Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/kyoOZ_qpuieYSf3fsQSQPSi5ZBU.roa
File: kyoOZ_qpuieYSf3fsQSQPSi5ZBU.roa (raw, json)
Hash identifier: f9vW0gaP84Fd56ZW7H4IRpY6COgOIHqZWHuqp9AthOU=
Subject key identifier: 93:2A:0E:67:FA:A9:BA:27:98:49:FD:DF:B1:04:90:3D:28:B9:64:15
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 018B812F818BD797541657D61313D4758494
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/kyoOZ_qpuieYSf3fsQSQPSi5ZBU.roa
Signing time: Mon 30 Oct 2023 15:24:16 +0000
ROA not before: Mon 30 Oct 2023 15:24:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 188.209.140.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:81:2f:81:8b:d7:97:54:16:57:d6:13:13:d4:75:84:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Oct 30 15:24:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=932a0e67faa9ba279849fddfb104903d28b96415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f8:62:2d:30:de:4c:ae:9a:9c:a7:52:71:93:
4c:38:77:36:8d:18:74:eb:0a:6d:77:97:cb:4d:db:
19:8f:d8:92:ed:23:a3:71:ff:4c:e4:e8:2a:b7:44:
f3:ae:78:f8:62:27:7e:66:0a:ad:a2:0d:06:ea:0d:
06:ae:7b:27:cd:ab:15:06:a4:17:d9:38:12:6a:64:
1d:a2:f3:e1:b3:9c:e8:2e:42:eb:03:09:e5:13:00:
9b:7a:9b:bc:10:ed:ae:34:ef:9d:d4:dc:c0:41:02:
64:56:81:79:f3:6a:cb:ee:60:d6:a2:f8:17:49:55:
33:32:79:e9:cd:33:14:fc:7a:f8:ea:05:ef:fa:cf:
cd:86:ed:b6:fb:4c:74:7d:6a:c4:f3:f8:ee:c8:3a:
3c:bf:01:32:9b:c2:6c:1e:0a:70:91:b4:d2:68:65:
46:6d:9d:1d:8a:da:94:ad:e0:34:ba:6f:16:59:86:
b9:e0:d1:be:c1:9c:93:01:3f:24:fe:be:0b:13:f6:
d9:be:47:93:a1:d5:fe:ef:67:b7:a5:a0:ef:cd:50:
4d:49:a4:c7:71:2a:1e:b6:8d:62:61:cd:13:07:9f:
5c:ec:39:31:71:42:0f:a0:20:a3:d2:89:07:94:bf:
ef:a8:54:d9:7c:2a:c5:79:97:90:5e:8c:51:72:0e:
d2:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:2A:0E:67:FA:A9:BA:27:98:49:FD:DF:B1:04:90:3D:28:B9:64:15
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/kyoOZ_qpuieYSf3fsQSQPSi5ZBU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.209.140.0/22
Signature Algorithm: sha256WithRSAEncryption
53:ef:d9:30:af:75:58:54:c6:25:96:a6:51:9b:8d:23:b6:30:
90:d2:79:27:c7:7c:1d:c8:84:39:dd:bb:cb:17:c9:c6:5e:a9:
69:a2:34:b4:ec:3e:8c:2b:74:41:7d:15:6f:27:2e:68:da:ab:
f1:93:d2:82:91:50:f6:d5:94:cf:3c:93:38:45:59:0d:2c:8b:
f2:fe:02:2c:a1:d7:52:25:5e:e5:15:89:cc:f7:b2:e9:41:4a:
b7:84:51:ac:4c:fd:7e:4b:17:cb:03:64:c2:04:82:bb:b8:39:
bc:95:b7:f4:e3:40:ff:57:b2:19:4b:9c:17:94:44:68:95:be:
bd:04:7d:68:b5:dc:fa:c6:32:f6:2b:6f:85:75:3f:53:78:0c:
e3:02:c9:bc:82:93:f3:31:a8:6d:7d:4f:ba:40:9b:9c:41:6e:
58:f4:6e:9d:94:f7:a5:64:6e:26:c1:76:38:3b:d6:1b:13:6b:
02:19:b9:c3:9d:5d:87:6b:05:c8:c8:d8:d3:a5:d1:0c:f1:88:
e6:9e:e7:2c:1c:af:be:56:38:56:d2:3a:20:e3:11:fb:21:07:
3a:79:f2:6f:c0:d8:b4:ea:22:b5:4c:d4:9c:01:70:86:a8:9a:
8c:4b:48:1e:6d:18:13:a1:cb:bc:1e:c2:65:8c:7f:a2:74:68:
45:3b:1d:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:56:23 2024 by rpki-client on console-fra.rpki-client.org