Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/kBTNl9BGw83S-G4D4ajmYQOGUa4.roa
File: kBTNl9BGw83S-G4D4ajmYQOGUa4.roa (raw, json)
Hash identifier: EfeD/MsJtjDCryT0jnYcvseNL6DVB5AxeUa806sE8FY=
Subject key identifier: 90:14:CD:97:D0:46:C3:CD:D2:F8:6E:03:E1:A8:E6:61:03:86:51:AE
Certificate issuer: /CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Certificate serial: 018572BA7B06D6C651B1CB0C859064D3B1D8
Authority key identifier: 68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/kBTNl9BGw83S-G4D4ajmYQOGUa4.roa
Signing time: Mon 02 Jan 2023 13:45:01 +0000
ROA not before: Mon 02 Jan 2023 13:45:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39330
IP address blocks: 212.91.22.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:35:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:ba:7b:06:d6:c6:51:b1:cb:0c:85:90:64:d3:b1:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Validity
Not Before: Jan 2 13:45:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9014cd97d046c3cdd2f86e03e1a8e661038651ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b8:17:fa:3b:70:21:ca:cf:08:74:cd:30:bf:
9f:3f:ff:fb:00:ac:29:8d:81:c7:98:a2:90:9a:f6:
bc:35:8e:c6:5b:25:73:ac:41:44:db:9a:b6:43:90:
fe:3d:7c:a3:01:ac:b2:55:84:1b:d9:19:e1:d3:2a:
a4:87:84:fc:20:4b:ae:19:22:9a:75:38:51:e6:ab:
80:84:7f:e1:06:03:b2:6d:81:0f:a6:58:a3:12:7e:
80:d6:17:af:1d:18:57:2c:46:65:3b:99:27:80:8f:
8a:cb:b7:88:38:e0:2a:ba:be:64:4e:e4:02:e1:e7:
19:9b:06:ee:39:87:9c:c0:7c:d7:21:f2:f1:d9:ec:
f3:6d:81:72:34:d6:61:53:45:cf:26:2d:19:92:84:
df:e7:dd:db:5d:e0:3f:be:21:9a:ef:2e:e3:7f:0d:
68:51:b4:b7:1d:6d:4b:bf:68:c2:6a:4b:16:72:8a:
6d:12:08:39:9a:67:c8:df:4c:09:f4:be:06:79:cb:
18:90:26:db:c6:c8:86:bb:f0:eb:4f:82:5b:65:8a:
19:40:bd:a3:ae:6b:08:f1:a9:f5:05:4e:31:1c:03:
08:0e:3b:8d:77:81:64:ae:e4:da:2c:f9:79:b9:ca:
ce:05:37:40:d5:26:a7:6d:da:62:34:6d:4e:28:d0:
95:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:14:CD:97:D0:46:C3:CD:D2:F8:6E:03:E1:A8:E6:61:03:86:51:AE
X509v3 Authority Key Identifier:
keyid:68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/kBTNl9BGw83S-G4D4ajmYQOGUa4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.91.22.0/23
Signature Algorithm: sha256WithRSAEncryption
b0:d9:65:92:08:14:25:e3:43:2b:82:d1:7f:3e:dd:00:a4:11:
6d:9f:a1:30:35:89:f8:5f:a5:08:3c:b9:22:e2:6a:4a:86:d0:
3b:ba:c8:d7:30:a6:8a:56:dd:32:db:c5:33:4e:95:2a:d8:6f:
33:ba:d1:d3:11:d2:cf:7b:94:b9:4c:dd:39:61:19:41:c7:cd:
c2:df:a9:cc:c9:87:f3:93:5b:a9:44:70:86:8f:99:08:fd:14:
6d:f2:e6:97:b0:bf:2d:8a:80:fb:c2:a9:c7:e3:a3:32:53:86:
6f:8d:ef:29:bb:ab:32:67:7f:c3:42:77:5c:9c:6a:17:01:f1:
38:ee:e4:45:46:a8:f2:4a:d8:5d:53:77:19:07:85:99:9e:ad:
bb:d8:72:8e:d1:94:9e:a9:c5:3c:23:a0:09:14:43:ff:a0:6d:
6e:e4:fe:a0:0f:a8:69:1b:81:40:d2:d1:ad:bd:b5:70:80:40:
dc:02:29:1e:17:91:01:cd:f8:d5:5f:f8:ea:0b:42:ac:e1:b8:
ad:cb:32:51:d9:a7:e2:48:ec:a2:fd:21:e9:0b:b2:d3:f9:04:
be:42:a1:39:17:0f:7b:53:12:3c:de:b0:7f:f2:b3:9b:8c:2e:
15:1c:9d:ba:ad:15:6e:5b:a8:b4:29:d9:69:34:2d:25:5b:b7:
b5:1e:2d:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:57 2024 by rpki-client on console-fra.rpki-client.org