Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/o_kHKSKKujgAXVRb8O-fRr-WkZE.roa
File: o_kHKSKKujgAXVRb8O-fRr-WkZE.roa (raw, json)
Hash identifier: PvhTiUdYr8BZkrys/8inZ/Rpu/7//vFDntxvdKQQVS4=
Subject key identifier: A3:F9:07:29:22:8A:BA:38:00:5D:54:5B:F0:EF:9F:46:BF:96:91:91
Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial: 01856CC17E7B455BB76CD4D10B20AA829598
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/o_kHKSKKujgAXVRb8O-fRr-WkZE.roa
Signing time: Sun 01 Jan 2023 09:54:58 +0000
ROA not before: Sun 01 Jan 2023 09:54:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49882
IP address blocks: 93.191.174.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:c1:7e:7b:45:5b:b7:6c:d4:d1:0b:20:aa:82:95:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Validity
Not Before: Jan 1 09:54:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a3f90729228aba38005d545bf0ef9f46bf969191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:34:02:74:55:12:58:4f:f3:7b:24:64:0e:b5:
46:df:d9:7f:22:b6:f0:bb:9b:48:7d:bc:80:46:8f:
4c:4a:79:e0:09:29:91:3b:cc:ee:99:30:38:37:c8:
0e:c6:fa:09:3e:3e:89:6d:6c:aa:5c:67:93:0e:30:
b7:ef:76:7d:db:e5:da:cf:d4:d4:de:23:af:ce:8b:
ff:1b:47:69:ae:f8:e2:e6:88:fc:67:65:b4:5f:52:
c0:65:38:8d:46:b1:f7:fd:9c:e5:6f:8e:31:c0:dc:
96:41:18:47:61:66:83:29:cf:38:31:95:8c:3f:61:
11:6f:00:4d:cf:c4:d4:91:36:d7:7c:22:d5:ad:1b:
21:53:9b:02:a8:02:39:53:97:a6:9c:0c:3c:94:ad:
35:f6:45:ca:b4:fd:45:85:4f:27:00:48:3b:75:af:
37:19:70:fe:77:ec:ec:db:97:9b:a9:fa:a0:7c:97:
e2:49:93:c8:a0:95:b7:44:3d:3b:48:30:e2:58:6f:
54:66:e2:c5:2e:21:c1:6a:f2:b3:9a:e3:ae:58:a8:
11:de:3e:d2:47:a0:51:6b:2a:40:b9:ce:c4:8e:b1:
12:41:b4:41:8a:64:14:50:6a:d7:de:ae:42:c3:5b:
d4:ba:90:bc:0a:8f:55:b5:4d:e6:ff:9b:73:5f:ec:
0d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:F9:07:29:22:8A:BA:38:00:5D:54:5B:F0:EF:9F:46:BF:96:91:91
X509v3 Authority Key Identifier:
keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/o_kHKSKKujgAXVRb8O-fRr-WkZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.191.174.0/24
Signature Algorithm: sha256WithRSAEncryption
12:18:26:db:5d:94:ff:43:18:10:a3:98:75:05:2a:30:87:f5:
63:dc:94:8e:28:4b:bc:8e:4d:9e:55:86:af:68:44:75:5a:29:
96:8a:52:4a:a4:e4:96:c8:67:2c:5f:da:d1:4a:42:28:55:83:
a8:d4:5b:94:4f:3a:e4:fd:e0:92:8f:15:0e:3b:29:72:33:9c:
d8:b1:2b:d3:59:da:fc:61:51:22:f0:63:b7:e3:36:ea:4f:0c:
d4:0a:eb:e1:9d:25:25:c7:a0:4e:9b:83:8c:33:9d:9f:b7:15:
ab:ad:7d:9f:2f:cf:5a:4f:8b:57:40:63:35:77:a8:6b:33:de:
c4:02:01:aa:89:b6:ae:c8:44:30:d0:72:2f:87:9e:40:1b:b7:
9f:49:9e:7c:ea:a6:6d:89:fd:06:82:c0:dd:2d:8f:ab:ce:cb:
a9:af:59:82:a1:55:9d:1b:3d:43:0a:4f:f1:17:13:ee:81:8f:
b2:d9:87:6c:ba:59:27:9a:c8:d4:7b:6d:40:9b:be:91:c0:cc:
6a:b2:43:ce:68:bc:c5:fe:d3:2f:cc:49:09:a7:cf:61:4b:9f:
78:c7:d9:08:20:13:02:3c:3d:6c:9e:72:8f:81:4b:cd:02:e5:
92:7a:cd:64:8d:f2:cb:44:e2:29:d4:a6:e2:7d:eb:e3:ea:34:
ee:f8:c8:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:40:22 2024 by rpki-client on console-ams.rpki-client.org