Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/kbzadTgG1_PzOWcj5RUTOSN0kxQ.roa
File: kbzadTgG1_PzOWcj5RUTOSN0kxQ.roa (raw, json)
Hash identifier: BjYSzI64DYjeMkGBTaK5cK1RCOFFAM5eyquZdQY0aEM=
Subject key identifier: 91:BC:DA:75:38:06:D7:F3:F3:39:67:23:E5:15:13:39:23:74:93:14
Certificate issuer: /CN=e06c8ad28538ede0b4c7e1a71e9ca989a9f03f10
Certificate serial: 018A740F2305A3B68820ED5F9EFF22026D44
Authority key identifier: E0:6C:8A:D2:85:38:ED:E0:B4:C7:E1:A7:1E:9C:A9:89:A9:F0:3F:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4GyK0oU47eC0x-GnHpypianwPxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/kbzadTgG1_PzOWcj5RUTOSN0kxQ.roa
Signing time: Fri 08 Sep 2023 09:11:03 +0000
ROA not before: Fri 08 Sep 2023 09:11:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198526
IP address blocks: 194.50.152.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:74:0f:23:05:a3:b6:88:20:ed:5f:9e:ff:22:02:6d:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e06c8ad28538ede0b4c7e1a71e9ca989a9f03f10
Validity
Not Before: Sep 8 09:11:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=91bcda753806d7f3f3396723e515133923749314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7f:88:38:15:24:df:0a:59:19:36:02:8d:3b:
ea:99:df:a1:6b:a1:e3:26:75:0d:59:7d:29:52:35:
f3:e8:5a:20:cb:5d:f3:c0:7f:3b:04:3d:54:a2:be:
12:98:01:cb:69:29:a6:19:42:b9:a6:54:97:07:70:
7a:77:7d:8c:c9:d7:de:63:a9:23:5b:de:d5:67:3b:
3f:0a:b0:a7:ca:4f:e5:db:30:66:37:15:26:50:ad:
4d:27:17:9a:c8:36:07:36:ca:38:00:0e:dd:bf:76:
e8:db:be:6f:e2:1e:69:5c:b0:28:a5:b3:aa:83:4d:
9b:14:be:c1:f8:67:57:84:1f:04:82:87:18:73:01:
1e:f6:b8:36:36:28:79:22:db:f7:5e:c2:dd:fa:9a:
28:e2:03:76:a3:75:6c:1c:9d:a8:12:52:e4:94:e7:
49:ff:50:53:e7:a1:49:9a:bd:5e:c2:25:67:2c:95:
6f:e9:2b:c5:cd:95:5b:d6:68:17:28:05:da:e9:8b:
9c:0a:a8:b7:12:b4:19:6b:c6:e4:cf:54:f4:7d:0c:
78:0e:7d:9a:d9:3e:1d:94:37:e2:dc:07:ef:56:44:
f3:3a:1c:b9:2a:e9:cf:d6:8e:07:ef:f6:77:f0:74:
88:bf:9b:f8:5a:da:a0:14:1d:b7:ba:62:49:78:85:
53:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:BC:DA:75:38:06:D7:F3:F3:39:67:23:E5:15:13:39:23:74:93:14
X509v3 Authority Key Identifier:
keyid:E0:6C:8A:D2:85:38:ED:E0:B4:C7:E1:A7:1E:9C:A9:89:A9:F0:3F:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GyK0oU47eC0x-GnHpypianwPxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/kbzadTgG1_PzOWcj5RUTOSN0kxQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.152.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:3d:8d:c2:21:3c:6a:7c:98:80:bd:41:fd:53:8b:0a:7c:96:
58:21:4d:5a:ec:c7:42:db:4d:a7:5a:d7:27:18:a8:85:54:41:
c1:db:71:47:08:eb:e8:e2:a8:ed:d6:b9:11:60:ec:76:a0:50:
32:1a:4a:25:11:6c:d7:dd:42:c7:b2:9a:29:c0:ca:12:17:63:
a1:1d:77:bb:6a:aa:0b:21:e7:97:4c:da:4a:3f:cd:35:5c:34:
84:00:f4:26:ec:68:fc:63:5f:d4:c4:90:03:38:d4:31:7f:6c:
bb:9f:8d:18:0e:d9:65:fb:75:2a:9a:42:01:74:0c:ef:bd:b8:
35:c2:93:8b:30:82:d1:9d:fb:ba:24:25:03:d7:35:df:3d:6e:
05:1f:fc:e8:17:bc:7b:46:1e:de:f4:04:67:65:6b:e0:4c:6d:
03:a2:cb:09:6f:11:58:29:d1:15:74:55:85:12:35:bd:96:1d:
75:71:87:cf:71:ba:88:d5:7c:a4:ae:4c:78:37:33:68:b1:60:
ba:bd:27:41:c2:55:c5:c4:a8:12:af:57:a9:5a:97:37:28:28:
bc:2e:7f:17:53:89:93:54:ff:24:79:62:9f:9d:61:3d:2e:3c:
e5:6a:f8:c9:38:19:61:e8:7a:f5:14:26:6f:53:52:2b:f7:b9:
df:ba:6c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:15:59 2024 by rpki-client on console-ams.rpki-client.org