Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/KswJqq-wxxfCrESJiEmneMF09ZM.roa
File: KswJqq-wxxfCrESJiEmneMF09ZM.roa (raw, json)
Hash identifier: Y/mwtNdL3WucrLXkCuwOgAyM1gTccd8E1nmcvaMozos=
Subject key identifier: 2A:CC:09:AA:AF:B0:C7:17:C2:AC:44:89:88:49:A7:78:C1:74:F5:93
Certificate issuer: /CN=88b213bf1627548efdfb1b2e2645baaf1d983aa0
Certificate serial: 018A47BD04B06C2252267F641DAD895CBC00
Authority key identifier: 88:B2:13:BF:16:27:54:8E:FD:FB:1B:2E:26:45:BA:AF:1D:98:3A:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iLITvxYnVI79-xsuJkW6rx2YOqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/KswJqq-wxxfCrESJiEmneMF09ZM.roa
Signing time: Wed 30 Aug 2023 18:38:04 +0000
ROA not before: Wed 30 Aug 2023 18:38:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8100
IP address blocks: 84.246.111.0/24 maxlen: 24
213.232.252.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 31 Dec 2023 15:23:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:47:bd:04:b0:6c:22:52:26:7f:64:1d:ad:89:5c:bc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88b213bf1627548efdfb1b2e2645baaf1d983aa0
Validity
Not Before: Aug 30 18:38:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2acc09aaafb0c717c2ac44898849a778c174f593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:44:63:20:de:70:04:70:83:8e:44:25:38:27:
22:a6:fe:e6:1a:ac:1f:41:0f:20:54:46:e0:26:f8:
ce:8f:bd:fe:2d:d8:99:b4:06:d3:29:e0:77:29:97:
ca:83:c5:21:8c:94:d5:72:bd:1e:d3:c1:c0:aa:83:
3c:b7:bf:f5:18:59:d8:15:19:d9:81:bc:d1:b7:58:
e5:cd:bc:e5:f8:a2:c9:74:e9:97:c0:8d:fa:9d:3a:
90:a3:a9:65:cc:40:97:61:d5:ff:34:fc:ac:8d:3e:
c7:bb:8b:72:cf:de:09:0f:f9:93:df:a2:a8:40:9c:
5c:f0:99:09:1f:fe:20:57:1c:99:63:8b:da:46:01:
76:c0:2f:a5:8e:8d:8f:a1:3c:49:df:12:0b:84:37:
7b:aa:85:d3:c5:b0:ee:a4:d9:ad:d4:33:e1:9c:0d:
1e:79:71:ad:34:2a:64:30:e1:d5:f6:62:e1:1d:59:
fe:c2:df:2d:62:21:a1:9c:e7:52:cb:35:23:77:ca:
84:c4:6d:97:50:9b:89:95:ed:40:fc:aa:5c:df:92:
72:48:6c:53:84:da:7f:93:9c:6f:85:76:75:4a:98:
3a:6a:78:5a:1c:07:b6:93:bb:78:e3:62:2e:39:d0:
f8:34:9a:dc:4c:d7:a8:a9:3a:58:7f:e6:7e:b7:63:
dc:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:CC:09:AA:AF:B0:C7:17:C2:AC:44:89:88:49:A7:78:C1:74:F5:93
X509v3 Authority Key Identifier:
keyid:88:B2:13:BF:16:27:54:8E:FD:FB:1B:2E:26:45:BA:AF:1D:98:3A:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLITvxYnVI79-xsuJkW6rx2YOqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/KswJqq-wxxfCrESJiEmneMF09ZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/iLITvxYnVI79-xsuJkW6rx2YOqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.246.111.0/24
213.232.252.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:e8:18:ed:ce:65:90:6e:90:35:12:8c:84:04:ff:e7:0f:70:
53:96:ce:26:6c:e9:91:60:b4:90:c0:db:b5:91:10:89:36:fd:
7b:39:34:c5:03:45:c9:e6:57:63:79:e1:be:5b:ba:f8:9f:d3:
0c:be:6b:8e:f5:52:d5:45:af:00:23:28:95:13:71:5a:b4:a9:
5a:8c:cb:53:5c:40:70:8e:61:4f:5d:6e:ce:29:be:4d:c9:8f:
1b:ae:10:4e:db:de:f4:06:62:0b:03:cf:7a:f0:dd:d0:45:19:
bf:98:79:e4:ab:3c:f7:2e:36:77:54:f0:18:a9:94:89:4e:ed:
e0:8d:45:84:7c:14:ce:c4:d2:26:b6:3b:dc:10:c8:1f:45:1e:
a9:cf:ab:ae:33:38:61:8e:f0:1e:ac:90:66:1d:12:f8:e5:78:
83:fb:70:cb:65:cf:e4:6a:16:02:5a:ac:7e:7f:c8:51:b8:41:
64:6d:27:ce:82:da:44:32:15:85:e9:9a:10:83:67:bc:6b:95:
2e:04:f5:13:b5:eb:51:86:a1:f5:c7:79:68:90:93:69:82:5b:
b9:f1:08:cf:ea:3f:65:08:a4:bc:e2:1a:c2:d8:e8:f1:c7:5c:
75:68:0c:e3:29:7c:ac:83:85:b2:52:86:e4:fd:ff:8a:4b:47:
b2:95:1b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:01 2024 by rpki-client on console-fra.rpki-client.org