Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/KZTlRNWw8IMDzriN0B0p8AHLAOk.roa
File: KZTlRNWw8IMDzriN0B0p8AHLAOk.roa (raw, json)
Hash identifier: ILDEvccXxoAyybu5vyQfcCD0IW/xqKzgGLFWmjZ+pvE=
Subject key identifier: 29:94:E5:44:D5:B0:F0:83:03:CE:B8:8D:D0:1D:29:F0:01:CB:00:E9
Certificate issuer: /CN=2f2a0fa20383332a3f414f054753a0b60b25ba10
Certificate serial: 0190D4C3C82D327F105077CE3CE1A18C6191
Authority key identifier: 2F:2A:0F:A2:03:83:33:2A:3F:41:4F:05:47:53:A0:B6:0B:25:BA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/KZTlRNWw8IMDzriN0B0p8AHLAOk.roa
Signing time: Sun 21 Jul 2024 10:08:38 +0000
ROA not before: Sun 21 Jul 2024 10:08:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 91.197.32.0/23 maxlen: 24
91.197.34.0/23 maxlen: 24
193.108.80.0/22 maxlen: 24
193.108.84.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 25 Jul 2024 07:26:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:d4:c3:c8:2d:32:7f:10:50:77:ce:3c:e1:a1:8c:61:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f2a0fa20383332a3f414f054753a0b60b25ba10
Validity
Not Before: Jul 21 10:08:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2994e544d5b0f08303ceb88dd01d29f001cb00e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:7d:c1:d2:59:9d:55:89:e0:99:ac:d6:c8:a6:
ad:ad:70:18:2b:fb:a3:dc:3b:e6:fe:e7:d8:0b:fc:
5d:f1:ee:01:48:75:ed:10:01:7b:ea:f7:c1:68:24:
a8:32:c6:83:16:70:16:4b:c4:3c:44:7a:93:5f:26:
64:45:ea:2a:fe:03:d5:02:9c:88:fd:17:5f:1f:56:
5c:30:53:ca:4b:5a:db:51:22:93:c9:7f:ee:e7:99:
bc:4c:11:82:5f:a4:6b:e4:fa:58:12:46:6d:fb:44:
86:b5:03:01:c3:57:04:22:b7:c4:f7:0f:11:82:ef:
a0:b7:aa:01:d5:48:c5:c1:8a:d1:11:df:6e:ba:69:
cd:02:5e:41:2b:43:85:1d:af:7c:f6:f2:f2:94:05:
c0:94:36:98:30:f0:cd:3c:13:7c:df:4e:de:23:45:
06:e6:3d:58:cc:06:24:79:4c:7c:fd:01:05:37:a8:
1b:30:06:08:4b:ba:ee:15:6a:75:ff:3a:3e:71:9d:
d7:a9:d0:54:ef:37:df:c3:7b:4f:5d:dc:da:9c:e0:
fb:3c:82:84:71:2a:50:75:3b:fd:19:72:f7:f6:26:
ae:1f:fd:69:2d:da:7e:b2:6b:db:0c:fe:89:e8:99:
0a:8c:b4:f4:a1:ce:10:23:d1:b3:af:e0:bd:9c:10:
3d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:94:E5:44:D5:B0:F0:83:03:CE:B8:8D:D0:1D:29:F0:01:CB:00:E9
X509v3 Authority Key Identifier:
keyid:2F:2A:0F:A2:03:83:33:2A:3F:41:4F:05:47:53:A0:B6:0B:25:BA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/KZTlRNWw8IMDzriN0B0p8AHLAOk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.197.32.0/22
193.108.80.0/21
Signature Algorithm: sha256WithRSAEncryption
9f:ed:9b:89:97:5d:2a:da:a7:3e:70:57:65:da:d5:b0:a3:dc:
56:1b:40:15:45:b3:bd:c2:55:47:04:87:fb:d8:aa:84:4b:74:
22:56:7d:ff:a0:cc:1e:7d:db:c8:7d:1f:a3:79:b4:4d:b8:ba:
01:a1:a5:b5:11:fe:34:af:50:e9:eb:07:77:47:3b:58:3a:e4:
65:0f:1d:14:55:58:e0:c6:7f:ed:24:34:d8:dc:be:49:f6:ea:
85:db:7e:8d:63:70:f2:c8:8c:cf:73:7e:81:e5:60:ab:15:ff:
8c:4a:72:fc:4e:d5:b8:4b:99:df:15:ec:e6:68:17:8e:73:45:
39:df:e0:89:09:bf:cd:cb:2c:7b:58:f1:50:d0:5f:da:8b:9b:
70:42:e9:5c:b7:a8:64:ed:61:b8:2a:a6:5b:6b:73:40:4f:c5:
7b:b8:2c:ee:91:ad:60:64:89:84:40:7f:f4:f4:ff:37:e8:f6:
8a:3b:f3:9d:5e:c3:b3:00:af:18:8a:09:f9:34:56:b8:54:b8:
9f:2d:30:cc:1d:12:ac:e3:ff:aa:bd:5d:8d:22:a6:e8:24:1b:
a8:f3:67:fb:ed:40:a9:9b:7f:60:e7:aa:dc:e8:21:83:ee:a2:
3a:46:24:43:c6:77:2e:65:ee:5c:46:c2:76:e6:2d:29:fb:ff:
b1:58:1f:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 25 09:27:18 2024 by rpki-client on console-ams.rpki-client.org