:f2:55:61:bf:6b:cd:ec:24:c9:
e0:01:a8:4b:21:88:79:0a:03:8d:e0:10:8f:2c:6d:86:0d:98:
a3:7a:3e:e5:4e:f1:f2:b3:16:87:3f:1a:ca:92:d7:4f:c0:97:
25:11:b0:b4:da:d5:76:57:4d:eb:71:bb:e7:00:95:c7:54:2c:
7c:65:51:41:51:65:6f:71:f9:10:18:76:5e:17:7f:38:14:3c:
f3:73:37:7c:a0:7f:05:7a:3d:e6:ad:15:b5:91:07:3c:6d:20:
3b:c1:b5:2c:75:82:c8:c0:9b:bc:20:47:1f:39:86:93:61:c2:
e0:12:b7:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 10 12:53:46 2024 by rpki-client on console-fra.rpki-client.org