Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/ksea7d9-sOKMfHad84QK7tEwX7c.roa
File: ksea7d9-sOKMfHad84QK7tEwX7c.roa (raw, json)
Hash identifier: /TFfM5Ecf/ROhK0pnLuEGgZqAhLefF2ETgIaufxKG+U=
Subject key identifier: 92:C7:9A:ED:DF:7E:B0:E2:8C:7C:76:9D:F3:84:0A:EE:D1:30:5F:B7
Certificate issuer: /CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16
Certificate serial: 01856FC2953678454D3D651DF72479D9E710
Authority key identifier: 0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/ksea7d9-sOKMfHad84QK7tEwX7c.roa
Signing time: Sun 01 Jan 2023 23:55:01 +0000
ROA not before: Sun 01 Jan 2023 23:55:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61079
IP address blocks: 93.113.40.0/22 maxlen: 24
89.46.12.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:c2:95:36:78:45:4d:3d:65:1d:f7:24:79:d9:e7:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16
Validity
Not Before: Jan 1 23:55:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=92c79aeddf7eb0e28c7c769df3840aeed1305fb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:b7:88:b2:bc:40:cf:30:24:65:4c:1f:c8:86:
f2:9e:90:18:11:14:eb:a6:ca:9c:17:cc:04:6b:9f:
c7:1b:40:1a:b0:64:b4:2c:b9:8f:2c:79:6a:fa:6b:
b1:27:14:af:9b:26:09:b0:ee:e7:bd:2c:17:91:d8:
4d:da:bf:ef:3d:ed:4c:80:ae:a0:c3:b5:ea:b9:50:
a4:b5:ab:e4:3e:a8:04:d9:43:5f:40:95:2a:a7:8a:
e0:63:3d:fc:d1:56:12:ed:79:ed:7c:c5:b8:4f:c7:
9a:40:fd:57:28:e0:6b:c8:89:36:37:91:77:e9:3d:
0d:55:62:99:ec:17:ae:4e:fe:92:9e:57:3b:11:15:
57:55:ca:ac:a2:26:01:e8:4c:a7:6a:47:e2:a4:7a:
7f:fd:f5:be:25:1f:b0:fe:b5:7d:fd:ec:e3:cd:84:
28:b4:81:47:ef:b5:1b:c9:22:b3:28:f6:93:68:6b:
a7:1a:bc:ec:94:a0:f2:43:03:b3:15:10:6d:ea:9b:
9e:5b:31:7a:63:04:b1:f1:62:fe:e0:00:1a:0f:d6:
f7:5c:3c:81:c7:24:d7:ba:bc:a7:e1:3e:10:71:dc:
1f:62:52:32:be:21:ce:7f:5b:f2:60:75:21:33:38:
61:89:e3:36:3f:9b:ab:ee:37:0d:6e:8e:5a:69:72:
82:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:C7:9A:ED:DF:7E:B0:E2:8C:7C:76:9D:F3:84:0A:EE:D1:30:5F:B7
X509v3 Authority Key Identifier:
keyid:0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/ksea7d9-sOKMfHad84QK7tEwX7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.46.12.0/22
93.113.40.0/22
Signature Algorithm: sha256WithRSAEncryption
75:c6:70:aa:74:78:83:39:19:c5:d5:68:05:32:be:d0:3d:83:
f5:2a:19:15:23:fa:8c:08:c0:ac:ef:24:47:ce:62:71:90:24:
a3:a3:5b:a5:0f:f2:60:3e:1a:b1:6b:00:61:f3:99:a5:a0:22:
a1:a8:80:1b:4c:95:0f:39:e9:87:b9:7e:e1:c7:65:16:d7:77:
18:5f:88:7f:29:65:ab:fb:e6:bf:28:ef:96:a4:2f:27:8a:3c:
a3:5c:ff:7f:6a:e7:08:ae:8d:b4:14:5d:c8:c5:29:93:4a:8d:
54:ec:d7:57:99:25:96:ae:2b:da:80:8b:59:32:0f:97:7e:2e:
d9:f6:15:d3:45:b9:6a:4a:e3:98:77:b7:b3:28:b0:44:d3:1c:
0d:95:4b:dd:88:86:39:a0:8a:f1:7a:e6:1c:2c:18:a6:d6:0b:
14:d1:1d:52:62:2c:a5:ca:02:56:3f:75:7b:f9:e3:74:a2:2d:
94:92:a6:9b:d6:c0:05:bf:08:5f:f7:9d:9c:dc:0b:0a:8c:86:
ff:74:4e:72:8d:b1:a5:19:dc:81:26:af:70:4d:e0:23:6e:46:
91:51:92:54:01:b3:1e:c7:25:6f:59:b9:69:88:df:c1:41:dd:
06:fe:8b:27:95:49:bc:92:03:32:c0:9c:97:0d:d1:e6:ea:4b:
f7:6b:f7:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 19 16:04:34 2023 by rpki-client on console-fra.rpki-client.org