Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/kvyzJPah7fo6qdFlQRpGGVuBOF4.roa
File: kvyzJPah7fo6qdFlQRpGGVuBOF4.roa (raw, json)
Hash identifier: G2z1XY2gdrW52f101arpW5g5eqcrkB9bDCFQz+8AEa4=
Subject key identifier: 92:FC:B3:24:F6:A1:ED:FA:3A:A9:D1:65:41:1A:46:19:5B:81:38:5E
Certificate issuer: /CN=eeadaa6339103bdb5566d83271d3c47c005c250d
Certificate serial: 01856F5DBD9D8DE7DA9074181151917A17D0
Authority key identifier: EE:AD:AA:63:39:10:3B:DB:55:66:D8:32:71:D3:C4:7C:00:5C:25:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7q2qYzkQO9tVZtgycdPEfABcJQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/kvyzJPah7fo6qdFlQRpGGVuBOF4.roa
Signing time: Sun 01 Jan 2023 22:04:52 +0000
ROA not before: Sun 01 Jan 2023 22:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61404
IP address blocks: 185.128.88.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:30:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:bd:9d:8d:e7:da:90:74:18:11:51:91:7a:17:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeadaa6339103bdb5566d83271d3c47c005c250d
Validity
Not Before: Jan 1 22:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=92fcb324f6a1edfa3aa9d165411a46195b81385e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f3:94:2b:c0:27:44:93:c9:99:80:47:98:a5:
d5:4d:4a:4e:a1:65:29:e4:93:d4:18:81:be:cb:e5:
7e:ff:89:4b:92:ec:b2:39:42:4b:53:42:e6:a1:a1:
b3:6f:67:ab:6d:c0:7b:79:35:d6:7e:53:a9:d6:d6:
88:b2:4c:9d:cb:b3:23:33:dd:6b:e6:47:f5:d6:a9:
ba:53:6a:6b:ce:84:db:73:7a:a3:a1:d2:b2:43:a0:
70:52:3a:a2:3f:76:dc:d7:d0:cc:12:28:b4:6f:4a:
2b:5e:6e:e0:55:60:22:f5:6f:68:03:f9:06:d5:d2:
64:57:94:9c:51:39:e0:29:80:5d:39:ab:12:30:f2:
2f:03:b3:46:55:13:7e:75:de:e0:36:68:17:1e:bf:
81:cd:a7:6c:31:c1:46:72:78:37:99:2b:62:78:8c:
8b:a3:c4:ad:8c:a4:35:82:55:86:d9:48:13:78:4a:
6b:71:3a:56:76:aa:44:2f:8f:11:73:a8:13:5d:fb:
49:dd:5c:f3:77:82:6e:30:b1:8c:02:03:02:05:a7:
55:ee:74:26:a3:0b:57:7f:d1:d3:54:e3:2b:46:9a:
a3:1e:3c:5b:56:ed:95:92:a7:95:e2:c0:af:ec:da:
c0:3e:86:19:55:36:e8:bd:e0:2d:4f:55:ab:84:3a:
0b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:FC:B3:24:F6:A1:ED:FA:3A:A9:D1:65:41:1A:46:19:5B:81:38:5E
X509v3 Authority Key Identifier:
keyid:EE:AD:AA:63:39:10:3B:DB:55:66:D8:32:71:D3:C4:7C:00:5C:25:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7q2qYzkQO9tVZtgycdPEfABcJQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/kvyzJPah7fo6qdFlQRpGGVuBOF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.128.88.0/22
Signature Algorithm: sha256WithRSAEncryption
45:c8:b5:cb:25:9e:81:55:e5:ad:5d:30:7f:d8:df:ac:38:f8:
a2:08:92:af:fc:7d:f4:38:de:89:d4:13:71:87:6e:f0:c0:a4:
05:06:62:ff:01:6b:da:cd:37:ae:c3:01:9e:05:ef:67:72:76:
fb:95:1e:b1:33:09:4d:78:be:63:5a:2c:aa:d0:15:81:77:e6:
6d:5c:50:8b:af:67:24:14:5e:5b:4b:4b:e8:2b:e7:0d:c6:4a:
51:46:63:0e:d3:90:4a:eb:64:81:81:39:e8:2c:08:9a:c7:20:
98:98:3b:47:a1:b0:27:e0:ed:65:61:3b:05:b9:0d:81:b8:78:
dd:41:c9:59:fb:d8:c8:76:25:98:53:24:41:5b:29:bc:53:0c:
ba:17:f6:89:cb:33:cf:74:7e:6a:4f:e3:15:48:7f:6b:b9:75:
a3:59:d3:2d:a3:51:ca:97:4c:88:08:2b:99:b9:b7:84:57:78:
b9:ff:c9:9c:46:0f:18:42:24:ab:23:bf:67:44:de:fc:07:5a:
9c:b2:57:70:73:dc:de:65:84:ce:a7:03:87:2d:56:b3:50:65:
15:4f:a7:b3:39:97:3a:34:d9:0d:60:8b:83:ee:65:7a:7f:89:
cf:a9:b6:84:bf:0b:91:72:83:c3:a2:24:51:79:40:34:b4:ea:
40:ff:04:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:22 2024 by rpki-client on console-ams.rpki-client.org