Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/216802-e8f9-4cbc-9d65-b9252cf2cc47/1/Ka8W-0CKZ91m_BFlHIDXKfwyQe4.roa
File: Ka8W-0CKZ91m_BFlHIDXKfwyQe4.roa (raw, json)
Hash identifier: I/AG7meaJX8clMLfh2iEGkFCiKnQcOETDSeTBIsnNf8=
Subject key identifier: 29:AF:16:FB:40:8A:67:DD:66:FC:11:65:1C:80:D7:29:FC:32:41:EE
Certificate issuer: /CN=e46e9ab47ca91fa132565860bcdd9a107ba032e4
Certificate serial: 018A6E8EE98C3A1C7116DF303D4B3AEB2CF5
Authority key identifier: E4:6E:9A:B4:7C:A9:1F:A1:32:56:58:60:BC:DD:9A:10:7B:A0:32:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5G6atHypH6EyVlhgvN2aEHugMuQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/216802-e8f9-4cbc-9d65-b9252cf2cc47/1/Ka8W-0CKZ91m_BFlHIDXKfwyQe4.roa
Signing time: Thu 07 Sep 2023 07:32:54 +0000
ROA not before: Thu 07 Sep 2023 07:32:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6730
IP address blocks: 194.145.157.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:6e:8e:e9:8c:3a:1c:71:16:df:30:3d:4b:3a:eb:2c:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e46e9ab47ca91fa132565860bcdd9a107ba032e4
Validity
Not Before: Sep 7 07:32:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=29af16fb408a67dd66fc11651c80d729fc3241ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:56:a3:47:c6:fe:0f:3f:4e:0c:55:bc:49:b3:
56:74:d3:a3:8d:49:83:ea:bc:60:bc:bc:aa:30:52:
8f:73:fc:12:e2:ca:cd:d8:76:96:73:2a:5f:7c:47:
7f:9c:57:4d:ce:d3:4d:a8:15:9f:df:80:73:d7:e9:
22:0c:aa:7f:3e:22:c5:4d:1d:88:e3:01:dc:5a:48:
c7:2e:93:06:79:11:7f:23:23:c4:af:23:68:09:9d:
c1:51:84:09:28:94:dc:f1:18:0f:61:02:fd:7c:e4:
e0:7a:e5:41:e0:51:7b:18:a2:da:60:dd:8d:59:49:
c8:04:9a:4e:0c:94:44:2d:93:4c:d2:f0:7a:1e:de:
63:ab:22:ad:17:52:46:29:e9:90:30:f3:3f:f6:c5:
31:31:e3:aa:5b:af:d1:4d:df:4f:cf:71:17:f0:eb:
18:88:b2:fe:9c:4c:0c:b4:47:ac:2d:5b:2f:04:98:
fc:cc:6d:d3:cb:1e:a9:cc:9e:f2:89:df:cd:e9:08:
98:c0:8f:fe:f1:7c:8b:82:f6:94:be:53:7f:29:ca:
96:8d:29:63:2b:ce:55:b4:04:68:0a:5c:db:dc:57:
c7:6a:bf:4c:a7:b6:e0:6c:df:31:0e:06:f7:f2:d8:
a6:67:50:cf:dc:37:d1:9f:5c:e3:de:5a:69:4c:39:
7e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:AF:16:FB:40:8A:67:DD:66:FC:11:65:1C:80:D7:29:FC:32:41:EE
X509v3 Authority Key Identifier:
keyid:E4:6E:9A:B4:7C:A9:1F:A1:32:56:58:60:BC:DD:9A:10:7B:A0:32:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5G6atHypH6EyVlhgvN2aEHugMuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/216802-e8f9-4cbc-9d65-b9252cf2cc47/1/Ka8W-0CKZ91m_BFlHIDXKfwyQe4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/216802-e8f9-4cbc-9d65-b9252cf2cc47/1/5G6atHypH6EyVlhgvN2aEHugMuQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.145.157.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:d7:56:b7:67:96:a8:6f:7f:5c:e0:2f:4e:8b:83:ef:3c:cb:
4b:15:c6:bc:3a:7b:6c:8c:15:b1:fd:8f:fd:f3:65:8d:a0:2f:
cc:7e:41:7f:a4:e9:8e:a6:fa:27:6d:ac:f7:d2:a1:ae:d2:d4:
c5:ff:ee:32:5c:21:54:f3:59:49:08:54:90:fc:e6:52:fa:da:
fd:92:be:c6:4e:8e:64:56:2a:92:c1:48:9f:9c:c6:de:c9:56:
0f:18:26:f7:34:77:57:f4:d9:3b:d9:a3:fb:14:1b:39:7b:d4:
98:eb:9b:44:53:29:65:ea:d3:89:a9:bb:a0:f0:71:d3:52:17:
3f:ac:5d:91:50:5b:3f:04:24:b7:20:94:66:1e:56:8f:a4:3e:
ae:75:df:57:f2:aa:26:e2:8e:4e:47:47:a5:8a:eb:30:fa:cf:
9e:b8:d7:87:d7:a6:dd:c0:93:0c:f4:f6:85:50:0f:1e:67:74:
4c:ff:f0:b9:0f:61:0b:22:7b:bb:b6:86:11:9f:d7:34:0e:27:
33:eb:d1:db:53:9a:c3:42:1a:60:0e:b3:5c:dc:70:da:42:c5:
6b:4c:ea:c4:23:a3:b3:8b:02:c1:b6:b5:70:dd:64:dc:c7:1c:
ae:f9:a4:dc:66:2b:53:bb:e4:be:d7:ce:c2:43:4a:47:8c:14:
dd:71:c9:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:23:58 2024 by rpki-client on console-fra.rpki-client.org