Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/KJTxSS3rZ8qTAG-ivj7CSwpcTjk.roa
File: KJTxSS3rZ8qTAG-ivj7CSwpcTjk.roa (raw, json)
Hash identifier: c/VF+djxFx7Y/NnK0rrApTWxcOwG+cHGyBxi/7nNJd4=
Subject key identifier: 28:94:F1:49:2D:EB:67:CA:93:00:6F:A2:BE:3E:C2:4B:0A:5C:4E:39
Certificate issuer: /CN=dc90e0aee1ecc31066cb744f8a7feedefb3f7930
Certificate serial: 0185E99684CD648F95098F79AC2C2D952737
Authority key identifier: DC:90:E0:AE:E1:EC:C3:10:66:CB:74:4F:8A:7F:EE:DE:FB:3F:79:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/KJTxSS3rZ8qTAG-ivj7CSwpcTjk.roa
Signing time: Wed 25 Jan 2023 15:40:33 +0000
ROA not before: Wed 25 Jan 2023 15:40:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 939
IP address blocks: 89.105.196.0/24 maxlen: 24
89.105.219.0/24 maxlen: 24
89.105.220.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e9:96:84:cd:64:8f:95:09:8f:79:ac:2c:2d:95:27:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc90e0aee1ecc31066cb744f8a7feedefb3f7930
Validity
Not Before: Jan 25 15:40:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2894f1492deb67ca93006fa2be3ec24b0a5c4e39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6f:9c:fc:68:0b:97:9c:13:43:16:97:9c:b0:
36:fb:f9:8d:06:53:bc:cd:e2:7c:c7:b5:a9:9f:20:
f6:1a:bc:d1:65:bd:75:92:6f:f4:87:cb:cb:d3:77:
51:ae:54:6d:5d:1b:98:ea:27:fa:34:c7:0f:eb:c5:
41:78:b7:a8:fe:cd:06:76:35:cc:81:50:d1:a3:f8:
08:8c:36:f3:f4:f0:e0:d8:46:20:99:bb:e6:73:a5:
5e:5f:81:f4:d4:a9:b6:e9:24:00:3c:3c:f7:ba:37:
f3:17:80:e0:7b:4b:f2:1a:92:7d:ae:f0:b0:64:60:
15:9c:61:b1:1f:df:ee:0b:c2:b8:50:a0:ce:f4:7b:
77:59:7d:de:ed:19:37:18:78:aa:0b:59:24:17:25:
89:b4:89:fa:d6:4d:bd:4a:5a:c4:d4:61:aa:7f:17:
9c:5f:ad:53:08:bc:17:b3:04:f8:be:64:5c:c0:82:
d0:dd:a6:3b:92:a4:20:f8:32:b3:c8:11:cc:f2:68:
b2:10:13:86:56:c0:02:8c:bc:0c:cb:dc:48:92:24:
c7:72:11:f4:d5:7b:56:63:8a:39:bf:5e:06:e6:a5:
fc:bf:27:d1:d3:90:4e:f1:fd:37:68:bb:5d:63:93:
2c:83:9b:1c:ea:51:4b:61:6e:6a:65:55:71:67:2b:
8e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:94:F1:49:2D:EB:67:CA:93:00:6F:A2:BE:3E:C2:4B:0A:5C:4E:39
X509v3 Authority Key Identifier:
keyid:DC:90:E0:AE:E1:EC:C3:10:66:CB:74:4F:8A:7F:EE:DE:FB:3F:79:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/KJTxSS3rZ8qTAG-ivj7CSwpcTjk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.105.196.0/24
89.105.219.0-89.105.220.255
Signature Algorithm: sha256WithRSAEncryption
3d:a7:9d:f1:0d:f5:32:29:e7:4d:31:1b:ae:e4:b0:8e:d0:61:
ba:48:9e:ea:30:6b:f2:2d:06:0a:9f:6a:b3:9a:e0:2d:47:87:
72:40:25:7b:21:42:89:14:6c:e2:f5:0e:2f:17:d3:19:fd:d1:
a9:13:aa:5d:51:9d:fc:03:4f:42:5c:40:a1:a6:8b:53:c6:bf:
02:19:93:f4:9b:08:da:36:d0:01:e0:b7:77:f1:cb:3e:be:48:
b2:b7:fd:af:48:bc:79:d8:80:a5:e0:c4:bc:7e:70:59:65:6b:
f7:a1:e2:72:d9:87:6d:ba:dd:92:0d:fa:28:3b:06:ff:ba:46:
25:52:0a:51:a8:e3:dc:35:b9:cc:96:e5:ef:6b:42:32:63:c5:
8c:41:14:b0:19:75:93:a2:30:7e:13:28:34:f5:a4:19:5a:e2:
a1:be:de:a7:99:29:79:b3:e5:86:68:93:2e:64:d5:cc:69:8a:
c5:ef:af:19:07:3f:74:57:58:36:f9:e8:32:4c:ab:c3:f7:9d:
45:9d:62:3f:d9:a3:98:d1:c5:ff:c2:00:0b:24:1d:3a:4d:dc:
a8:ac:dd:c2:c4:c8:97:8d:70:16:8e:61:60:78:1c:62:48:3e:
2f:1c:44:b6:de:15:b6:03:00:53:15:b4:79:10:f4:63:08:c1:
c2:04:6b:18
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Jan 1 19:15:56 2024 by rpki-client on console-ams.rpki-client.org