Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/ioRO_KuNSBBhHXLc8mvW3dCP8ng.roa
File: ioRO_KuNSBBhHXLc8mvW3dCP8ng.roa (raw, json)
Hash identifier: wXG17BZTK7OecTMFwZO0tLwF4ygQi/LNxQaLSvGOhk0=
Subject key identifier: 8A:84:4E:FC:AB:8D:48:10:61:1D:72:DC:F2:6B:D6:DD:D0:8F:F2:78
Certificate issuer: /CN=92f4b1c0bfbad46b811eee568a18fbaa14a9d687
Certificate serial: 01856C9CD3A6194F52096CAD8530718529CC
Authority key identifier: 92:F4:B1:C0:BF:BA:D4:6B:81:1E:EE:56:8A:18:FB:AA:14:A9:D6:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvSxwL-61GuBHu5Wihj7qhSp1oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/ioRO_KuNSBBhHXLc8mvW3dCP8ng.roa
Signing time: Sun 01 Jan 2023 09:14:55 +0000
ROA not before: Sun 01 Jan 2023 09:14:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201123
IP address blocks: 213.59.151.0/24 maxlen: 24
213.59.152.0/23 maxlen: 23
213.59.159.0/24 maxlen: 24
213.59.128.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 10 Mar 2023 08:44:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:9c:d3:a6:19:4f:52:09:6c:ad:85:30:71:85:29:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92f4b1c0bfbad46b811eee568a18fbaa14a9d687
Validity
Not Before: Jan 1 09:14:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8a844efcab8d4810611d72dcf26bd6ddd08ff278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4b:a0:66:7c:53:2e:ac:71:4a:9c:5b:c3:92:
37:48:1a:91:f5:de:63:6f:12:d0:2a:a6:71:79:9b:
68:38:e0:73:8d:8e:30:20:4c:87:22:cb:72:ff:b7:
95:d5:de:28:63:da:a5:bb:c7:61:fc:64:5a:0f:da:
89:af:a9:da:f4:c8:7f:d8:53:8f:d4:27:fc:17:43:
5a:76:c7:26:43:bf:a4:3d:a2:a1:1b:a0:30:d9:ff:
fb:63:d1:c4:7c:cb:12:44:59:88:85:05:0f:85:ae:
b9:04:ac:f1:92:13:13:6a:96:85:f4:78:1d:f2:a9:
ab:e4:90:c3:2d:e2:d1:1b:d4:86:0a:fe:f5:32:ff:
a8:f1:db:0b:52:e6:b6:54:2e:c2:bb:47:e3:0d:93:
f6:9f:44:ea:57:6c:03:f3:77:44:67:26:eb:35:f3:
89:53:4e:e8:40:4d:3f:00:b7:6d:10:96:65:ad:c0:
29:1f:de:3f:ae:06:3e:df:89:cc:0b:c4:69:e2:ec:
06:b8:d0:a5:05:5a:4d:42:f3:5e:fc:28:de:bb:b0:
11:56:9d:f2:84:7d:1b:e1:52:60:da:11:51:e1:fd:
4b:f4:bb:bc:35:54:ac:e1:43:c2:ab:75:57:1b:cf:
f3:16:f4:a9:0b:c8:d1:2d:66:c7:ca:2a:5b:bc:41:
88:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:84:4E:FC:AB:8D:48:10:61:1D:72:DC:F2:6B:D6:DD:D0:8F:F2:78
X509v3 Authority Key Identifier:
keyid:92:F4:B1:C0:BF:BA:D4:6B:81:1E:EE:56:8A:18:FB:AA:14:A9:D6:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvSxwL-61GuBHu5Wihj7qhSp1oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/ioRO_KuNSBBhHXLc8mvW3dCP8ng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.59.128.0/22
213.59.151.0-213.59.153.255
213.59.159.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:fe:d8:6d:3d:c2:ea:32:cd:06:32:20:21:91:16:a3:81:29:
a1:bc:a3:db:2c:6e:fb:41:0b:7e:03:05:6c:7d:fd:ce:e5:4d:
a3:dd:ad:0f:29:97:51:5a:4d:ce:60:56:51:1c:cc:d5:6e:d7:
f7:65:3a:e8:14:80:62:dd:05:0a:6b:94:a8:e3:77:82:99:ad:
1b:2e:7e:50:db:91:58:02:34:ee:fd:c6:41:77:83:46:b3:2b:
0b:a7:df:95:52:5d:36:4a:82:07:97:9a:b9:fc:9b:fb:38:8b:
d2:42:6e:cd:e1:fc:ad:f3:d2:ff:28:f2:bf:1e:95:7b:6e:a3:
7f:79:31:7c:8b:9e:4e:d4:e5:4a:eb:fe:73:74:32:00:bf:19:
93:58:26:e9:06:7f:39:ff:58:f3:a6:a6:05:12:67:5b:84:53:
2a:47:48:2d:b2:0e:6d:9c:f4:92:f2:02:7b:b8:8a:1a:1e:74:
45:09:6a:7b:55:f6:f5:e9:80:53:1c:8d:97:dd:ab:bf:2a:9a:
b0:bb:2b:e8:84:4e:30:e4:61:94:a2:27:14:b0:79:b0:1e:72:
b4:2f:8f:a8:ff:de:fa:aa:4d:2f:5c:22:8f:96:7b:74:a1:17:
47:10:08:52:52:87:2d:f2:42:c1:b1:80:39:a4:3b:ea:89:63:
f3:78:a8:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:13 2024 by rpki-client on console-ams.rpki-client.org