Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/KobUQ_x8wDcxVUJ8rq01w61HSWc.roa
File: KobUQ_x8wDcxVUJ8rq01w61HSWc.roa (raw, json)
Hash identifier: a4AyEN7LQfMwhoH0mbeMetuCUpwJLhVOqN294cm5/T8=
Subject key identifier: 2A:86:D4:43:FC:7C:C0:37:31:55:42:7C:AE:AD:35:C3:AD:47:49:67
Certificate issuer: /CN=128fde2bfc63efe3d132ddac7837e15c7f4b49f4
Certificate serial: 01856D0A8E1195975E7DACEF9496D0360208
Authority key identifier: 12:8F:DE:2B:FC:63:EF:E3:D1:32:DD:AC:78:37:E1:5C:7F:4B:49:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/KobUQ_x8wDcxVUJ8rq01w61HSWc.roa
Signing time: Sun 01 Jan 2023 11:14:46 +0000
ROA not before: Sun 01 Jan 2023 11:14:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 136907
IP address blocks: 193.105.244.0/23 maxlen: 23
193.84.248.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:30:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:8e:11:95:97:5e:7d:ac:ef:94:96:d0:36:02:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=128fde2bfc63efe3d132ddac7837e15c7f4b49f4
Validity
Not Before: Jan 1 11:14:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2a86d443fc7cc0373155427caead35c3ad474967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d5:de:9f:7d:58:d2:bb:f3:6b:48:0c:84:b7:
62:6b:39:47:37:88:0c:8d:c6:11:0c:b6:24:bf:a0:
bb:8d:7d:f3:c1:9e:17:76:cc:72:be:45:05:61:f9:
06:a2:67:4a:f3:51:6b:94:2a:92:44:ec:27:76:a0:
d8:22:69:47:ca:0e:b3:c9:25:d4:9e:52:c5:a7:ac:
9b:9b:4e:40:a2:c2:5d:dd:47:68:48:df:5b:6d:4b:
f0:17:1b:da:84:16:51:c6:01:5d:e8:c2:28:7e:52:
ed:eb:53:25:ab:79:c6:88:e9:35:2e:21:47:10:a6:
01:ca:9d:76:a3:2c:9b:e1:f1:d4:0c:1d:f5:fa:d0:
cd:47:fa:0d:15:c0:ec:42:ff:b7:42:ac:8f:13:b9:
be:b8:db:80:ec:52:41:1a:4c:c8:0a:2e:dc:3a:0b:
25:f3:27:a8:c4:e5:40:51:f2:44:b5:21:6f:58:a0:
e8:ec:e2:a7:cf:09:b1:cb:11:63:3c:2e:17:a4:58:
a1:7a:a1:fa:cc:7e:ab:14:70:de:f3:20:7d:83:1c:
1c:c8:ea:24:83:b8:11:c7:6a:4a:cf:38:d9:88:3b:
e4:e7:6a:d3:86:d6:87:9a:00:e1:39:a6:d2:f7:29:
9b:47:56:12:c0:59:9f:1d:1d:bb:aa:4a:63:1c:a9:
44:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:86:D4:43:FC:7C:C0:37:31:55:42:7C:AE:AD:35:C3:AD:47:49:67
X509v3 Authority Key Identifier:
keyid:12:8F:DE:2B:FC:63:EF:E3:D1:32:DD:AC:78:37:E1:5C:7F:4B:49:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/KobUQ_x8wDcxVUJ8rq01w61HSWc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.84.248.0/23
193.105.244.0/23
Signature Algorithm: sha256WithRSAEncryption
44:89:fc:e9:7b:c1:a1:2f:1d:c2:74:e9:2f:45:07:03:9d:ce:
04:37:42:cc:fe:b4:8c:df:36:8f:58:01:ac:b5:6b:f6:c1:05:
cd:ab:1c:94:d0:8d:7e:8e:6c:e8:79:8d:fb:89:2f:9c:ac:15:
7c:f3:21:8f:f3:8e:c8:35:df:a9:07:ab:33:03:1c:6f:2c:04:
61:3e:c1:21:f6:f4:9a:4d:78:f3:b3:f2:a7:d4:ba:23:3a:f5:
56:95:c5:2c:ed:98:8b:04:3e:2e:d7:c6:d6:75:f5:3f:5f:db:
01:ea:bc:83:e6:e1:85:54:4a:2a:5d:34:ae:14:b8:3f:cd:23:
a1:3a:cd:53:93:27:6a:8b:ae:0b:4c:bd:81:eb:e8:a4:f8:8a:
ff:fd:28:40:13:d4:f3:a9:ae:76:bf:fe:e4:13:2e:d4:38:1b:
06:69:17:e8:57:b7:cb:00:04:49:56:91:88:95:83:90:15:bc:
bf:15:09:95:fa:e0:3b:c8:f7:73:20:82:51:71:2a:b7:59:40:
9a:84:dc:0f:9a:47:09:4e:c5:b7:05:2b:98:5a:9c:49:18:5b:
46:7a:02:3d:52:28:c4:cc:c7:4e:ff:07:45:9d:0c:0a:f3:f4:
6a:03:e9:3d:a0:d0:f1:c6:4d:71:d0:8b:75:de:6d:28:90:2b:
eb:1d:a9:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:57 2024 by rpki-client on console-fra.rpki-client.org