Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/0658f4-ae21-40ca-a3dc-c230519482e3/1/kNS-XSITrlSHgcBGKj4jbvx0JOg.roa
File: kNS-XSITrlSHgcBGKj4jbvx0JOg.roa (raw, json)
Hash identifier: vWCrlDwNlf1V0XlXg0gL8+mHsEe7qkQUZoLrdwFKrNM=
Subject key identifier: 90:D4:BE:5D:22:13:AE:54:87:81:C0:46:2A:3E:23:6E:FC:74:24:E8
Certificate issuer: /CN=b2c1d428cdee1eb3ffbf6df2318f9954dd885ff0
Certificate serial: 01867FAA5E930C67F08890742863D9BBC3A3
Authority key identifier: B2:C1:D4:28:CD:EE:1E:B3:FF:BF:6D:F2:31:8F:99:54:DD:88:5F:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ssHUKM3uHrP_v23yMY-ZVN2IX_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/0658f4-ae21-40ca-a3dc-c230519482e3/1/kNS-XSITrlSHgcBGKj4jbvx0JOg.roa
Signing time: Thu 23 Feb 2023 19:05:17 +0000
ROA not before: Thu 23 Feb 2023 19:05:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210439
IP address blocks: 194.150.79.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:7f:aa:5e:93:0c:67:f0:88:90:74:28:63:d9:bb:c3:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2c1d428cdee1eb3ffbf6df2318f9954dd885ff0
Validity
Not Before: Feb 23 19:05:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=90d4be5d2213ae548781c0462a3e236efc7424e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d1:3e:96:c9:1f:0b:b1:c8:60:69:f8:d6:1d:
80:b1:1d:ef:a1:80:39:3e:50:df:d3:3b:aa:60:a9:
7f:bc:21:cc:2a:47:6a:2e:9e:4a:7f:e6:39:99:a6:
02:ce:26:d9:81:2c:e8:c1:43:8c:6c:9b:f2:7e:82:
c1:63:91:24:f3:ab:31:d5:a7:7f:67:01:42:5a:78:
94:98:80:48:7b:71:18:f5:8b:f6:26:66:d0:87:9a:
67:63:46:2b:54:5f:6e:2b:29:85:07:a9:81:6b:b0:
c2:a6:ad:1a:a5:4c:bc:2d:58:e1:ea:1c:00:8d:46:
9a:71:73:2c:ae:bc:b5:04:e2:44:44:aa:22:71:af:
13:d8:dd:68:3a:32:50:02:22:94:b4:63:0c:c2:79:
49:a2:78:fc:d7:f8:cd:d8:d8:4f:5f:ef:6b:ff:01:
3c:ae:0b:6c:3f:10:d0:27:41:95:3f:d4:7c:c3:a3:
f8:9a:3e:a2:d8:72:05:49:93:4b:a5:07:75:db:94:
8e:d1:9c:7d:db:c1:f7:27:96:8a:82:56:a4:38:5f:
75:72:a9:15:2d:67:3d:78:83:43:5a:89:1d:cc:7a:
aa:e3:35:80:74:64:9c:8f:38:a3:36:4b:90:51:41:
e8:fc:8d:9d:60:c3:8a:18:c1:67:df:e1:34:c6:97:
c4:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:D4:BE:5D:22:13:AE:54:87:81:C0:46:2A:3E:23:6E:FC:74:24:E8
X509v3 Authority Key Identifier:
keyid:B2:C1:D4:28:CD:EE:1E:B3:FF:BF:6D:F2:31:8F:99:54:DD:88:5F:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ssHUKM3uHrP_v23yMY-ZVN2IX_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0658f4-ae21-40ca-a3dc-c230519482e3/1/kNS-XSITrlSHgcBGKj4jbvx0JOg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0658f4-ae21-40ca-a3dc-c230519482e3/1/ssHUKM3uHrP_v23yMY-ZVN2IX_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.150.79.0/24
Signature Algorithm: sha256WithRSAEncryption
00:89:96:53:de:a3:55:5a:d1:59:6f:73:1b:7b:6e:fe:43:40:
57:c3:ef:d5:e0:2e:91:fb:ec:a5:fc:9c:64:4a:cc:45:7a:55:
06:ab:d0:2a:32:64:08:b7:db:ba:aa:37:b3:46:f6:e9:25:8f:
c1:77:d1:c9:90:dc:2b:85:20:91:c2:bd:58:bb:28:c8:2f:49:
e2:4c:f1:2b:a5:e3:0e:76:5c:91:c1:bb:d0:7d:de:b3:eb:cb:
b8:58:fd:93:07:b0:86:a2:ce:cc:bd:ab:b1:e2:05:5b:42:91:
63:99:39:5d:c1:5d:74:e4:d7:73:74:e2:da:7d:a3:34:ac:20:
f2:3a:04:d2:b0:c7:cf:e7:c8:6a:09:a2:1f:34:5a:fd:8d:87:
db:37:90:98:f1:1f:df:a3:64:2e:0c:bd:60:f4:e1:ab:56:ff:
cf:1d:f2:fc:58:0e:2e:52:80:56:5e:26:0f:c9:fb:0f:4f:19:
4b:7b:49:1a:be:ca:bc:fd:81:09:b5:d9:50:63:c2:b1:3f:12:
9e:77:23:a0:e6:dd:79:03:4e:8a:0c:fb:30:6e:6f:1d:2a:a0:
8c:75:1f:39:45:ee:be:43:6a:ee:d5:d0:42:ee:23:d6:9f:c4:
89:8f:3c:7d:77:b4:c3:d8:ac:94:83:ec:7b:39:57:c0:02:b2:
ef:8d:3d:42
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYZ/ql6TDGfwiJB0KGPZu8OjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyYzFkNDI4Y2RlZTFlYjNmZmJmNmRmMjMxOGY5OTU0ZGQ4
ODVmZjAwHhcNMjMwMjIzMTkwNTE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MGQ0YmU1ZDIyMTNhZTU0ODc4MWMwNDYyYTNlMjM2ZWZjNzQyNGU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdE+lskfC7HIYGn41h2AsR3voYA5
PlDf0zuqYKl/vCHMKkdqLp5Kf+Y5maYCzibZgSzowUOMbJvyfoLBY5Ek86sx1ad/
ZwFCWniUmIBIe3EY9Yv2JmbQh5pnY0YrVF9uKymFB6mBa7DCpq0apUy8LVjh6hwA
jUaacXMsrry1BOJERKoica8T2N1oOjJQAiKUtGMMwnlJonj81/jN2NhPX+9r/wE8
rgtsPxDQJ0GVP9R8w6P4mj6i2HIFSZNLpQd125SO0Zx928H3J5aKglakOF91cqkV
LWc9eINDWokdzHqq4zWAdGScjzijNkuQUUHo/I2dYMOKGMFn3+E0xpfEwQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJDUvl0iE65Uh4HARio+I278dCToMB8GA1UdIwQY
MBaAFLLB1CjN7h6z/79t8jGPmVTdiF/wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3NIVUtNM3VIclBfdjIzeU1ZLVpWTjJJWF9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8wNjU4ZjQtYWUyMS00MGNhLWEzZGMt
YzIzMDUxOTQ4MmUzLzEva05TLVhTSVRybFNIZ2NCR0tqNGpidngwSk9nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi8wNjU4ZjQtYWUyMS00MGNhLWEzZGMtYzIzMDUxOTQ4MmUz
LzEvc3NIVUtNM3VIclBfdjIzeU1ZLVpWTjJJWF9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwpZPMA0G
CSqGSIb3DQEBCwUAA4IBAQAAiZZT3qNVWtFZb3Mbe27+Q0BXw+/V4C6R++yl/Jxk
SsxFelUGq9AqMmQIt9u6qjezRvbpJY/Bd9HJkNwrhSCRwr1YuyjIL0niTPErpeMO
dlyRwbvQfd6z68u4WP2TB7CGos7Mvaux4gVbQpFjmTldwV105NdzdOLafaM0rCDy
OgTSsMfP58hqCaIfNFr9jYfbN5CY8R/fo2QuDL1g9OGrVv/PHfL8WA4uUoBWXiYP
yfsPTxlLe0kavsq8/YEJtdlQY8KxPxKedyOg5t15A06KDPswbm8dKqCMdR85Re6+
Q2ru1dBC7iPWn8SJjzx9d7TD2KyUg+x7OVfAArLvjT1C
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:16 2023 by rpki-client on console-ams.rpki-client.org