Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/KtrVXhL6VRMXWUznUUNb7V1eHbo.roa
File: KtrVXhL6VRMXWUznUUNb7V1eHbo.roa (raw, json)
Hash identifier: 4qBjPV+79fjJHEexs7A2umTly5ixzeqJ6R6aKCiqgcA=
Subject key identifier: 2A:DA:D5:5E:12:FA:55:13:17:59:4C:E7:51:43:5B:ED:5D:5E:1D:BA
Certificate issuer: /CN=dc6516692c6382b3f83dae991fd89dd1b0cef579
Certificate serial: 01856D7895E43062168AE8776234F6BEDCC6
Authority key identifier: DC:65:16:69:2C:63:82:B3:F8:3D:AE:99:1F:D8:9D:D1:B0:CE:F5:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/KtrVXhL6VRMXWUznUUNb7V1eHbo.roa
Signing time: Sun 01 Jan 2023 13:14:57 +0000
ROA not before: Sun 01 Jan 2023 13:14:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8364
IP address blocks: 195.216.96.0/19 maxlen: 19
212.126.0.0/19 maxlen: 19
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:78:95:e4:30:62:16:8a:e8:77:62:34:f6:be:dc:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc6516692c6382b3f83dae991fd89dd1b0cef579
Validity
Not Before: Jan 1 13:14:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2adad55e12fa551317594ce751435bed5d5e1dba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:9b:fc:24:8c:87:02:d8:96:cd:26:b6:df:7f:
15:77:83:93:d6:60:dd:31:b1:9a:33:d3:c3:3c:fd:
f2:35:a5:74:f5:bf:4e:a4:33:a9:43:ab:98:50:7b:
e3:4a:4b:18:c4:60:b1:58:03:94:95:52:da:d2:1c:
3f:92:e4:7a:b8:26:d9:b7:fe:7e:24:9c:f3:4b:8b:
dd:40:2c:3b:72:1a:3a:9a:8c:1c:7e:39:84:ed:1b:
ec:a6:5d:ca:c7:a5:92:f4:fc:c7:0a:92:9f:40:e7:
ef:19:e7:4e:cc:64:51:84:3e:a2:dd:a8:25:cc:4c:
b0:c5:16:5a:de:bf:fb:1c:f7:cb:38:12:30:76:eb:
d6:ed:b7:2b:b1:08:28:f2:6a:97:1e:de:8b:f6:f6:
86:86:d9:fd:62:d4:3e:0e:8d:a5:57:20:86:a5:78:
09:a7:a9:45:5f:71:04:16:ec:02:3f:c2:6a:a7:5b:
91:54:79:d4:07:70:21:03:72:05:13:e5:43:50:f2:
84:cb:f8:87:50:0e:ea:60:31:f0:5a:c8:14:bb:79:
d1:63:a9:02:ad:06:9f:32:4d:b1:3f:28:9f:51:23:
49:bb:4a:55:70:12:12:cb:c1:a0:8a:a3:77:b2:19:
fc:62:92:b3:01:bc:6c:d8:d3:1d:a9:dd:81:a9:42:
a0:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:DA:D5:5E:12:FA:55:13:17:59:4C:E7:51:43:5B:ED:5D:5E:1D:BA
X509v3 Authority Key Identifier:
keyid:DC:65:16:69:2C:63:82:B3:F8:3D:AE:99:1F:D8:9D:D1:B0:CE:F5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/KtrVXhL6VRMXWUznUUNb7V1eHbo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.216.96.0/19
212.126.0.0/19
Signature Algorithm: sha256WithRSAEncryption
70:c0:c1:96:d5:a2:2c:59:51:ed:e6:39:10:40:d4:68:c0:75:
39:51:9c:7a:5f:ad:1a:a8:74:e1:3c:72:50:8c:f4:43:61:67:
7a:1b:36:22:56:04:84:79:f3:3b:b2:b4:60:cd:34:3a:81:cd:
ec:34:66:7c:6f:a4:fe:65:45:cf:29:2d:15:01:83:24:38:13:
bb:87:e4:fa:ce:29:da:c4:41:5d:d0:1c:cf:30:e0:f0:b5:d0:
b7:56:b0:f0:3d:6f:51:17:b5:55:3f:17:6b:2c:1d:90:51:cd:
12:72:65:0b:24:41:fd:28:9a:26:2b:f3:e7:9f:8b:dd:93:af:
c0:0f:cc:78:5d:52:07:77:1c:18:f8:4c:05:82:b5:97:98:95:
fc:80:c4:15:ab:2d:fb:a1:4c:e6:01:bc:a5:46:01:1a:43:7c:
5d:a1:f4:cf:5d:91:bf:eb:f8:ac:47:93:74:2e:be:87:72:69:
e1:4d:2d:b1:2d:cb:00:ea:54:b3:2d:28:07:7c:1a:38:49:52:
e7:04:f9:cb:19:95:e6:24:a3:d0:06:c3:40:05:c8:77:dd:5e:
c0:6d:8d:f8:19:d1:f1:d5:a6:07:1c:0a:aa:93:60:f7:36:d2:
9d:e9:06:20:38:06:8b:a5:5e:6f:cc:fb:9a:64:9d:d3:44:cc:
c2:5d:10:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 02:53:42 2024 by rpki-client on console-ams.rpki-client.org