Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/kTKJwx15FCa8ci6zum8tvs76AZI.roa
File: kTKJwx15FCa8ci6zum8tvs76AZI.roa (raw, json)
Hash identifier: NHWcTU7Ydh7J5lt+DwgbzBpAQuRX8A2XQdXgoLsPgfw=
Subject key identifier: 91:32:89:C3:1D:79:14:26:BC:72:2E:B3:BA:6F:2D:BE:CE:FA:01:92
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01898CDF3C1AA4A86E535AAEF24B3E84D061
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/kTKJwx15FCa8ci6zum8tvs76AZI.roa
Signing time: Tue 25 Jul 2023 11:46:27 +0000
ROA not before: Tue 25 Jul 2023 11:46:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211522
IP address blocks: 188.213.216.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 07 Nov 2023 12:05:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:8c:df:3c:1a:a4:a8:6e:53:5a:ae:f2:4b:3e:84:d0:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jul 25 11:46:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=913289c31d791426bc722eb3ba6f2dbecefa0192
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:32:4a:bf:84:8e:fc:8d:fc:9b:c2:44:e4:f4:
1b:54:45:d4:9c:74:57:94:1a:ed:67:22:04:5f:c9:
3c:6d:76:c5:66:aa:7d:2f:d3:3f:ef:51:87:7c:10:
84:a9:09:8a:14:6b:10:f6:42:72:0d:11:c7:f6:e7:
17:40:71:45:ce:2a:7b:4c:38:08:aa:25:7e:6b:14:
f5:76:27:f6:76:f5:11:ad:b7:8f:54:44:8c:e5:34:
57:77:77:49:5b:6e:bb:7e:45:2e:1e:ae:ae:c6:28:
5c:36:b5:75:33:fb:ec:f1:08:e1:ed:98:d5:e4:c5:
6a:68:98:2b:87:17:ba:c5:b9:09:3d:ff:23:ab:16:
56:40:37:bf:fe:0b:13:ab:31:10:41:6c:b7:8f:a3:
56:d4:9b:c6:bc:cb:33:01:bb:b0:5f:1f:92:cb:3c:
4c:c8:04:3b:7d:f7:34:9b:e7:21:5e:cd:73:1f:c7:
fe:19:bd:9c:5a:06:33:41:ca:70:ed:b2:69:ad:f8:
31:34:93:42:26:fc:2b:c7:92:7b:b5:ed:0d:66:1e:
f0:e0:98:77:dc:af:28:c4:bd:ce:2a:3b:14:2c:dd:
3d:5d:4a:35:f2:da:6d:93:d0:1c:fa:06:de:de:30:
0b:e1:9e:2c:e8:73:be:5d:fe:5e:89:08:70:fe:75:
63:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:32:89:C3:1D:79:14:26:BC:72:2E:B3:BA:6F:2D:BE:CE:FA:01:92
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/kTKJwx15FCa8ci6zum8tvs76AZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.213.216.0/24
Signature Algorithm: sha256WithRSAEncryption
43:59:20:f9:9f:04:5c:4f:6b:f6:24:0e:00:4c:eb:55:fa:20:
e0:ed:12:03:07:19:4e:7c:f4:5f:f0:48:13:75:7f:05:19:84:
8e:e2:b4:1a:0f:a0:cd:9f:d0:ca:66:3f:0c:af:17:e0:f8:c7:
ec:a9:f6:09:36:86:dd:d6:e4:b0:28:a4:a1:74:93:97:30:21:
3e:80:a9:74:5d:e0:f8:9c:ae:f5:f9:39:d9:10:28:47:41:94:
af:53:2a:81:a4:c7:3b:8f:d6:2b:c6:f5:53:88:56:ff:90:7c:
bc:6d:75:07:26:6a:8d:0e:49:f9:db:4c:83:30:ea:3f:8b:28:
0e:a7:ad:f9:6d:65:92:0b:62:e2:26:e0:fd:aa:f0:d5:1a:14:
c5:21:37:e3:e7:6e:78:e0:7f:9e:5f:dd:8d:3a:d2:f1:01:72:
dc:3c:e5:65:05:3a:22:a8:48:1b:f5:7f:fd:57:b1:06:4c:f3:
1b:c6:97:5e:12:f1:3c:38:7d:28:f3:a0:f2:ca:0f:82:12:3e:
68:d2:42:2a:8e:0e:52:81:6f:b7:dc:26:9e:89:be:5a:cf:91:
b5:84:63:a4:62:8b:4f:3b:5c:2b:50:1b:3e:42:1c:16:03:7f:
3e:fc:af:5b:69:ef:f2:2f:1f:1d:13:5a:c7:fe:dd:20:97:73:
1b:b8:1f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:10 2024 by rpki-client on console-fra.rpki-client.org