Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/Kvn8Y2nGYG55WCLAf-FfokIa_5c.roa
File: Kvn8Y2nGYG55WCLAf-FfokIa_5c.roa (raw, json)
Hash identifier: K+RQXV+OxkcPsfj6z01zvsLKRruAXktCVO5mssD4UxU=
Subject key identifier: 2A:F9:FC:63:69:C6:60:6E:79:58:22:C0:7F:E1:5F:A2:42:1A:FF:97
Certificate issuer: /CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Certificate serial: 0188FC177B0AA2842A28563E0E058E14A332
Authority key identifier: 89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/Kvn8Y2nGYG55WCLAf-FfokIa_5c.roa
Signing time: Tue 27 Jun 2023 09:02:57 +0000
ROA not before: Tue 27 Jun 2023 09:02:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9009
IP address blocks: 94.137.77.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:fc:17:7b:0a:a2:84:2a:28:56:3e:0e:05:8e:14:a3:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Validity
Not Before: Jun 27 09:02:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2af9fc6369c6606e795822c07fe15fa2421aff97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:12:b6:56:6f:58:b0:eb:1d:11:bf:1d:3a:0c:
90:59:8a:ee:e1:02:30:da:9b:40:2d:f1:fb:be:d7:
d0:6f:1a:5e:d4:90:d0:65:40:32:3f:5d:04:2f:57:
49:98:24:42:3d:44:a1:f2:0c:e5:24:09:f5:d6:a8:
09:da:19:68:51:76:38:2b:4a:83:52:e3:2d:9f:06:
ef:cd:99:23:63:7f:e9:d6:79:27:62:bb:be:34:56:
b3:bc:7f:77:7c:32:78:ed:3b:fb:b1:86:78:61:d8:
0f:31:07:50:d3:77:0d:46:6c:7a:71:87:d1:4f:ee:
58:32:65:79:6e:66:36:13:93:06:56:aa:9f:71:8d:
73:ed:51:c6:ec:af:d5:63:b2:9d:fa:f0:94:3f:be:
b4:db:48:01:1d:ea:f9:b0:7b:1d:29:08:37:b0:b9:
fe:95:c2:f7:c4:b7:8e:4a:a7:f8:d0:64:97:43:48:
ce:d7:f8:f3:32:71:e4:5b:c4:6b:f4:c8:37:2a:4a:
7b:2a:74:04:cd:ed:c8:92:f2:b0:9d:6c:69:65:52:
09:77:db:8a:53:92:cc:8a:74:02:37:92:a3:02:87:
cd:a9:09:78:2b:b0:31:89:ab:c9:47:95:05:a5:61:
f5:cf:37:f9:0a:ba:72:94:b6:1c:14:e8:ca:48:62:
85:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:F9:FC:63:69:C6:60:6E:79:58:22:C0:7F:E1:5F:A2:42:1A:FF:97
X509v3 Authority Key Identifier:
keyid:89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/Kvn8Y2nGYG55WCLAf-FfokIa_5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.137.77.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:80:51:83:5b:c9:5d:e1:83:cc:c8:a5:28:6b:91:e8:9f:00:
0f:bf:3d:07:42:0c:c1:e7:22:9b:e6:47:16:a9:8c:cf:fb:6f:
e6:a1:0b:5c:f2:b8:d4:72:b8:2a:0a:4c:c3:25:26:78:19:8e:
5f:a8:ac:7a:c4:0e:19:8a:dd:5d:46:06:98:16:f8:bf:28:11:
53:7f:35:9f:45:7e:e4:d1:a9:f2:e7:6c:88:1d:6b:ec:99:6d:
02:92:5b:f2:73:47:df:6b:ce:b9:71:48:b6:0c:91:15:74:39:
9f:7b:38:6b:b5:a2:37:d6:86:18:7c:62:48:c7:23:eb:0e:3c:
32:d7:13:1a:e2:49:5e:7a:df:39:4c:58:53:1b:de:80:e0:9d:
23:cd:f4:d9:97:42:f0:1f:43:3b:7e:98:69:b6:90:9e:22:d0:
0c:38:aa:95:09:3e:0a:a0:c6:ed:42:99:f3:e9:ad:4e:bd:da:
17:2f:d8:45:0f:0c:ac:fb:af:86:04:62:2b:c0:39:98:cf:dc:
18:98:ae:34:b6:89:57:c8:2b:61:ea:fe:22:d0:5e:80:2a:e5:
36:e3:74:32:2d:bd:a3:c9:58:b5:b8:fc:9a:38:5b:20:1b:a0:
2f:3a:4a:63:98:aa:ae:54:56:ff:d7:cd:2c:1e:6c:4e:5a:b6:
7b:cc:42:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:57 2023 by rpki-client on console-ams.rpki-client.org