Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/kjCa_urjYZdWMUux4x9Ru6uH1f4.roa
File: kjCa_urjYZdWMUux4x9Ru6uH1f4.roa (raw, json)
Hash identifier: kKmtjzLOJQjUpTT0wfKbDOT5CMreR8fP5924lgRBFLQ=
Subject key identifier: 92:30:9A:FE:EA:E3:61:97:56:31:4B:B1:E3:1F:51:BB:AB:87:D5:FE
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 018795A4DA12B97845C782026D038D8F3ED2
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/kjCa_urjYZdWMUux4x9Ru6uH1f4.roa
Signing time: Tue 18 Apr 2023 18:33:41 +0000
ROA not before: Tue 18 Apr 2023 18:33:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205463
IP address blocks: 188.132.130.0/24 maxlen: 24
188.132.202.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 25 Apr 2023 10:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:95:a4:da:12:b9:78:45:c7:82:02:6d:03:8d:8f:3e:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Apr 18 18:33:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=92309afeeae3619756314bb1e31f51bbab87d5fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:7f:5a:dd:1b:05:36:ea:0f:15:d8:a4:78:51:
0a:59:bd:40:9c:23:6d:76:64:07:47:e1:e2:70:76:
17:db:2b:af:90:0f:57:d4:55:c2:f9:c5:44:95:06:
40:dc:f9:27:2d:f9:ca:73:2e:6c:62:03:0e:14:14:
df:66:f3:c5:94:52:6f:3f:27:cc:36:46:cf:e4:70:
e2:fd:f7:26:86:0c:cf:90:4e:97:5e:4a:ea:85:5d:
40:8f:d2:ef:a5:59:88:6e:88:3f:6e:be:22:83:f1:
b0:26:05:78:f6:68:0a:0a:ad:3d:c9:2d:08:7f:fa:
79:ed:a8:9a:10:d7:5b:4f:4e:52:a4:4a:ee:09:ca:
63:0b:9e:3d:37:d4:ec:6c:29:be:b0:14:fc:c8:7b:
71:dd:12:3f:c4:4c:06:fd:91:5b:38:bb:1f:d2:76:
75:9c:ec:64:a2:9e:7d:d6:48:55:ad:18:94:87:ff:
4d:ff:54:94:1f:9f:2c:74:29:25:a1:37:1d:ad:b4:
63:94:fe:e1:a6:a9:e6:c0:8d:91:7e:1a:22:19:7d:
d4:13:6d:ac:dd:f7:b4:36:74:46:7d:37:2d:c8:4f:
02:28:33:60:fb:fa:83:cd:41:a8:60:80:f8:7b:78:
e1:4a:64:4e:61:a7:21:35:19:86:41:fa:6b:a3:b2:
fe:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:30:9A:FE:EA:E3:61:97:56:31:4B:B1:E3:1F:51:BB:AB:87:D5:FE
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/kjCa_urjYZdWMUux4x9Ru6uH1f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.132.130.0/24
188.132.202.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:c8:bd:1b:09:e3:c0:03:9f:79:8c:bd:21:f3:ce:43:b8:25:
16:c9:13:e4:72:dd:72:d9:cf:6a:d6:74:ec:1f:84:db:b4:a0:
06:73:00:ba:05:16:33:ad:78:ff:fa:f4:3d:2e:08:78:ee:77:
b8:6a:c8:9d:71:e9:d9:15:0f:ad:6a:af:d6:7a:31:56:6f:75:
ac:a8:53:e0:08:1e:99:ae:1e:4d:b3:b2:8d:fc:bb:73:9e:01:
b9:60:23:9f:c7:74:72:a2:a5:e9:d4:59:f7:0f:e7:60:2b:84:
92:10:7b:0d:8f:45:a2:c0:ea:a7:d1:50:40:23:ac:ea:6f:22:
b7:60:0b:a6:a1:4a:77:e9:e6:03:69:fb:c8:3d:cf:92:49:0c:
d9:9f:67:c9:4a:11:60:10:97:c5:74:34:34:bb:67:05:43:4b:
8c:23:14:11:c5:a3:63:62:30:27:cf:11:e3:7f:88:63:bf:04:
1c:3b:06:83:dc:08:39:4a:da:58:42:0f:c6:b1:cb:a8:29:1c:
f9:6c:4a:82:c3:45:3a:af:77:3d:9d:75:03:52:24:68:26:3b:
b8:ae:5b:7c:3a:89:ac:06:20:10:43:11:cf:67:5f:48:55:cf:
a7:3e:ec:d9:79:99:74:05:90:c9:35:97:a6:2e:8c:ed:78:ae:
9b:f0:62:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:44 2024 by rpki-client on console-fra.rpki-client.org