Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/KOGsolS1Dvm6SIw2QWcB1CObhhw.roa
File: KOGsolS1Dvm6SIw2QWcB1CObhhw.roa (raw, json)
Hash identifier: AYoBrsmITCzw1FunD2YlcnS81c+GOWxjnWBXAwm5Otc=
Subject key identifier: 28:E1:AC:A2:54:B5:0E:F9:BA:48:8C:36:41:67:01:D4:23:9B:86:1C
Certificate issuer: /CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Certificate serial: 018B81AFAD66FD31E757B1FE202DABC06AC0
Authority key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/KOGsolS1Dvm6SIw2QWcB1CObhhw.roa
Signing time: Mon 30 Oct 2023 17:44:15 +0000
ROA not before: Mon 30 Oct 2023 17:44:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47583
IP address blocks: 194.55.132.0/23 maxlen: 23
45.145.184.0/22 maxlen: 22
193.202.44.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 30 Oct 2023 22:53:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:81:af:ad:66:fd:31:e7:57:b1:fe:20:2d:ab:c0:6a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Validity
Not Before: Oct 30 17:44:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=28e1aca254b50ef9ba488c36416701d4239b861c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5f:ae:3a:8c:d3:e7:fa:39:10:ba:5a:9a:22:
7a:dd:e6:f8:4b:f8:70:5a:a3:4c:49:c9:12:37:c1:
cf:80:31:a7:ed:89:c6:7a:db:78:04:19:1e:8c:d8:
11:0a:b3:be:ec:d3:5d:62:a0:45:79:91:d8:51:eb:
86:06:e7:f7:d5:a3:b8:c9:5e:14:f8:66:09:c5:7f:
a4:f7:a2:8e:d8:59:ca:0b:ed:10:d0:be:79:ba:6d:
60:34:9b:86:71:69:b9:90:c2:73:eb:3a:0d:61:5b:
c3:36:d8:c9:57:26:2e:fb:83:16:5e:80:bc:cc:74:
60:88:c0:fd:db:55:af:60:2a:59:3c:e2:f7:f2:2b:
2c:0a:99:68:7a:24:db:0b:a2:61:0c:ab:54:e7:a3:
99:da:ff:d4:e2:af:0b:56:5c:ef:f3:d3:d6:87:16:
05:26:13:a7:fa:8b:34:da:7a:10:13:6e:49:6a:3d:
b6:38:fe:6c:03:c0:68:36:43:a2:12:1c:67:c2:93:
91:45:2a:02:ac:a0:cc:3e:ad:95:ac:c7:cc:f5:dd:
ce:12:98:79:48:45:8f:ec:02:8c:fa:0d:ba:d0:aa:
6f:b0:9f:b8:a8:20:cd:c8:f4:3f:d0:1b:94:bf:d0:
a8:3c:2b:7a:a4:37:1d:a2:4b:ee:f4:30:5f:73:fe:
36:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:E1:AC:A2:54:B5:0E:F9:BA:48:8C:36:41:67:01:D4:23:9B:86:1C
X509v3 Authority Key Identifier:
keyid:0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/KOGsolS1Dvm6SIw2QWcB1CObhhw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.184.0/22
193.202.44.0/23
194.55.132.0/23
Signature Algorithm: sha256WithRSAEncryption
32:05:69:da:58:9f:53:36:de:7c:85:2d:e9:8c:e7:e6:41:5d:
14:cc:70:7f:33:24:aa:ee:aa:02:7e:aa:89:2b:43:77:c3:8d:
aa:bb:dd:41:dd:37:90:1f:79:e4:42:c3:99:65:5b:af:2b:1f:
b8:eb:83:0b:58:7e:2f:cf:ba:12:2f:b1:ac:f2:87:42:b9:cc:
b6:86:75:d3:d1:b8:6a:ba:5f:da:0b:2b:e4:98:fc:98:27:04:
d2:3c:59:e3:a6:57:78:7b:72:9c:5a:48:5c:bb:4b:a8:2e:50:
71:0f:4f:33:2a:88:0d:cd:a5:55:c3:f7:95:a5:ad:10:cd:85:
eb:c2:57:34:2d:c8:98:55:0f:67:fa:e0:82:ca:89:6e:99:ad:
c0:68:8a:d9:1b:0f:88:6c:7f:fb:27:31:a2:82:cf:1f:fc:f8:
52:ad:8d:7d:c2:7e:55:9a:b3:d0:f3:40:f0:ae:3f:ff:77:ff:
af:85:6d:3d:bf:38:85:af:b5:28:92:e5:5b:5c:8e:27:92:24:
ab:2c:da:d1:a2:a5:d1:6e:eb:8e:07:3b:d1:47:c4:a1:88:e7:
57:65:a5:8f:92:03:fd:77:b4:24:ca:9f:8b:e1:75:1b:ff:39:
e2:1d:3f:81:3c:15:fa:26:d3:8a:7d:45:96:6e:fb:17:65:1f:
56:5f:c2:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:24 2024 by rpki-client on console-fra.rpki-client.org