Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/a05e77-f301-4125-9118-e4d1f0a27b21/1/KjAyCrGNUTUhegqLNb-04gOI5Ok.roa
File: KjAyCrGNUTUhegqLNb-04gOI5Ok.roa (raw, json)
Hash identifier: M0IHZsIcB7qfq9C7IGIvha3lmhPdG/4wi3QJoBo6nxs=
Subject key identifier: 2A:30:32:0A:B1:8D:51:35:21:7A:0A:8B:35:BF:B4:E2:03:88:E4:E9
Certificate issuer: /CN=cced992030531e7e8b518aefd9e267cc528eda9a
Certificate serial: 0190880AA9F21C7A2C607FA85C72E34DC72E
Authority key identifier: CC:ED:99:20:30:53:1E:7E:8B:51:8A:EF:D9:E2:67:CC:52:8E:DA:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zO2ZIDBTHn6LUYrv2eJnzFKO2po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/a05e77-f301-4125-9118-e4d1f0a27b21/1/KjAyCrGNUTUhegqLNb-04gOI5Ok.roa
Signing time: Sat 06 Jul 2024 12:35:18 +0000
ROA not before: Sat 06 Jul 2024 12:35:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 63023
IP address blocks: 195.170.163.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 11 Sep 2024 04:54:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:88:0a:a9:f2:1c:7a:2c:60:7f:a8:5c:72:e3:4d:c7:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cced992030531e7e8b518aefd9e267cc528eda9a
Validity
Not Before: Jul 6 12:35:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2a30320ab18d5135217a0a8b35bfb4e20388e4e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3c:d2:66:44:46:83:bd:09:e5:6e:3e:a6:83:
88:c2:92:fa:0c:17:af:d5:e6:aa:1c:39:4a:64:c8:
4b:48:67:43:5a:3e:dc:c6:80:41:7a:2d:0b:e1:ea:
07:75:09:2d:8a:84:07:fd:61:26:8f:dc:16:b9:f1:
ec:0c:b1:de:70:fd:ba:1a:d1:61:14:ca:4c:2e:63:
4e:df:10:c3:ac:f0:ff:6d:c6:27:41:b7:ce:29:08:
f6:a7:0f:e9:fd:ed:09:d9:57:48:04:3f:cf:93:76:
58:5e:23:12:3b:a6:90:34:02:99:25:1c:7e:2d:e4:
e8:cf:63:ef:4b:19:8e:4b:15:e0:82:dd:db:c6:22:
e9:a9:c6:52:4b:c0:91:a2:cd:2d:41:53:3b:6f:14:
94:ae:66:3a:81:e4:77:8e:63:f6:98:46:bc:66:d7:
cf:64:c2:23:51:8c:1e:01:7f:22:5e:86:fb:18:1a:
ff:e1:33:9e:19:0b:66:cb:72:cf:37:d6:2e:ff:5e:
78:e9:9d:17:5f:dc:82:9d:33:33:99:7b:47:2f:5e:
82:7c:ec:ab:ce:49:a2:78:c6:fe:94:ef:1a:89:fd:
fd:05:3d:39:76:7e:51:c3:b3:ae:da:62:ec:39:5a:
b8:6a:d3:62:fc:39:73:4e:c2:4a:0b:98:c6:8d:d1:
0c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:30:32:0A:B1:8D:51:35:21:7A:0A:8B:35:BF:B4:E2:03:88:E4:E9
X509v3 Authority Key Identifier:
keyid:CC:ED:99:20:30:53:1E:7E:8B:51:8A:EF:D9:E2:67:CC:52:8E:DA:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zO2ZIDBTHn6LUYrv2eJnzFKO2po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/a05e77-f301-4125-9118-e4d1f0a27b21/1/KjAyCrGNUTUhegqLNb-04gOI5Ok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/a05e77-f301-4125-9118-e4d1f0a27b21/1/zO2ZIDBTHn6LUYrv2eJnzFKO2po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.170.163.0/24
Signature Algorithm: sha256WithRSAEncryption
08:1e:bf:c3:33:99:16:26:eb:dc:10:79:57:b3:4e:2b:85:4e:
cc:b7:d2:5e:2c:4f:ab:5c:75:eb:49:70:98:3f:bf:de:9a:85:
cf:cf:39:22:23:6f:98:f7:0c:dd:52:53:66:0c:24:13:30:ec:
a3:d8:4a:07:43:c5:54:48:49:d1:4b:54:63:44:38:17:22:d2:
a1:b3:0e:b0:05:96:74:7a:76:a3:19:47:54:87:b5:d1:96:be:
3b:4c:10:37:87:33:8a:fb:d5:24:8b:1a:e2:69:ad:37:05:fc:
16:44:36:13:3a:0a:b6:41:52:1e:af:15:05:43:98:fa:0f:94:
eb:fc:5c:d7:b9:0b:d4:1d:0e:66:fe:05:b2:85:f6:fc:64:58:
a9:65:51:f0:57:f3:dd:9e:63:16:df:fd:cd:f4:b8:8d:b2:ab:
90:6b:ff:95:90:42:af:ae:6e:c4:b3:88:90:6c:07:2c:f1:02:
cb:9b:9a:dc:ca:53:00:4b:ae:26:72:3b:7c:16:60:78:50:24:
87:e4:c6:d2:8f:5c:07:58:f1:c7:15:dd:8b:4b:b5:99:01:b2:
bc:1c:82:2e:58:2b:a4:25:ad:96:3c:58:f7:7e:9f:11:17:e6:
85:a6:b9:3e:eb:87:6b:cb:85:a8:64:42:0c:e7:42:77:70:8a:
11:fb:1a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 11 06:54:34 2024 by rpki-client on console-ams.rpki-client.org