Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/kUZ-U4zXSTcCkvzaDkawi97YM2A.roa
File: kUZ-U4zXSTcCkvzaDkawi97YM2A.roa (raw, json)
Hash identifier: KB66WL6Ke67utFSVtzVMq6jRSVcN1lvSUADVaw4/jew=
Subject key identifier: 91:46:7E:53:8C:D7:49:37:02:92:FC:DA:0E:46:B0:8B:DE:D8:33:60
Certificate issuer: /CN=fea27ed9584e07c740feeb40d7b9e57ccac5e950
Certificate serial: 018572CCAC261C7CF4388093C2C6C6CD6262
Authority key identifier: FE:A2:7E:D9:58:4E:07:C7:40:FE:EB:40:D7:B9:E5:7C:CA:C5:E9:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_qJ-2VhOB8dA_utA17nlfMrF6VA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/kUZ-U4zXSTcCkvzaDkawi97YM2A.roa
Signing time: Mon 02 Jan 2023 14:04:54 +0000
ROA not before: Mon 02 Jan 2023 14:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49715
IP address blocks: 213.108.152.0/21 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:cc:ac:26:1c:7c:f4:38:80:93:c2:c6:c6:cd:62:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fea27ed9584e07c740feeb40d7b9e57ccac5e950
Validity
Not Before: Jan 2 14:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=91467e538cd749370292fcda0e46b08bded83360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:03:4b:ad:f1:09:14:ef:7a:45:1b:00:6b:9c:
c2:03:c4:bb:83:22:2c:be:6e:d2:13:9f:b5:94:71:
a6:23:eb:82:f7:1a:a3:2f:da:f8:13:c4:d7:34:e1:
4d:11:73:a7:08:4e:c5:44:65:b5:10:c5:a2:c0:62:
5a:e5:00:e1:a6:e2:02:d0:3e:55:7f:cd:2a:92:e5:
4d:d4:f6:19:a7:f2:de:cb:a5:59:63:46:16:ef:c6:
c2:23:27:ce:85:fd:f6:3c:f4:21:5b:c4:a0:fe:48:
28:9b:30:e2:89:2c:5c:8c:27:bf:aa:b7:4f:ec:f8:
07:30:60:30:21:90:8e:76:b1:77:1f:23:ea:19:f1:
a6:79:60:8a:2a:2d:3c:95:0b:cc:45:38:de:40:0d:
0c:ec:b5:c4:34:3c:bc:63:e1:e9:5d:67:04:46:eb:
08:e1:14:42:8f:c5:92:fc:35:6b:36:03:95:3b:44:
b7:61:08:83:41:01:22:5d:86:65:49:00:38:f5:81:
82:73:21:00:f8:7f:ae:52:39:fe:f7:bf:e1:73:ab:
3e:17:a5:ea:c4:59:33:9b:3f:45:84:59:88:72:9b:
7d:49:6b:51:12:f1:fc:e1:57:c5:20:33:26:14:c6:
4f:be:d1:6c:a7:f0:c0:75:08:de:1c:7c:2e:37:cf:
2b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:46:7E:53:8C:D7:49:37:02:92:FC:DA:0E:46:B0:8B:DE:D8:33:60
X509v3 Authority Key Identifier:
keyid:FE:A2:7E:D9:58:4E:07:C7:40:FE:EB:40:D7:B9:E5:7C:CA:C5:E9:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_qJ-2VhOB8dA_utA17nlfMrF6VA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/kUZ-U4zXSTcCkvzaDkawi97YM2A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.108.152.0/21
Signature Algorithm: sha256WithRSAEncryption
65:fb:84:d7:ec:55:36:a2:5c:01:1f:ab:25:4f:d3:0c:74:1d:
0b:8e:76:55:fa:80:8a:ce:9f:f8:43:e2:d6:dc:6e:f2:89:b7:
85:a5:00:e1:48:e0:f0:c3:70:5f:7c:91:05:ae:81:84:ca:28:
b9:8f:d6:12:a7:51:cc:b9:fb:4a:bd:6a:a4:02:5b:db:64:f6:
df:5d:5d:ec:9a:b8:70:c9:97:78:e7:26:0a:89:c1:29:35:47:
62:c7:fa:3d:57:7d:82:93:d7:84:4c:35:57:5c:19:d1:d5:72:
68:31:38:ff:75:bc:73:ff:75:85:63:55:47:c8:b8:f0:04:42:
b2:bf:03:4c:44:88:9f:c9:e9:ee:de:ba:c6:d2:3c:81:7f:e8:
8a:76:cd:20:84:4a:4a:3f:6f:73:1b:8c:94:87:44:04:1a:10:
48:ee:2b:12:3b:91:6b:87:58:c5:a6:ea:9a:ef:f1:d0:ce:0e:
77:00:aa:a5:e4:e8:72:04:e1:bc:43:de:e0:17:9f:cb:80:ae:
44:a8:8a:c6:66:42:db:39:ed:84:95:79:22:2f:a9:cd:a0:77:
d8:0d:68:88:6f:83:59:9e:4d:08:19:5f:67:25:69:f1:05:c5:
29:a8:7d:38:28:8b:b9:88:84:be:f7:36:dd:54:15:12:1b:c7:
f1:b8:88:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:38 2024 by rpki-client on console-fra.rpki-client.org