Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/KnCXQKPLiuS3uxxA7ytZg65DVYo.roa
File: KnCXQKPLiuS3uxxA7ytZg65DVYo.roa (raw, json)
Hash identifier: 3siO5+3XTNzYtvj9siM0DQvZNGnGaZqbiKdyW4uhf5U=
Subject key identifier: 2A:70:97:40:A3:CB:8A:E4:B7:BB:1C:40:EF:2B:59:83:AE:43:55:8A
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0186B68CB95F190CEA489467360C3D6DEB74
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/KnCXQKPLiuS3uxxA7ytZg65DVYo.roa
Signing time: Mon 06 Mar 2023 10:52:01 +0000
ROA not before: Mon 06 Mar 2023 10:52:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12365
IP address blocks: 93.170.224.0/21 maxlen: 24
92.38.96.0/19 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:b6:8c:b9:5f:19:0c:ea:48:94:67:36:0c:3d:6d:eb:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Mar 6 10:52:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2a709740a3cb8ae4b7bb1c40ef2b5983ae43558a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:01:47:49:76:af:e3:c9:a1:3d:c1:f3:02:2c:
da:c1:11:04:ef:c7:ce:e2:ec:f1:e0:85:25:72:6a:
21:75:72:8a:f3:05:94:12:d1:b6:29:c6:d8:05:91:
ba:21:c3:17:be:29:e9:86:16:ec:e3:52:28:be:06:
81:5e:7a:08:0c:d3:f6:7a:ad:f6:cd:07:62:b9:24:
84:56:47:7f:39:ab:3c:1b:95:86:87:4b:04:fb:93:
bf:77:59:a2:8b:90:50:75:12:33:28:d3:c6:82:1a:
09:00:d9:f2:42:fb:e1:dc:ed:47:5a:6f:42:51:e2:
2a:68:94:e5:77:4a:05:d8:31:24:a5:a2:12:ec:23:
ed:13:ad:a8:3f:5c:c5:36:c7:80:d9:45:2c:cd:28:
52:8d:ed:ac:5e:09:7b:71:68:01:6d:32:94:97:53:
7a:b5:ac:4b:0d:48:97:bb:01:c5:dc:6a:2f:93:55:
8f:40:1a:bc:53:70:9e:87:e6:15:25:f9:91:02:ee:
1f:a1:aa:6d:22:7c:22:47:a9:2c:af:4b:4c:b8:b8:
47:0c:d4:ae:b7:a2:90:e1:b4:77:ed:fd:fd:37:fc:
b0:ae:7f:95:8a:09:66:48:fe:87:66:ce:4c:ee:eb:
6a:58:09:11:8f:19:65:c5:51:96:de:6a:c2:b2:97:
6e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:70:97:40:A3:CB:8A:E4:B7:BB:1C:40:EF:2B:59:83:AE:43:55:8A
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/KnCXQKPLiuS3uxxA7ytZg65DVYo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.38.96.0/19
93.170.224.0/21
Signature Algorithm: sha256WithRSAEncryption
09:34:01:ff:d1:91:c3:f0:22:61:94:1c:f9:f6:9b:b5:eb:96:
a9:7a:db:92:c7:f6:e5:35:ce:46:13:1f:f4:34:a8:81:fe:a4:
29:28:a7:8a:f3:07:12:a2:51:2e:f1:b5:7e:a3:84:25:e1:91:
b8:1d:22:37:b7:21:0c:f9:2c:08:46:67:c6:ce:dc:cd:80:f0:
8c:57:fb:5b:d8:7a:45:74:90:0f:b7:2f:f7:e7:91:22:32:db:
7a:0a:de:bb:25:98:dc:ba:22:b6:43:80:66:27:5c:7c:a8:f2:
e6:ec:e2:2a:03:73:4c:2e:b9:57:2c:d9:5a:18:52:85:2e:27:
9f:1d:ab:1e:65:60:95:20:0c:8e:b6:15:5e:31:07:7a:af:06:
7b:d0:03:9d:44:28:fb:d7:d2:e9:ee:b7:da:ce:56:1e:84:8a:
8d:91:54:d0:7e:9f:1a:46:7b:3a:20:ed:22:08:56:54:e0:e7:
4b:3c:16:6f:fa:94:73:a3:50:d5:84:fd:fd:d2:ea:7c:f1:2e:
30:0f:20:1b:71:9c:e3:13:8b:59:a3:91:72:6b:ab:af:59:ac:
7d:85:f7:4b:82:c2:e7:30:f3:15:2d:e2:bc:b3:02:39:8b:b5:
35:66:20:42:bd:e4:e1:95:4c:dc:2e:b2:e9:dc:24:f0:00:99:
3e:95:7a:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 31 13:01:25 2023 by rpki-client on console-fra.rpki-client.org