Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/Kja27V3zSBmnnBmp0WVQ0Jw4998.roa
File: Kja27V3zSBmnnBmp0WVQ0Jw4998.roa (raw, json)
Hash identifier: g2EpNAEIpTtk2IFHYisrqDL9vtoQ1gJu4TvpDUm+4lw=
Subject key identifier: 2A:36:B6:ED:5D:F3:48:19:A7:9C:19:A9:D1:65:50:D0:9C:38:F7:DF
Certificate issuer: /CN=979f5ca8c33f134c3c157d48b9c2ae4e91b630bf
Certificate serial: 018DD6C40A1691DDC832C99E8426DFA76089
Authority key identifier: 97:9F:5C:A8:C3:3F:13:4C:3C:15:7D:48:B9:C2:AE:4E:91:B6:30:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/Kja27V3zSBmnnBmp0WVQ0Jw4998.roa
Signing time: Fri 23 Feb 2024 16:19:48 +0000
ROA not before: Fri 23 Feb 2024 16:19:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215446
IP address blocks: 188.93.192.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 15 Mar 2024 12:39:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:d6:c4:0a:16:91:dd:c8:32:c9:9e:84:26:df:a7:60:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=979f5ca8c33f134c3c157d48b9c2ae4e91b630bf
Validity
Not Before: Feb 23 16:19:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2a36b6ed5df34819a79c19a9d16550d09c38f7df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f6:54:45:3a:b0:34:41:6a:5a:20:d7:2b:c5:
71:68:8b:11:52:8b:b2:b2:e3:c0:6a:51:aa:3c:d6:
98:c5:14:d7:2c:42:0c:94:a2:10:e8:8d:b6:81:ec:
d5:fc:58:f2:c3:de:0a:66:3e:e5:dd:ec:4a:1d:e0:
f2:b6:5c:a3:b1:08:f9:ee:99:3a:b2:cd:f9:7d:c5:
bc:95:a3:bd:0c:eb:05:31:79:57:d7:dd:8d:07:a7:
0e:68:64:99:8d:29:08:ee:13:ea:fb:25:af:b5:6a:
c8:19:af:28:8f:ad:60:ca:54:78:8f:53:f5:cf:48:
f6:ea:39:01:e0:41:87:e5:51:41:5d:aa:7e:fe:98:
1f:b4:f2:68:5b:8f:4b:82:4e:23:a5:86:f9:9c:27:
ab:7b:5a:64:ff:c4:1c:06:4d:ba:9d:84:0c:3f:ac:
73:99:c3:c8:ce:69:1d:53:ab:80:02:a9:13:cc:92:
7d:ef:05:be:15:c6:a8:6c:80:16:ef:5a:d2:c8:a8:
7d:f0:c2:64:b9:cf:c0:48:82:07:a9:28:01:0f:a5:
cf:46:2d:e0:36:df:e8:63:95:35:26:c5:97:e1:cb:
67:0a:dc:57:1e:73:9b:ea:90:2f:20:3a:af:0f:1a:
e9:e7:22:89:a5:2f:1f:dd:11:2c:6b:6a:d5:ee:f1:
b6:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:36:B6:ED:5D:F3:48:19:A7:9C:19:A9:D1:65:50:D0:9C:38:F7:DF
X509v3 Authority Key Identifier:
keyid:97:9F:5C:A8:C3:3F:13:4C:3C:15:7D:48:B9:C2:AE:4E:91:B6:30:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/Kja27V3zSBmnnBmp0WVQ0Jw4998.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.93.192.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:3a:33:a7:da:7c:61:be:38:7c:10:45:e2:86:31:15:07:c5:
d7:0e:f2:ed:5f:18:e4:16:ba:59:36:c1:4e:ab:9f:b8:3c:f3:
5a:5b:09:69:31:96:c6:38:24:d6:a5:4c:ee:1e:c5:b9:01:7e:
de:5d:80:0b:96:46:d1:a9:8f:1b:9f:7f:8a:2c:fe:31:d6:ad:
ca:1d:e9:08:f1:29:14:fd:6e:55:15:9d:55:83:4e:80:65:a4:
54:df:c7:cd:85:7c:e8:21:7c:c4:d6:03:a9:43:b1:93:7c:8a:
be:a9:68:a2:ba:55:c3:17:07:d8:ee:30:24:51:05:42:fd:cc:
af:91:50:35:0b:3b:ee:3a:72:f6:39:05:51:35:42:53:c0:f5:
06:9f:47:b0:27:a0:a7:4e:d7:3b:36:38:69:07:f3:7f:55:2f:
3d:f9:01:52:51:0a:90:13:4b:a5:40:50:bd:b0:84:c8:51:ca:
2b:39:e6:87:15:6d:44:2a:ad:45:21:2b:2f:cd:a9:b1:e2:08:
63:d5:19:55:37:ea:aa:46:a4:cb:86:e0:0e:19:14:de:ca:7c:
95:8c:ab:fc:a0:b7:b1:36:a7:db:e8:09:c3:38:d0:01:0d:b1:
8c:c6:1d:d6:f6:d3:b7:a2:26:0e:a3:3f:d4:f9:b4:f2:7b:e3:
f3:49:8a:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:18 2024 by rpki-client on console-ams.rpki-client.org