Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/KtcSP3L88Y6uxYx_K8PRXNJDK3o.roa
File: KtcSP3L88Y6uxYx_K8PRXNJDK3o.roa (raw, json)
Hash identifier: 2k4ywkGgM201cjI2hF1QiyZc8pvS42r2uZemX47rUYQ=
Subject key identifier: 2A:D7:12:3F:72:FC:F1:8E:AE:C5:8C:7F:2B:C3:D1:5C:D2:43:2B:7A
Certificate issuer: /CN=e1e12a2795b6e4df265f65df0a00cb7c7e45deef
Certificate serial: 018571F0FDDC0A40C5E1EEDC15DC7D177AB1
Authority key identifier: E1:E1:2A:27:95:B6:E4:DF:26:5F:65:DF:0A:00:CB:7C:7E:45:DE:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4eEqJ5W25N8mX2XfCgDLfH5F3u8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/KtcSP3L88Y6uxYx_K8PRXNJDK3o.roa
Signing time: Mon 02 Jan 2023 10:04:57 +0000
ROA not before: Mon 02 Jan 2023 10:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202211
IP address blocks: 185.69.252.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:f0:fd:dc:0a:40:c5:e1:ee:dc:15:dc:7d:17:7a:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1e12a2795b6e4df265f65df0a00cb7c7e45deef
Validity
Not Before: Jan 2 10:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2ad7123f72fcf18eaec58c7f2bc3d15cd2432b7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:47:54:cd:c4:09:e4:cf:87:f0:98:05:46:5b:
fa:b0:33:2c:66:9a:ea:e6:98:3f:17:04:42:90:53:
39:43:7e:03:c1:1d:b0:43:b9:4c:92:ea:f1:18:3a:
7c:d6:73:1f:0c:1a:06:79:9b:fb:84:e7:4a:44:a0:
20:3e:12:73:f7:ca:2f:6d:62:8c:20:1e:cf:92:30:
2e:18:43:08:c2:34:19:f8:d5:63:19:b8:39:b6:0a:
5d:0b:dd:e2:0d:be:8e:21:d2:61:7d:2c:b7:73:fa:
2d:99:59:df:69:6c:b1:84:1e:25:1e:a5:c4:37:f0:
14:a6:c1:b8:3e:92:49:27:bc:19:2a:76:b3:7d:34:
8e:82:7d:fa:c8:d4:15:e5:94:5c:25:11:34:99:75:
b0:7b:08:09:24:6c:06:47:52:78:e4:39:47:3d:a5:
e6:16:8a:83:71:3c:a5:9a:89:42:4e:8c:8b:ae:fa:
1b:34:a9:44:ab:e0:1c:c2:d1:b4:56:6f:76:a5:f9:
cf:58:80:81:e6:9e:2a:e5:d3:7c:b5:27:d7:64:c4:
64:55:02:01:20:ef:d2:7d:23:de:5e:bc:19:2b:c1:
c7:39:df:e8:40:0a:c3:2f:97:86:06:b1:f8:96:75:
98:e7:ae:c2:ef:19:58:fc:bf:5e:ae:31:7f:4c:88:
a7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:D7:12:3F:72:FC:F1:8E:AE:C5:8C:7F:2B:C3:D1:5C:D2:43:2B:7A
X509v3 Authority Key Identifier:
keyid:E1:E1:2A:27:95:B6:E4:DF:26:5F:65:DF:0A:00:CB:7C:7E:45:DE:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4eEqJ5W25N8mX2XfCgDLfH5F3u8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/KtcSP3L88Y6uxYx_K8PRXNJDK3o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/4eEqJ5W25N8mX2XfCgDLfH5F3u8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.69.252.0/22
Signature Algorithm: sha256WithRSAEncryption
55:c6:6f:f2:89:d5:bc:c0:6f:e5:10:2c:20:05:d0:e6:73:d2:
7e:dc:6b:ca:06:83:01:12:6a:3a:68:66:27:1f:fc:03:82:2b:
18:93:77:0f:57:1b:45:ea:0d:60:ea:28:db:69:86:18:a9:e9:
d9:19:77:91:cd:3f:26:c4:88:d3:fa:08:2c:89:6a:51:63:c5:
5b:06:e1:c5:8c:ac:7e:fb:81:68:76:e6:25:45:b7:db:5d:9a:
6d:9c:4c:97:f5:36:8f:8f:5a:0e:da:cd:c8:1c:ea:5d:22:8c:
a7:ac:c0:6e:83:f7:55:e9:98:f7:69:ed:9d:42:02:50:b1:91:
b0:f8:e4:f0:25:02:61:56:33:56:6b:af:c8:c2:f8:4c:3a:25:
71:8e:03:9f:3b:64:74:1f:39:62:54:57:9e:08:6c:ae:7f:da:
92:93:b6:f2:3b:ec:2d:30:94:bb:85:35:70:67:6e:80:f5:b1:
8c:0c:7c:ce:c0:0f:96:e3:56:9b:7d:28:4d:aa:9c:68:fa:55:
56:77:d5:36:da:d0:fa:b4:dc:c3:a8:57:1f:e8:1c:2c:09:da:
57:f0:f2:05:4f:b2:01:0a:99:e2:62:38:f9:ac:9c:99:2b:ec:
74:d8:67:9c:c0:9a:57:1d:d3:2c:23:88:4a:fa:db:52:eb:cd:
c4:fa:21:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:49:40 2024 by rpki-client on console-fra.rpki-client.org