Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/1--KYK2QpKJl2JSRyohznG4b-lZo.roa
File: 1--KYK2QpKJl2JSRyohznG4b-lZo.roa (raw, json)
Hash identifier: uSOGZripKPcLfSomrQEZnMd8khhtNrq5bX7RkIkYluY=
Subject key identifier: FB:E2:98:2B:64:29:28:99:76:25:24:72:A2:1C:E7:1B:86:FE:95:9A
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 01920E23F07EE74A6DA0951660F3AE9796A4
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/1--KYK2QpKJl2JSRyohznG4b-lZo.roa
Signing time: Fri 20 Sep 2024 06:34:49 +0000
ROA not before: Fri 20 Sep 2024 06:34:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 194.146.92.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 26 Oct 2024 01:36:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:0e:23:f0:7e:e7:4a:6d:a0:95:16:60:f3:ae:97:96:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Sep 20 06:34:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fbe2982b6429289976252472a21ce71b86fe959a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:83:2a:46:6f:d0:04:02:9d:d3:fe:aa:e0:e1:
21:a5:f1:06:c7:29:5f:fc:96:a4:f8:bb:4b:d0:36:
0e:33:95:aa:a4:d3:79:60:ee:44:24:e7:23:37:19:
b2:cb:a8:76:6d:a2:0f:75:ae:8f:b6:75:46:01:88:
a7:89:d1:a3:bf:07:91:82:45:b3:e4:28:4b:63:b3:
61:41:f3:e4:2c:ac:13:a3:22:c0:ed:de:eb:3c:21:
8c:8b:46:fc:9a:6e:b8:44:3e:16:68:41:54:c6:7e:
aa:0b:57:ab:d6:22:28:8a:94:5b:c0:45:f5:13:ae:
3c:a0:69:a9:35:db:94:86:b3:c8:72:dd:b2:26:45:
a5:9f:50:9a:00:98:e5:3f:08:1a:05:88:cc:32:e1:
cd:59:f3:1c:05:88:09:a1:67:4d:52:ed:56:8b:ad:
8d:19:35:ef:f8:31:ed:89:f5:dd:7a:b4:b4:c9:4b:
d5:02:a7:8f:8e:73:a3:0a:54:ab:76:91:2f:ff:fc:
15:87:9e:b3:ef:bd:3a:69:53:4b:31:78:32:09:8a:
86:99:99:a8:c7:95:3f:e2:00:60:a0:a8:70:b6:7e:
a4:e5:f2:eb:a8:15:48:77:84:b2:88:15:ad:26:8a:
19:5d:c1:3f:0e:97:7e:45:65:99:99:a6:11:69:7c:
97:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:E2:98:2B:64:29:28:99:76:25:24:72:A2:1C:E7:1B:86:FE:95:9A
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/1--KYK2QpKJl2JSRyohznG4b-lZo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.146.92.0/24
Signature Algorithm: sha256WithRSAEncryption
10:da:19:4d:42:18:b0:01:31:fa:81:24:39:81:89:e3:e2:f8:
78:e3:35:9a:a3:53:7c:c9:43:4f:c7:a7:66:35:41:5c:e0:5b:
fe:d2:20:c7:38:91:cd:00:2b:c5:fa:d3:1f:3b:26:33:6d:98:
af:f4:b3:3d:c5:fe:5a:ea:27:ac:23:06:d3:f3:01:05:68:41:
53:4c:21:2a:ba:b0:53:91:99:a5:ff:8e:83:85:75:96:d4:a2:
bd:04:eb:8f:6f:e7:97:60:13:b2:f5:c2:de:58:6d:f1:41:d7:
18:1a:2f:34:5f:b7:e1:86:a4:7f:a0:eb:76:61:e5:04:ab:6a:
d4:6d:23:70:ec:78:5a:08:11:48:33:4e:6e:be:f5:df:83:01:
99:48:1c:52:09:88:2c:a7:84:ce:dd:3f:de:95:78:2d:8e:e7:
57:ed:2d:e1:28:5c:f5:ea:cb:e4:dd:9a:c5:ec:af:94:5f:e4:
88:01:65:4e:3d:d8:3f:ca:01:70:16:79:b3:a7:ed:fa:92:e9:
a2:97:ea:fd:c7:4a:d5:73:31:ca:07:41:66:2e:ca:28:66:6b:
3a:a3:5c:d6:c7:d2:4e:b8:c2:d2:25:f9:b9:3a:ae:8c:1e:f4:
f0:06:56:02:42:75:3f:46:6d:9b:c5:b2:83:88:a2:78:6a:7e:
d8:56:55:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 26 04:05:30 2024 by rpki-client on console-fra.rpki-client.org