Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/KNsy3kFByKPzyl0f9lgNtknPEQk.roa
File: KNsy3kFByKPzyl0f9lgNtknPEQk.roa (raw, json)
Hash identifier: JPhJm0/B/amrxT7sHqm8pLStwNvDTVyTKBCmdhGK0v4=
Subject key identifier: 28:DB:32:DE:41:41:C8:A3:F3:CA:5D:1F:F6:58:0D:B6:49:CF:11:09
Certificate issuer: /CN=38506d80ab592de7be0a331bbf4fa0068d41408a
Certificate serial: 018F85E89ABEADD521CF91B29357CA4B9496
Authority key identifier: 38:50:6D:80:AB:59:2D:E7:BE:0A:33:1B:BF:4F:A0:06:8D:41:40:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OFBtgKtZLee-CjMbv0-gBo1BQIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/KNsy3kFByKPzyl0f9lgNtknPEQk.roa
Signing time: Fri 17 May 2024 09:36:04 +0000
ROA not before: Fri 17 May 2024 09:36:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57136
IP address blocks: 91.230.248.0/24 maxlen: 24
194.102.117.0/24 maxlen: 24
194.105.142.0/24 maxlen: 24
194.105.143.0/24 maxlen: 24
194.126.205.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 17 May 2024 10:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:85:e8:9a:be:ad:d5:21:cf:91:b2:93:57:ca:4b:94:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38506d80ab592de7be0a331bbf4fa0068d41408a
Validity
Not Before: May 17 09:36:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=28db32de4141c8a3f3ca5d1ff6580db649cf1109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:78:b6:14:ba:a6:8a:76:25:c8:e4:ac:68:c2:
4f:9f:1e:81:57:a9:25:d5:01:6f:c7:e3:89:fb:41:
2f:aa:38:56:bd:6a:52:9f:d6:e8:31:da:41:95:1e:
f0:b7:b3:75:b7:8d:15:6d:92:4b:4a:d2:96:6b:c4:
b4:a3:6e:3a:73:cf:79:ed:73:d1:a6:1b:2a:3c:05:
05:9c:44:56:92:8b:c2:6e:85:bb:66:ef:8e:da:6a:
a6:3f:a8:a0:d2:71:17:46:22:59:c4:fb:f9:53:e3:
40:3f:df:ab:98:3b:07:ae:a3:f4:63:c3:b4:0c:69:
5d:5b:4f:81:d8:b4:41:d1:9a:6b:27:db:45:14:93:
c1:ba:a4:9e:fb:71:dd:30:9e:6b:c8:50:64:56:f0:
8c:27:4f:20:6a:c2:88:d1:1e:13:23:6a:c2:04:33:
e7:fe:ba:a7:9b:cd:0f:84:1a:16:e1:45:39:54:ed:
09:ca:4b:05:86:22:23:3a:e8:1f:63:f1:17:43:27:
c8:d8:72:12:b6:eb:05:b7:60:19:c9:9a:ca:4c:b9:
28:db:b1:ca:b3:f4:f0:6c:f7:71:f1:f0:bb:bf:72:
11:2b:ea:b1:c4:6d:21:b2:c3:e4:a4:06:b0:ee:dc:
b6:45:a6:43:4e:19:d0:e4:6c:15:ec:bd:be:20:02:
7f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:DB:32:DE:41:41:C8:A3:F3:CA:5D:1F:F6:58:0D:B6:49:CF:11:09
X509v3 Authority Key Identifier:
keyid:38:50:6D:80:AB:59:2D:E7:BE:0A:33:1B:BF:4F:A0:06:8D:41:40:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OFBtgKtZLee-CjMbv0-gBo1BQIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/KNsy3kFByKPzyl0f9lgNtknPEQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.230.248.0/24
194.102.117.0/24
194.105.142.0/23
194.126.205.0/24
Signature Algorithm: sha256WithRSAEncryption
82:cc:ef:1d:e1:01:b7:14:1f:db:b8:fd:4c:ad:92:85:f1:d5:
32:27:18:89:37:08:1c:43:68:76:55:29:15:83:f0:86:06:40:
f0:8d:66:47:0d:75:e5:64:5e:6f:18:a4:96:48:53:00:04:b7:
84:8c:dd:25:6b:f7:81:6a:28:20:d1:10:1d:92:18:c3:57:52:
14:c2:5c:0d:57:d8:b9:b5:8b:a8:dc:7b:e5:b7:2a:a8:89:72:
c4:8b:4b:4c:59:91:cd:e9:0d:9e:09:36:f6:96:45:dc:a5:80:
06:be:b3:03:16:d1:ef:29:b9:52:1f:95:55:07:cb:7e:c0:e2:
49:1e:25:19:37:a6:69:de:21:67:6f:61:17:d5:ed:c1:92:72:
3b:df:b4:a7:34:3e:fe:8c:18:fe:56:e1:a7:6c:43:e0:45:60:
a5:d4:dc:ab:1b:ec:dc:14:90:fe:48:00:22:8f:b7:d8:95:80:
86:f2:fe:5e:2d:a8:2f:3b:22:83:68:d6:a5:50:97:7e:66:38:
19:18:f1:dd:e8:5b:03:14:39:9e:a4:86:52:a2:fb:d4:0d:b0:
da:de:e9:24:8c:2c:f1:b3:31:d2:dd:75:b2:f6:1b:9a:56:40:
30:cc:58:90:8b:4e:98:7e:7e:01:4f:55:c0:e4:9e:1f:dd:75:
d5:b7:02:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:10 2024 by rpki-client on console-fra.rpki-client.org