Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/kF200IQF6YaXD9HyuzGiSsDslJc.roa
File: kF200IQF6YaXD9HyuzGiSsDslJc.roa (raw, json)
Hash identifier: a9G53rL5vjcZOFnuJTjnScSaV6hmhaIN4rg7hJvaEhk=
Subject key identifier: 90:5D:B4:D0:84:05:E9:86:97:0F:D1:F2:BB:31:A2:4A:C0:EC:94:97
Certificate issuer: /CN=adac830ccaa74783dd961fab241a228d7cc6f808
Certificate serial: 018570705CC2729A642118195BFCD7FDE9F4
Authority key identifier: AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/kF200IQF6YaXD9HyuzGiSsDslJc.roa
Signing time: Mon 02 Jan 2023 03:04:50 +0000
ROA not before: Mon 02 Jan 2023 03:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41341
IP address blocks: 37.114.16.0/20 maxlen: 32
81.18.130.0/23 maxlen: 32
89.28.192.0/21 maxlen: 32
91.211.128.0/22 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:70:5c:c2:72:9a:64:21:18:19:5b:fc:d7:fd:e9:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adac830ccaa74783dd961fab241a228d7cc6f808
Validity
Not Before: Jan 2 03:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=905db4d08405e986970fd1f2bb31a24ac0ec9497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:7a:35:03:ec:6c:a3:a5:80:f8:6c:8a:93:a4:
8c:1e:42:88:76:e0:3f:13:2d:10:37:11:11:dd:1e:
bd:dd:87:fc:f1:9e:13:52:85:98:f3:e3:00:d7:b7:
31:d2:83:1e:b1:43:05:08:d1:20:cd:b6:cc:f7:cf:
c7:08:83:54:a7:f0:08:35:b0:4d:06:3d:01:f0:38:
84:95:ff:aa:65:fe:8d:27:b7:ba:a1:cc:4a:8d:33:
e4:9c:d2:36:eb:e7:2e:c0:dc:e3:72:3d:f7:5d:5a:
5f:34:66:45:81:0e:e9:40:a3:ac:a4:cb:cf:50:f8:
f3:c1:bc:79:57:30:4f:96:f6:8a:01:fb:5f:f2:5e:
c0:46:36:ad:ef:e4:e1:42:80:41:7b:7c:45:87:0a:
d4:aa:ec:88:c5:a2:0f:85:ca:0c:42:65:13:79:3b:
a9:af:db:fc:b4:09:6d:2f:87:fa:19:03:af:90:1f:
85:0e:c6:49:aa:b3:fc:e4:6f:1d:34:c9:91:f8:ac:
4c:b1:97:b2:c9:fa:e5:42:8f:4f:fd:4e:dc:64:c6:
d4:86:e8:c2:54:04:9c:f2:35:6a:e5:7c:ee:60:19:
a9:30:6c:c3:25:6c:b7:ec:80:cd:fe:e9:2f:5e:5b:
70:75:15:61:ed:52:64:0c:3a:1d:2f:af:76:98:c3:
a7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:5D:B4:D0:84:05:E9:86:97:0F:D1:F2:BB:31:A2:4A:C0:EC:94:97
X509v3 Authority Key Identifier:
keyid:AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/kF200IQF6YaXD9HyuzGiSsDslJc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.114.16.0/20
81.18.130.0/23
89.28.192.0/21
91.211.128.0/22
Signature Algorithm: sha256WithRSAEncryption
ac:bf:a7:85:c1:0f:32:48:0b:0a:ff:38:91:e5:1a:ab:f0:be:
5e:d8:41:66:db:ee:5d:ec:b3:87:50:cf:70:ed:69:7f:5c:18:
c5:8f:2d:d5:04:88:2c:47:0d:24:80:de:61:08:de:16:e9:d1:
44:cf:46:8c:ab:2c:53:58:1c:83:d1:bd:e9:ce:ac:49:2d:30:
dd:ed:b9:ab:47:14:7e:fc:43:af:92:d4:76:f6:96:33:44:a4:
73:26:1b:12:43:ce:e4:3b:66:bd:61:5f:2b:f4:05:a4:df:36:
b7:63:5b:20:17:7c:6f:13:be:78:1c:32:03:aa:f4:58:2a:00:
38:40:c7:42:13:08:27:be:46:e9:f3:48:95:af:34:5d:28:a5:
d7:3c:0a:40:66:92:2a:d1:60:5a:db:15:17:65:a1:90:8b:b6:
da:79:22:5d:2f:c1:be:1c:ca:dd:8a:89:40:7e:11:d8:53:38:
05:89:05:dc:94:21:c3:20:e5:3c:e8:4d:14:92:fd:ec:f1:58:
fd:32:2b:a5:be:7a:f6:3a:db:14:29:61:92:7a:21:95:d2:c5:
e9:cd:7e:f4:53:77:f1:df:42:dd:e3:d2:36:d9:ec:3c:d5:c9:
4e:bb:59:4d:1d:42:6f:9c:05:04:57:a7:6c:e5:c5:f4:39:69:
c2:31:3f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:08 2024 by rpki-client on console-fra.rpki-client.org