Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/KO_hwh-nZkFtqEYi2n-6qfl2bQU.roa
File: KO_hwh-nZkFtqEYi2n-6qfl2bQU.roa (raw, json)
Hash identifier: Q+wz//ct9Bz6ASeFX3rND821Yx1may2DrF4REfRxy8U=
Subject key identifier: 28:EF:E1:C2:1F:A7:66:41:6D:A8:46:22:DA:7F:BA:A9:F9:76:6D:05
Certificate issuer: /CN=260b2bc45477c81d774daa0c28ab44b774ba0920
Certificate serial: 018B4823EE8E99B05C04A4F78D85C0E8C1AC
Authority key identifier: 26:0B:2B:C4:54:77:C8:1D:77:4D:AA:0C:28:AB:44:B7:74:BA:09:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JgsrxFR3yB13TaoMKKtEt3S6CSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/KO_hwh-nZkFtqEYi2n-6qfl2bQU.roa
Signing time: Thu 19 Oct 2023 13:33:16 +0000
ROA not before: Thu 19 Oct 2023 13:33:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62300
IP address blocks: 31.40.249.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:48:23:ee:8e:99:b0:5c:04:a4:f7:8d:85:c0:e8:c1:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=260b2bc45477c81d774daa0c28ab44b774ba0920
Validity
Not Before: Oct 19 13:33:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=28efe1c21fa766416da84622da7fbaa9f9766d05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:32:ba:e9:a3:80:ef:e4:43:79:d5:77:22:7b:
72:a4:d4:46:83:c2:7d:cb:71:65:98:83:ea:32:ee:
73:8f:87:77:ed:b6:ba:9a:c3:54:ed:4a:a3:92:fa:
e8:d5:a7:33:01:36:fd:5b:52:eb:ab:45:28:01:17:
70:48:36:42:1b:24:71:c7:d2:6e:f6:cd:c0:f8:8f:
76:25:03:d1:2a:0e:e0:13:49:8f:42:4a:70:72:31:
59:13:bb:82:0b:47:95:d0:69:78:9d:1d:0a:fe:40:
cf:8b:22:2d:e4:09:78:b8:13:13:c9:e3:01:2d:02:
39:5a:f2:57:88:81:94:3d:19:82:9f:f6:c2:0a:0c:
44:6a:b2:2b:c2:bb:55:e5:b3:42:21:02:9a:56:ba:
5b:a2:94:05:67:2b:54:05:a8:93:01:f7:ce:69:09:
51:ba:a3:ab:ca:d8:93:1f:45:da:e3:5d:fb:1b:d3:
d0:97:78:62:4d:74:59:3f:f8:5c:da:e7:d7:1c:57:
9b:89:ff:55:93:b5:0e:da:e2:92:9f:8b:31:bd:23:
a3:c5:60:bd:98:87:27:82:8f:b8:9e:6e:38:7c:0a:
c9:4e:25:b8:cd:b8:7f:1a:26:cb:33:31:fc:34:ff:
89:54:c2:d2:ce:3d:13:2e:48:d9:f5:fe:28:55:38:
73:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:EF:E1:C2:1F:A7:66:41:6D:A8:46:22:DA:7F:BA:A9:F9:76:6D:05
X509v3 Authority Key Identifier:
keyid:26:0B:2B:C4:54:77:C8:1D:77:4D:AA:0C:28:AB:44:B7:74:BA:09:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JgsrxFR3yB13TaoMKKtEt3S6CSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/KO_hwh-nZkFtqEYi2n-6qfl2bQU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/JgsrxFR3yB13TaoMKKtEt3S6CSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.249.0/24
Signature Algorithm: sha256WithRSAEncryption
08:1e:73:2b:62:a6:fa:40:9e:b9:dd:93:48:fa:e5:32:97:c7:
9f:f3:22:c1:2c:60:72:70:0a:fb:81:3d:4b:fd:fc:c2:09:f7:
13:04:ef:d8:46:2f:bd:44:59:51:9a:e8:25:f9:95:be:c8:04:
97:2e:aa:58:0a:66:2c:54:41:d7:9a:5e:69:ea:3d:00:05:40:
5e:62:fd:eb:a6:b7:c5:ab:da:e3:58:ed:f3:8a:dc:38:1e:15:
54:23:1a:8e:f7:34:19:3b:54:e3:db:45:82:9e:70:29:63:fb:
fe:b5:85:e4:ee:47:ce:56:1d:bd:db:b1:a0:29:14:cf:8e:ce:
31:bf:93:81:f1:2c:c5:17:98:72:2b:e8:3d:90:db:59:60:3a:
90:61:34:d9:79:74:d6:1b:34:47:1a:0d:78:56:46:4d:16:bf:
05:c3:a8:33:3e:aa:c6:eb:e6:89:bd:c2:13:db:97:62:90:b4:
23:c0:11:7c:05:3a:96:fa:ca:32:56:db:a7:42:af:ac:52:a4:
3c:3f:31:b8:cd:69:2b:2c:7d:6b:9d:3b:81:06:d8:37:81:cf:
ba:6d:9b:24:06:08:a8:59:bc:8c:ff:7c:c8:cd:15:66:63:9f:
95:ab:cd:31:7e:fc:67:5b:28:16:c2:c3:1b:28:96:f1:3e:e1:
89:ce:0c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:02 2024 by rpki-client on console-fra.rpki-client.org