Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/KCg8X3pwkYT54Qq6K8DPESBH38U.roa
File: KCg8X3pwkYT54Qq6K8DPESBH38U.roa (raw, json)
Hash identifier: yuTpfTw3DazkrWgvILr4nmkZn4MBaQ9VRGYVbVLOaMA=
Subject key identifier: 28:28:3C:5F:7A:70:91:84:F9:E1:0A:BA:2B:C0:CF:11:20:47:DF:C5
Certificate issuer: /CN=92f4b1c0bfbad46b811eee568a18fbaa14a9d687
Certificate serial: 01856C9CD64526E26B37CE06AFAAF33A373D
Authority key identifier: 92:F4:B1:C0:BF:BA:D4:6B:81:1E:EE:56:8A:18:FB:AA:14:A9:D6:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvSxwL-61GuBHu5Wihj7qhSp1oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/KCg8X3pwkYT54Qq6K8DPESBH38U.roa
Signing time: Sun 01 Jan 2023 09:14:55 +0000
ROA not before: Sun 01 Jan 2023 09:14:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204169
IP address blocks: 213.59.184.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:9c:d6:45:26:e2:6b:37:ce:06:af:aa:f3:3a:37:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92f4b1c0bfbad46b811eee568a18fbaa14a9d687
Validity
Not Before: Jan 1 09:14:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=28283c5f7a709184f9e10aba2bc0cf112047dfc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:8a:3d:c7:d6:d8:96:7e:23:81:1a:41:d5:68:
b5:e5:f2:5b:44:6a:d6:2b:ea:a0:7b:13:47:e3:26:
7b:d2:fd:0b:d4:c9:ea:25:43:e2:28:5c:e8:e3:8b:
b5:f3:4d:cd:8f:85:5f:30:80:a3:b6:62:ef:c2:e2:
7f:91:f9:fa:d8:63:16:52:f7:b9:cc:fb:cf:dc:c9:
0e:4e:20:6b:93:a6:ce:de:04:c6:1f:c5:1a:62:3b:
c1:af:42:4b:eb:dd:40:32:7a:57:7e:fd:12:eb:a4:
b0:d8:48:54:f9:e0:8f:61:57:68:4d:e0:8d:d0:78:
c7:c1:13:e8:df:e1:d4:76:0e:c1:56:00:f0:2c:7d:
fd:be:47:f1:26:a3:d2:97:bc:69:03:3d:1e:df:0c:
f4:12:52:fe:0e:d4:54:0e:80:4d:52:a1:5e:45:36:
f9:4e:21:80:e8:2e:75:92:57:5a:76:2f:6f:f1:31:
c2:6f:4c:4b:c0:e3:37:d1:60:87:3f:62:4a:6a:80:
da:bb:50:27:b7:b8:77:fb:4c:0a:83:1b:a5:7f:86:
9f:ce:e7:71:28:45:52:38:7b:5f:28:cc:1b:b3:0e:
8d:f8:c4:f7:e4:8d:38:bf:97:92:1d:5c:6e:64:44:
86:26:7f:18:48:36:9b:b7:d3:4f:1b:24:49:c7:d3:
6d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:28:3C:5F:7A:70:91:84:F9:E1:0A:BA:2B:C0:CF:11:20:47:DF:C5
X509v3 Authority Key Identifier:
keyid:92:F4:B1:C0:BF:BA:D4:6B:81:1E:EE:56:8A:18:FB:AA:14:A9:D6:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvSxwL-61GuBHu5Wihj7qhSp1oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/KCg8X3pwkYT54Qq6K8DPESBH38U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.59.184.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:de:0e:a9:ae:a7:72:09:64:c1:a6:6a:c4:f0:ce:18:80:45:
61:f0:ba:39:da:62:ed:6f:d7:12:1e:0b:90:55:3c:d4:a9:c7:
2d:4a:ca:86:6d:b9:3e:7e:87:2c:8e:bc:75:dd:e7:a8:16:38:
5f:28:70:7c:ed:5b:10:21:28:2f:33:06:5a:6b:4f:2e:c8:e5:
5c:09:2e:5a:a7:9b:29:a3:c1:fd:bd:d1:c4:a6:1c:51:11:95:
fb:d4:3c:0a:7c:41:08:24:66:20:05:bc:5f:49:bd:76:d6:7c:
7c:f8:be:af:28:c8:ba:bd:2d:c8:94:ec:9b:a9:f5:8e:42:9d:
08:ef:0d:07:7b:64:5a:a5:fa:79:0a:ee:eb:bf:20:92:43:e3:
ec:34:10:c9:0a:7e:40:41:08:f1:c5:8d:1a:1a:34:0b:21:fd:
e3:a6:36:a3:f8:ea:f7:b3:d6:c8:ba:2c:12:30:6f:9f:1e:a7:
c3:fd:f8:08:a1:a8:88:f3:4e:73:7b:e1:5c:f2:e0:71:a9:a7:
62:e0:7e:9d:de:31:0e:04:3d:d2:10:9f:4e:21:42:15:1e:31:
c4:08:17:32:8b:bf:7f:73:75:7b:1c:80:71:fc:fc:3f:12:0a:
ba:c3:36:48:bc:cf:ad:4c:71:b8:27:e6:e7:f1:39:99:50:c7:
76:70:33:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:15 2023 by rpki-client on console-fra.rpki-client.org