Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KP6m8oURCHBVBWPRCdCWE_mkQKU.roa
File: KP6m8oURCHBVBWPRCdCWE_mkQKU.roa (raw, json)
Hash identifier: ZDIcOJH7Shsq0HvGcIZdQpioteoIbiXgEWYNI2iYYZ0=
Subject key identifier: 28:FE:A6:F2:85:11:08:70:55:05:63:D1:09:D0:96:13:F9:A4:40:A5
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 018E410623F0E62B0C759317C18B865B61B6
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KP6m8oURCHBVBWPRCdCWE_mkQKU.roa
Signing time: Fri 15 Mar 2024 07:31:45 +0000
ROA not before: Fri 15 Mar 2024 07:31:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 399989
IP address blocks: 91.245.184.0/22 maxlen: 22
193.36.208.0/21 maxlen: 21
Validation: Failed, certificate revoked on Wed 03 Apr 2024 13:37:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:41:06:23:f0:e6:2b:0c:75:93:17:c1:8b:86:5b:61:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Mar 15 07:31:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=28fea6f285110870550563d109d09613f9a440a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:64:59:64:29:26:93:8e:10:0c:eb:aa:a6:dd:
ee:96:3f:fa:1c:31:e1:1b:6e:5e:49:19:71:20:1d:
ba:72:11:b4:cd:22:88:02:6c:9b:bd:2c:09:da:b3:
a4:a2:a8:07:76:f1:ff:27:f5:12:4d:15:de:ff:0d:
29:a5:41:c1:01:5e:46:76:94:c5:da:e3:a1:35:d6:
6a:58:3c:0e:24:48:f5:5c:9a:08:fa:2f:7d:c8:11:
ec:1c:19:61:27:34:90:91:50:9d:6a:07:b4:b5:d1:
b6:08:2a:a8:2f:e9:01:55:cd:0d:0f:54:83:8d:43:
32:1e:3a:0c:5f:e0:e9:8a:8e:f6:54:d3:d0:84:0d:
e5:c4:0a:59:ca:af:8d:fc:cc:37:47:0d:23:76:c4:
88:f4:7b:47:1a:9e:84:a9:40:f6:0c:d7:7f:71:56:
a1:5e:a5:6e:0d:ed:8d:d9:76:4b:ef:f1:45:b2:6c:
bb:b0:cc:45:7b:c6:42:25:6f:04:c4:19:47:74:8f:
fe:98:bc:6d:32:1d:56:56:fc:d5:fe:63:2f:47:01:
1c:e0:a7:8e:16:25:72:c7:7a:65:f4:61:1c:bb:9c:
9a:80:a2:c1:4b:43:1d:ff:ce:7d:4d:83:bd:42:d2:
4a:fb:34:88:de:e4:ec:57:5d:d9:50:80:7e:4d:c1:
b2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:FE:A6:F2:85:11:08:70:55:05:63:D1:09:D0:96:13:F9:A4:40:A5
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KP6m8oURCHBVBWPRCdCWE_mkQKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.245.184.0/22
193.36.208.0/21
Signature Algorithm: sha256WithRSAEncryption
2d:e2:1b:e9:d0:6f:32:20:c1:ef:38:0b:f9:70:29:27:52:60:
b3:d0:19:d9:83:92:4b:7c:0d:7d:02:45:ee:9e:dc:a1:83:37:
6d:e2:85:a8:2e:4a:03:66:8c:aa:af:9b:33:da:d9:f6:d1:92:
84:58:9e:f3:ca:bd:6b:57:a1:2f:d6:b4:17:87:53:6e:6d:b9:
bf:16:77:88:56:fe:21:3d:69:3d:a2:dc:d8:9c:0d:e3:38:d7:
59:a5:e8:b3:0a:90:92:4b:46:a7:fa:b8:d1:44:1f:61:c1:e9:
f4:f1:40:8c:51:d5:f1:bf:93:5e:0a:0d:59:3e:28:44:8a:88:
e8:bb:43:9c:88:e6:04:86:4c:2a:14:9d:cd:77:f3:68:5e:4e:
a2:7f:3d:ce:1c:0c:95:e8:4f:30:33:12:39:7b:42:23:dd:a3:
a3:c3:9b:17:48:b5:14:06:68:39:da:80:22:f2:78:d6:cb:75:
73:0d:3f:c2:d7:ec:7e:0c:c6:b1:82:3f:70:d0:85:fe:86:a1:
4a:af:f1:c9:05:6b:de:c7:f7:8b:bb:68:67:53:96:dc:71:85:
93:18:ec:64:f8:02:e3:bf:c3:bf:8f:24:3a:32:63:c6:14:ab:
bb:98:09:2d:16:45:c6:6f:03:49:0a:31:07:ab:62:0b:6c:ef:
cc:5a:12:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 3 16:48:14 2024 by rpki-client on console-ams.rpki-client.org