Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/KqtnhJC9CTQ8mxkU1j6Q8PXMew8.roa
File: KqtnhJC9CTQ8mxkU1j6Q8PXMew8.roa (raw, json)
Hash identifier: CfYIF9BA2vHU1ms0z8pKS0CmbwlSczgF4w7E91PTU1U=
Subject key identifier: 2A:AB:67:84:90:BD:09:34:3C:9B:19:14:D6:3E:90:F0:F5:CC:7B:0F
Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial: 0187E0B83C062F4602B48E68D556CCBE0335
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/KqtnhJC9CTQ8mxkU1j6Q8PXMew8.roa
Signing time: Wed 03 May 2023 08:26:23 +0000
ROA not before: Wed 03 May 2023 08:26:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 91.193.252.0/24 maxlen: 24
93.89.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 04 May 2023 14:59:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e0:b8:3c:06:2f:46:02:b4:8e:68:d5:56:cc:be:03:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Validity
Not Before: May 3 08:26:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2aab678490bd09343c9b1914d63e90f0f5cc7b0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:3a:01:40:d1:3d:9f:b4:b7:45:35:29:d1:e2:
18:73:ca:1e:05:c1:aa:fc:52:bb:f2:82:dc:87:50:
1e:8f:80:3d:fc:ef:3c:21:88:19:e9:a7:69:2b:e3:
49:3a:de:05:28:71:30:cb:71:79:e7:dc:1a:bf:10:
61:94:a8:ce:0e:36:bd:28:54:c8:fa:55:40:49:80:
fb:4b:53:c4:a3:d7:c8:6d:02:9f:aa:0d:f7:a2:04:
c2:73:b1:12:28:88:29:8d:bb:fb:c2:2a:fe:91:1f:
85:3f:66:8e:ca:4f:5e:b6:b4:9a:01:88:d1:67:d1:
ba:c6:c6:71:4c:8e:40:29:ef:5e:9f:ae:f0:d7:85:
55:88:61:a1:15:43:51:13:c2:bf:36:0d:85:97:c9:
87:5f:93:29:f3:32:c6:85:e4:8b:9f:ae:60:06:57:
8d:6f:18:6c:4c:8d:99:55:e5:da:03:ec:f9:cd:eb:
8a:6b:cd:45:a4:bc:be:eb:c3:46:bb:ac:3f:72:a1:
12:cf:dc:7d:8d:af:26:c0:e6:33:87:ca:b1:e0:8f:
ad:46:7c:27:8e:dc:31:d8:c1:3f:0b:bc:42:c4:a8:
89:24:f9:96:a4:ea:f9:7a:0c:0a:20:3c:33:d5:44:
67:b9:3e:41:68:8c:de:1a:90:19:24:f1:a8:6c:a0:
d4:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:AB:67:84:90:BD:09:34:3C:9B:19:14:D6:3E:90:F0:F5:CC:7B:0F
X509v3 Authority Key Identifier:
keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/KqtnhJC9CTQ8mxkU1j6Q8PXMew8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.252.0/24
93.89.223.0/24
Signature Algorithm: sha256WithRSAEncryption
05:fc:9a:53:0d:0e:0c:24:67:a3:a9:84:24:b5:c2:ca:73:d2:
ca:20:f3:2f:5e:f0:8a:88:be:85:4a:c5:16:8f:3a:21:aa:63:
17:da:7b:4a:b3:22:39:38:52:a5:dc:1c:3c:ea:b2:6b:4a:00:
08:b9:33:f4:c6:3e:ff:d2:a1:75:2f:46:64:77:27:5c:42:79:
17:d2:95:cc:3e:34:e3:c9:32:58:40:f9:cf:48:d9:20:f9:21:
ad:96:9d:e4:1f:b9:e2:f5:7b:ea:8a:f7:8e:0d:6d:32:16:1a:
1f:73:df:8b:d5:50:0f:e3:12:6a:5b:aa:c1:3d:3a:53:e8:25:
36:25:76:22:70:e1:d9:28:39:3a:de:af:b9:b2:b9:12:d2:61:
0d:bf:ea:70:ea:4e:42:a6:1f:ae:a1:e2:f8:cf:8d:dd:eb:81:
df:68:90:f9:de:9a:32:c8:c5:23:9c:70:93:fa:81:fe:42:68:
17:66:18:bf:24:3b:a6:67:d5:0c:40:99:f4:e4:b5:f3:80:e7:
f8:5a:c8:15:eb:72:9e:ec:f4:0d:8a:77:9a:4c:e7:fb:c9:02:
6e:68:0a:db:04:25:c0:eb:4c:73:47:25:10:23:2e:50:d7:ef:
2c:5f:de:62:19:42:4b:d6:62:0c:fd:81:57:42:35:39:32:e0:
c1:24:53:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:25 2024 by rpki-client on console-ams.rpki-client.org