Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/k8C0CAv185a-wfnSreKuqpnF35Q.roa
File: k8C0CAv185a-wfnSreKuqpnF35Q.roa (raw, json)
Hash identifier: kNG4Hbh838G3vPPPDxS/MKYIRmi22ud2kxQD2P1FOHM=
Subject key identifier: 93:C0:B4:08:0B:F5:F3:96:BE:C1:F9:D2:AD:E2:AE:AA:99:C5:DF:94
Certificate issuer: /CN=22a776a6955c0163c9cf1a838c41dfee5da9db3d
Certificate serial: 01856F023444071F1FD685CFA1966DC60B83
Authority key identifier: 22:A7:76:A6:95:5C:01:63:C9:CF:1A:83:8C:41:DF:EE:5D:A9:DB:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/k8C0CAv185a-wfnSreKuqpnF35Q.roa
Signing time: Sun 01 Jan 2023 20:24:53 +0000
ROA not before: Sun 01 Jan 2023 20:24:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47447
IP address blocks: 176.103.220.0/23 maxlen: 23
91.227.74.0/24 maxlen: 24
193.148.68.0/22 maxlen: 22
91.216.248.0/24 maxlen: 24
2a10:fc80::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:02:34:44:07:1f:1f:d6:85:cf:a1:96:6d:c6:0b:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a776a6955c0163c9cf1a838c41dfee5da9db3d
Validity
Not Before: Jan 1 20:24:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=93c0b4080bf5f396bec1f9d2ade2aeaa99c5df94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:09:68:2d:21:03:21:b2:ac:37:9a:8a:06:10:
66:e9:af:e4:81:02:fe:a6:3f:5b:34:74:6f:f2:8a:
e1:c8:6b:af:57:4f:b3:99:e1:93:0e:d3:d2:3e:fe:
0b:fd:78:51:8f:10:e6:c3:50:ae:44:9d:f6:52:95:
65:3d:a8:6c:eb:c8:96:ef:6d:52:1b:e6:91:b6:fb:
98:e4:05:a2:d3:a5:1e:83:8a:32:78:99:c2:97:7d:
74:f6:50:75:5a:07:87:49:11:a2:a9:97:3e:45:b4:
ae:ba:9b:59:2b:ac:45:b3:72:e3:f9:04:fc:12:12:
2d:8d:cc:42:5c:91:8d:54:68:ca:d2:8c:82:f8:78:
4a:b4:d7:5d:9f:67:1e:06:2a:d5:fd:e6:41:d1:8d:
53:14:2d:a2:fd:f1:9b:97:80:68:d0:78:14:18:76:
44:80:68:0d:db:5d:e8:20:17:bb:cd:a7:85:d6:e8:
cf:5c:30:e4:cc:bb:18:62:fc:db:de:ba:57:2a:f7:
c8:61:4d:0e:c2:60:28:54:00:37:8c:c0:f9:59:48:
c3:32:cb:bd:13:9b:93:a0:6e:27:c0:81:17:f3:39:
19:74:c9:22:e9:fb:fe:f2:3d:3e:16:6a:7f:16:fa:
e2:a7:f2:3e:19:36:f6:26:aa:66:4f:02:0b:e6:60:
2f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:C0:B4:08:0B:F5:F3:96:BE:C1:F9:D2:AD:E2:AE:AA:99:C5:DF:94
X509v3 Authority Key Identifier:
keyid:22:A7:76:A6:95:5C:01:63:C9:CF:1A:83:8C:41:DF:EE:5D:A9:DB:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/k8C0CAv185a-wfnSreKuqpnF35Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.248.0/24
91.227.74.0/24
176.103.220.0/23
193.148.68.0/22
IPv6:
2a10:fc80::/29
Signature Algorithm: sha256WithRSAEncryption
17:d7:ea:c3:84:bc:84:cb:26:91:af:90:ac:25:f5:9e:11:57:
79:00:57:44:4c:24:47:86:b5:24:10:d5:0f:99:c2:b7:02:d8:
e0:ee:94:58:51:fd:f7:2c:13:e5:a3:8e:bd:22:98:33:7b:fb:
4b:1c:06:f7:3e:4c:8d:7f:7a:e9:a8:7b:9f:a9:b7:6b:35:71:
89:a6:6d:9a:b6:08:2d:73:c8:8b:a3:47:ec:a4:2f:03:a1:75:
64:41:f5:7c:bb:0c:1a:39:65:d2:8e:3b:65:12:41:ca:c8:35:
d4:70:fb:52:2a:46:b2:a8:3b:8e:95:00:5b:c4:bb:4f:1a:cb:
69:da:a7:44:e9:90:d0:10:1f:3e:85:0d:6a:d0:97:e5:5e:48:
28:99:45:cb:44:f5:e4:74:33:ca:b5:44:51:2a:c0:97:84:54:
63:d1:26:db:ca:48:8f:e4:e9:6b:9c:1a:0a:92:2c:a3:d3:f6:
87:d7:fa:44:b8:fd:72:43:1c:97:11:e5:1d:91:7a:c7:75:f9:
f6:59:0b:5b:c3:fd:d3:d0:f8:65:f8:4d:87:45:bf:f5:0c:66:
94:ee:d1:f0:5d:10:4e:76:0c:46:39:41:f6:8a:25:c0:52:f3:
dc:46:36:d2:17:8e:bb:cf:ce:75:ea:b2:76:15:f7:c7:60:d0:
32:07:e7:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:32:04 2024 by rpki-client on console-ams.rpki-client.org