Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/kNyvRogbw4D6HFVD0ZTzEw37GUw.roa
File: kNyvRogbw4D6HFVD0ZTzEw37GUw.roa (raw, json)
Hash identifier: COW5Zp3T6s3tjk7g/8H7j4/Z7GU6qxN/A31BxADkNFM=
Subject key identifier: 90:DC:AF:46:88:1B:C3:80:FA:1C:55:43:D1:94:F3:13:0D:FB:19:4C
Certificate issuer: /CN=3b3daef89306a75f0b88191440742a720afb3f20
Certificate serial: 01865084E79564AF53FB4C0BDEA2F0BFC432
Authority key identifier: 3B:3D:AE:F8:93:06:A7:5F:0B:88:19:14:40:74:2A:72:0A:FB:3F:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oz2u-JMGp18LiBkUQHQqcgr7PyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/kNyvRogbw4D6HFVD0ZTzEw37GUw.roa
Signing time: Tue 14 Feb 2023 15:22:12 +0000
ROA not before: Tue 14 Feb 2023 15:22:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 193.201.28.0/23 maxlen: 23
185.1.218.0/24 maxlen: 24
2001:7f8:10::/64 maxlen: 64
Validation: Failed, certificate revoked on Wed 15 Feb 2023 11:20:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:50:84:e7:95:64:af:53:fb:4c:0b:de:a2:f0:bf:c4:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b3daef89306a75f0b88191440742a720afb3f20
Validity
Not Before: Feb 14 15:22:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=90dcaf46881bc380fa1c5543d194f3130dfb194c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:e7:72:98:69:1d:05:0b:bd:90:36:6e:2d:7f:
88:43:c6:ba:7e:d6:6a:79:f5:f2:d2:94:67:63:2d:
80:70:eb:2a:b0:9a:10:a2:36:87:49:68:34:1b:af:
12:53:5f:49:ca:64:0b:e7:5f:06:39:2b:62:52:5a:
de:d3:78:59:05:5a:5f:ce:d1:9d:39:9d:e9:b3:e7:
ba:3a:4d:9d:f7:73:82:fe:88:37:af:35:22:a3:fc:
6f:15:a2:25:7c:70:c2:e0:76:e8:a4:e2:3e:9f:32:
73:95:de:0e:9e:58:ab:97:83:cf:d0:a5:3b:02:1b:
9c:c9:13:a8:04:ae:8c:a0:ec:37:b1:64:39:36:8a:
bf:83:c5:7c:1e:89:2b:36:bc:42:d8:a4:05:f8:35:
a9:0e:19:c2:f7:30:31:28:7e:ee:97:06:ef:bd:63:
7e:36:b3:17:c5:0f:06:7f:73:c5:b5:06:16:36:52:
ea:e6:ce:3c:28:34:79:4d:63:8c:c2:1e:02:47:43:
55:13:fc:15:f5:a0:56:c3:67:3b:e8:09:a9:ae:7d:
42:a8:e3:28:34:92:7d:04:8d:d0:93:78:b3:55:41:
df:5d:98:7a:a3:b2:ae:79:43:67:8a:1c:d7:b6:97:
79:8c:98:91:61:5a:47:f9:ef:85:19:a5:4e:e1:31:
85:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:DC:AF:46:88:1B:C3:80:FA:1C:55:43:D1:94:F3:13:0D:FB:19:4C
X509v3 Authority Key Identifier:
keyid:3B:3D:AE:F8:93:06:A7:5F:0B:88:19:14:40:74:2A:72:0A:FB:3F:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oz2u-JMGp18LiBkUQHQqcgr7PyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/kNyvRogbw4D6HFVD0ZTzEw37GUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.1.218.0/24
193.201.28.0/23
IPv6:
2001:7f8:10::/64
Signature Algorithm: sha256WithRSAEncryption
ad:c3:2b:84:d7:2c:e4:64:73:fe:3c:96:fc:fb:88:70:0b:65:
66:83:f4:f8:c3:70:57:a9:1f:f9:3f:2a:47:2c:86:2a:57:14:
f2:c8:80:77:d3:6a:5b:e6:e1:65:5e:e0:6d:6c:74:94:7e:6e:
85:43:a4:64:e5:98:c1:99:0b:ad:6f:a5:aa:5e:c5:d6:78:0a:
f0:05:2b:90:a9:b6:da:40:e4:3c:a7:15:be:9f:6e:71:7a:78:
00:d9:aa:b0:de:9e:b9:e6:55:89:87:85:3f:d6:e3:82:8b:42:
8b:c1:9e:f9:00:f6:78:fe:87:74:0e:64:64:c0:12:f8:a6:e2:
a8:3f:7f:aa:e3:f2:97:ca:48:df:fe:2f:28:a9:08:b8:d9:34:
e1:66:94:84:66:58:51:6b:68:af:6b:e7:9b:8b:b6:3b:1a:b5:
be:b6:92:70:4c:21:ab:9a:46:5c:0c:63:f7:6b:9c:34:6c:49:
63:a8:9d:fe:2b:82:2f:62:16:d4:9a:56:e3:4f:1e:aa:fa:bc:
18:95:cc:ec:ce:47:a8:e6:11:5b:4e:72:a0:40:6a:b5:1b:69:
53:9c:22:19:c7:9e:06:cf:c0:9f:ee:03:2d:f3:00:a5:a2:b0:
01:b4:3a:f0:e4:96:ff:65:4c:e9:8f:64:33:c3:5d:38:1f:18:
f7:e1:50:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:58 2024 by rpki-client on console-fra.rpki-client.org