Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/KzRU5pyFar91PsAhuZHrNjSsuk0.roa
File: KzRU5pyFar91PsAhuZHrNjSsuk0.roa (raw, json)
Hash identifier: jRwc0az7n2ITpKyfSEFaSB3mVAUN837Rbo7TtMGMQYs=
Subject key identifier: 2B:34:54:E6:9C:85:6A:BF:75:3E:C0:21:B9:91:EB:36:34:AC:BA:4D
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 0188380D720575552F7489D31895D1C4486D
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/KzRU5pyFar91PsAhuZHrNjSsuk0.roa
Signing time: Sat 20 May 2023 07:26:25 +0000
ROA not before: Sat 20 May 2023 07:26:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57844
IP address blocks: 213.176.64.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 08 Nov 2023 07:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:38:0d:72:05:75:55:2f:74:89:d3:18:95:d1:c4:48:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: May 20 07:26:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2b3454e69c856abf753ec021b991eb3634acba4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:dc:21:80:43:04:c9:c6:e0:f3:2c:95:67:38:
c2:d6:38:35:2b:aa:a9:9f:34:df:ea:65:b6:ae:2b:
db:89:3b:1b:14:b6:0a:a4:44:26:0e:57:08:b3:ae:
13:54:b0:c1:8d:31:f3:7e:84:6e:20:7f:1a:8a:5d:
38:c8:cb:fa:43:c7:c8:da:f0:60:c2:77:de:2a:4f:
34:dc:2d:e9:55:d9:e1:fc:7a:6e:11:ce:ee:ee:7a:
05:2b:bf:af:fa:77:06:0c:fc:69:4e:9f:a8:1b:ad:
35:c7:8e:6e:e1:fa:9b:bd:a4:cd:d9:17:d5:14:5b:
ba:bc:ad:e4:19:e3:83:80:dd:ae:c7:52:be:b6:a7:
70:05:28:af:10:0a:b8:c6:9d:ed:60:cd:e2:81:36:
2b:02:40:5c:59:1d:0e:08:63:00:40:04:fd:51:b7:
b0:79:fd:d0:35:f9:99:3d:db:75:bc:e9:f7:57:2f:
b6:ce:89:2c:92:47:67:a5:15:2d:c4:db:0f:08:35:
2c:65:45:be:b6:ff:5c:7e:8c:fa:75:92:5b:6d:25:
c2:17:e3:7c:e3:68:31:ab:aa:41:c7:88:d0:ff:d0:
bb:2e:4c:83:2e:a8:90:66:28:36:eb:3a:d3:a3:0c:
98:b8:06:13:ef:84:04:bc:3a:51:de:ac:c8:9b:71:
47:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:34:54:E6:9C:85:6A:BF:75:3E:C0:21:B9:91:EB:36:34:AC:BA:4D
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/KzRU5pyFar91PsAhuZHrNjSsuk0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.176.64.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:dd:6f:69:b6:67:bd:32:0a:fe:8e:e5:ca:e8:05:8a:db:78:
c7:87:d9:7a:f9:99:58:43:3d:17:2a:d9:ae:19:d1:3e:a6:d0:
55:82:b9:e3:8a:11:1c:bf:ba:a7:a4:e8:d5:45:81:30:b0:c9:
58:6f:3c:74:dd:2a:f0:65:5d:9e:52:ef:64:ed:dc:58:1f:e6:
13:11:5a:e0:0a:c8:b9:df:25:81:dc:b4:68:75:a1:e6:25:96:
a7:3b:4f:7c:92:cf:dd:bd:46:5a:71:07:84:ef:48:4e:af:96:
5d:e1:8e:ae:0a:6c:8f:c5:b2:6c:bd:18:3c:be:18:0e:fd:37:
72:49:eb:3e:9e:5b:19:98:3d:f6:00:e6:41:33:c9:d5:c1:be:
13:db:3b:3f:9a:51:9e:69:ce:ec:f3:0a:7e:3f:e2:4a:22:ec:
7b:1b:c2:be:ae:1a:25:c2:69:65:2d:9e:0e:6a:ad:00:91:83:
f2:2a:de:b7:5d:7b:47:43:d1:37:30:da:0b:f4:10:95:fe:5c:
97:80:0f:3e:e7:aa:b0:3b:6e:00:39:5a:b7:e5:bf:79:91:4d:
c8:ca:f9:c3:2a:bd:96:54:6b:78:b4:ee:78:97:9f:a5:a1:40:
c8:ba:cb:99:72:58:4d:10:90:79:e4:18:7b:8c:e1:61:3e:ab:
dd:22:1a:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:29 2024 by rpki-client on console-ams.rpki-client.org