Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/ks_ACCQKW1JEKdaePNw2ZSGNAbI.roa
File: ks_ACCQKW1JEKdaePNw2ZSGNAbI.roa (raw, json)
Hash identifier: aoOL4FZXKsLJh62t9/bh8Muwj7ji2sqVbYdeGAZpC8U=
Subject key identifier: 92:CF:C0:08:24:0A:5B:52:44:29:D6:9E:3C:DC:36:65:21:8D:01:B2
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 018A0C0B5A26D178C4C26C283FF900191D8D
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/ks_ACCQKW1JEKdaePNw2ZSGNAbI.roa
Signing time: Sat 19 Aug 2023 04:26:25 +0000
ROA not before: Sat 19 Aug 2023 04:26:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 55154
IP address blocks: 185.80.196.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:0c:0b:5a:26:d1:78:c4:c2:6c:28:3f:f9:00:19:1d:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Aug 19 04:26:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=92cfc008240a5b524429d69e3cdc3665218d01b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:fa:fb:35:f0:4d:63:d5:4b:73:11:01:7c:f2:
48:a7:35:4f:98:bf:58:b8:1f:80:3d:bf:d3:c2:c2:
d7:fe:d0:b2:3e:ba:bb:fb:9f:7e:28:5e:45:a2:66:
9a:68:af:b4:46:5b:42:38:a9:20:57:7f:62:4c:f5:
3a:50:a6:09:51:03:6e:ca:e8:30:c4:a6:57:bc:02:
67:b4:02:c3:b4:2e:76:a0:4a:37:1c:cf:45:84:a7:
36:e6:c5:76:44:0b:aa:e0:c1:73:f3:ef:03:9f:c7:
82:a1:51:c5:e1:c5:57:d0:3a:c6:34:4d:27:68:1a:
a0:c6:1b:f4:d9:b6:2b:72:d2:6e:bb:04:cb:2b:32:
d3:d9:38:cb:be:33:37:9f:e9:e3:76:d9:e9:e3:95:
0e:d2:61:5c:28:66:d7:7a:c2:53:73:54:3e:60:30:
0e:87:f5:5b:b1:8b:01:bf:b2:b5:b3:f1:da:fd:19:
54:95:fb:43:07:87:b3:7f:d9:b2:e9:7a:19:eb:46:
c4:2d:66:d7:d7:54:9b:7d:08:68:95:23:67:be:54:
cc:d2:b1:99:9e:57:cb:88:8b:6d:c2:73:cc:c9:69:
8d:f7:8e:02:2a:96:8e:9b:35:cc:a0:b5:19:1d:56:
aa:5a:14:d7:53:83:6e:c8:02:4f:fa:91:5e:3c:6b:
da:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:CF:C0:08:24:0A:5B:52:44:29:D6:9E:3C:DC:36:65:21:8D:01:B2
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/ks_ACCQKW1JEKdaePNw2ZSGNAbI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.80.196.0/23
Signature Algorithm: sha256WithRSAEncryption
40:58:2a:df:76:b8:18:14:f9:a5:da:22:8a:eb:36:c5:a8:16:
be:47:f8:aa:e3:7c:a0:f3:83:60:10:8b:bd:7a:61:ec:23:86:
65:7c:a6:ed:b9:02:ba:78:12:5d:fc:84:4a:c9:5e:52:45:ef:
b0:7f:df:3f:48:e8:fe:26:20:56:76:ed:0b:28:d8:ef:d8:71:
91:4a:8f:83:b2:9f:96:e6:dc:c5:ea:23:08:43:a1:64:82:09:
16:94:53:23:89:aa:6b:dc:3b:4e:62:43:5b:a8:cc:56:7b:42:
1c:ee:cc:ee:ed:6e:ce:26:e5:37:cb:93:6c:e0:70:9d:46:b0:
1a:d3:c2:b6:d3:26:dd:a0:54:5d:62:d7:d2:ac:01:f2:62:49:
b1:99:43:3c:dc:f3:03:36:f1:38:08:a4:15:7d:0b:e3:4d:66:
38:76:89:7f:77:23:c8:05:17:c7:be:e7:ac:06:31:7f:b1:d8:
1e:e7:31:d0:be:cd:49:a5:45:0f:24:a0:34:95:87:40:d5:65:
87:a2:7f:a7:51:12:10:80:70:8f:c4:0a:52:d9:6b:67:1d:60:
1a:c6:6d:64:b7:04:3b:a0:a0:aa:0b:dc:c1:60:e2:1a:5e:f0:
27:d6:90:26:2b:f2:b5:74:e6:43:61:ef:4b:90:73:13:34:32:
63:07:66:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:34:48 2024 by rpki-client on console-fra.rpki-client.org