Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/KhUn-vH_f27R0lVNNSIFAZabHHY.roa
File: KhUn-vH_f27R0lVNNSIFAZabHHY.roa (raw, json)
Hash identifier: vWPz6OGSwachrYPjuWr8DbsOXXidRImvFHPN9z7rZWc=
Subject key identifier: 2A:15:27:FA:F1:FF:7F:6E:D1:D2:55:4D:35:22:05:01:96:9B:1C:76
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 01856BEED5BF2E414E10074CB1207068E4D6
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/KhUn-vH_f27R0lVNNSIFAZabHHY.roa
Signing time: Sun 01 Jan 2023 06:04:52 +0000
ROA not before: Sun 01 Jan 2023 06:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204885
IP address blocks: 85.31.241.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ee:d5:bf:2e:41:4e:10:07:4c:b1:20:70:68:e4:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 06:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2a1527faf1ff7f6ed1d2554d35220501969b1c76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1b:99:96:9a:5d:25:0e:f3:50:d1:51:2a:bb:
5b:9e:e6:06:d3:e8:39:d2:7f:4f:4d:3a:cc:5a:85:
27:f4:fe:25:c1:40:46:0b:a2:4e:7b:22:b5:ce:cc:
93:63:bb:bf:d3:1a:a3:36:12:85:b4:7a:86:5b:f3:
2e:0a:cc:69:5a:c3:a3:cb:66:43:41:5e:3c:f2:2f:
d7:00:c3:15:70:f3:cd:fa:e9:4b:e2:d9:ff:e0:e9:
81:ef:90:68:1c:09:ec:ee:cd:d3:c0:de:86:5b:22:
ac:b5:54:fc:5e:b7:6a:79:c9:7a:26:11:ab:6f:74:
0f:08:6f:38:0c:14:37:e1:0b:68:70:e0:ad:72:34:
9a:5b:cf:ca:d0:4d:7c:11:30:dd:f0:0d:d5:0f:73:
fc:73:f4:ae:90:96:5a:d8:48:c6:be:17:3d:0b:b0:
1b:e0:37:a8:19:95:cd:60:92:8d:8a:b8:6e:ed:76:
49:85:bc:a5:7a:d9:54:86:1e:c0:74:12:94:1e:1b:
40:a8:f9:77:41:ad:87:94:f5:1f:4a:11:66:9e:e4:
a6:ed:7c:4c:0b:5e:e8:a7:38:e9:ed:75:0c:8a:a3:
d4:bc:b3:20:8d:d0:19:ae:7b:84:88:45:38:57:92:
f0:40:49:0c:76:f2:2d:af:50:e0:6e:64:8c:c6:4d:
db:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:15:27:FA:F1:FF:7F:6E:D1:D2:55:4D:35:22:05:01:96:9B:1C:76
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/KhUn-vH_f27R0lVNNSIFAZabHHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.31.241.0/24
Signature Algorithm: sha256WithRSAEncryption
94:7e:c8:0c:62:25:d3:55:2f:f2:d9:69:cc:c2:f9:75:d8:71:
7b:89:bd:9a:c9:8b:7c:eb:73:84:af:aa:18:97:20:66:62:e8:
1a:b4:22:1c:70:ad:bd:e1:ef:c8:91:43:bb:65:19:52:fb:e7:
d1:42:70:28:58:63:b1:c9:15:93:d5:ce:5d:fd:80:52:88:eb:
86:1e:2a:bc:a0:3f:5a:a3:b0:a9:f5:f5:8e:c8:75:66:76:01:
f0:1a:6f:0a:e0:76:72:3e:02:d3:16:36:94:af:f0:38:95:52:
e6:ed:30:18:60:01:29:e0:5b:e6:45:b8:44:a3:87:26:e1:4e:
34:5e:f6:1b:d8:28:03:e3:e5:61:fc:b3:c6:50:07:03:2e:2b:
ca:3d:1f:2f:b5:ae:91:0a:0e:1e:3d:8c:0c:08:cc:f2:0f:f2:
dd:66:57:92:da:89:57:03:d0:d6:54:96:bf:19:28:7a:64:a8:
35:c2:3a:83:a0:e9:a9:ec:24:db:42:9e:68:2a:70:c1:b2:85:
f1:3f:aa:40:c3:82:ea:ad:64:da:b4:b3:b5:6f:91:84:33:e5:
ed:6b:52:98:88:58:cc:37:e9:2c:00:82:a6:24:b3:e2:b1:01:
a8:c0:5b:c3:6a:2a:a6:b9:25:40:c0:46:eb:7a:08:b6:f3:8a:
bb:1a:61:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:47 2024 by rpki-client on console-fra.rpki-client.org