Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/kl_y943UAmSFuvUy4fo4CAXAIUQ.roa
File: kl_y943UAmSFuvUy4fo4CAXAIUQ.roa (raw, json)
Hash identifier: e2AD1/300COZb6+X8WspTlLCUSNJ8510tJ7u7L0d6V8=
Subject key identifier: 92:5F:F2:F7:8D:D4:02:64:85:BA:F5:32:E1:FA:38:08:05:C0:21:44
Certificate issuer: /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial: 01856DEF74019992B616F971D593F2FF84DD
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/kl_y943UAmSFuvUy4fo4CAXAIUQ.roa
Signing time: Sun 01 Jan 2023 15:24:47 +0000
ROA not before: Sun 01 Jan 2023 15:24:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199794
IP address blocks: 195.187.159.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:32:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ef:74:01:99:92:b6:16:f9:71:d5:93:f2:ff:84:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Validity
Not Before: Jan 1 15:24:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=925ff2f78dd4026485baf532e1fa380805c02144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:21:93:8c:3c:1e:c5:5b:38:b2:31:8d:5d:f0:
d7:a0:60:49:0b:05:30:dc:64:e6:78:80:a5:a7:ff:
57:c8:6f:6f:f4:24:6f:ab:81:10:61:14:44:c6:60:
a8:58:45:0d:69:b7:f3:0d:61:75:3c:99:4c:0e:92:
b7:37:10:59:ab:f4:01:a5:fe:45:d1:b9:50:01:96:
b8:42:3b:7a:38:e3:32:09:e0:a5:28:c5:5f:42:54:
05:c6:bd:66:27:e0:f0:dd:44:ad:10:c9:f4:5c:34:
74:5c:d3:cd:84:5c:70:f5:9b:ee:47:6b:36:6e:f0:
54:3f:b9:11:9a:b5:5c:f3:de:cc:9d:a8:fd:f8:ce:
ca:80:e8:86:01:9f:36:92:2b:a3:e7:89:78:51:d2:
7f:5d:49:3e:8f:fa:22:5f:56:00:e3:6a:67:e8:5d:
1c:09:0e:33:0b:b6:10:00:bd:bd:64:da:f5:88:65:
9f:70:de:21:3d:09:db:d1:0b:7d:dd:32:5c:bf:18:
e0:8f:63:06:bb:21:46:2e:d8:d8:be:7c:75:11:6a:
2a:77:82:6f:89:16:71:29:c6:b0:92:1e:40:bb:9e:
ae:04:13:8d:33:90:66:f6:78:ea:09:43:68:f4:d0:
dd:1d:3e:9b:90:02:27:0d:71:77:ce:6c:e6:c6:3f:
f9:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:5F:F2:F7:8D:D4:02:64:85:BA:F5:32:E1:FA:38:08:05:C0:21:44
X509v3 Authority Key Identifier:
keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/kl_y943UAmSFuvUy4fo4CAXAIUQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.187.159.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:e2:43:9b:02:2f:66:90:25:98:8a:b8:a1:63:b6:ad:68:e8:
64:84:fd:9b:42:1b:12:34:fc:a3:a0:7d:42:15:d5:78:e0:d3:
23:9c:c1:9a:16:91:72:ac:5c:e5:86:90:17:9c:3c:55:68:ae:
31:c9:37:b1:63:c8:c5:c6:e2:4a:1f:c9:df:2c:89:e1:08:79:
58:03:e2:eb:fb:15:fa:e3:c9:31:8f:0c:22:39:8d:af:de:a1:
ec:8e:2f:40:b7:ba:63:07:41:1e:cd:68:c3:2c:4c:97:92:cc:
bc:29:67:1d:d8:c2:b2:71:52:7d:f7:b5:90:12:af:71:e9:9c:
d4:1a:43:c7:21:96:6a:3d:de:d5:81:32:9f:ea:7c:bb:cd:ed:
a5:a3:d2:f1:ce:57:25:92:b9:62:25:00:10:ab:3d:9c:13:f7:
bd:4f:65:89:eb:3a:bc:b5:53:3d:00:db:ae:06:00:7a:84:2d:
35:48:d8:80:93:f1:36:16:ca:0c:d8:ae:0f:63:b8:e9:5f:2b:
17:93:67:4e:b8:36:5f:fc:56:61:ad:c9:3d:bf:a7:c3:d7:90:
06:7b:96:c0:6c:e5:32:a3:a5:29:b1:bf:25:6d:19:c3:32:3f:
ed:4a:db:fd:d7:ef:75:43:b9:eb:3f:70:f2:d3:95:3e:3b:65:
c7:5b:76:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:40 2024 by rpki-client on console-fra.rpki-client.org