Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/koc9MAtJGQcHE5CtRwYikf5IrX8.roa
File: koc9MAtJGQcHE5CtRwYikf5IrX8.roa (raw, json)
Hash identifier: i6yQA/kJvv43LW9a4fcNZAZieqP16vws0825aKBrENs=
Subject key identifier: 92:87:3D:30:0B:49:19:07:07:13:90:AD:47:06:22:91:FE:48:AD:7F
Certificate issuer: /CN=237f7db033314c473cda194e0df79f1c375da3f4
Certificate serial: 01856C6F28FDF2E4BAE36D7675C9D7878C9D
Authority key identifier: 23:7F:7D:B0:33:31:4C:47:3C:DA:19:4E:0D:F7:9F:1C:37:5D:A3:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I399sDMxTEc82hlODfefHDddo_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/koc9MAtJGQcHE5CtRwYikf5IrX8.roa
Signing time: Sun 01 Jan 2023 08:25:02 +0000
ROA not before: Sun 01 Jan 2023 08:25:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6453
IP address blocks: 91.140.128.0/17 maxlen: 17
194.54.192.0/18 maxlen: 18
Validation: Failed, certificate revoked on Thu 14 Sep 2023 07:17:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:6f:28:fd:f2:e4:ba:e3:6d:76:75:c9:d7:87:8c:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=237f7db033314c473cda194e0df79f1c375da3f4
Validity
Not Before: Jan 1 08:25:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=92873d300b491907071390ad47062291fe48ad7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:25:4c:58:a9:fc:0c:47:b8:3a:57:77:ce:f5:
86:14:72:74:57:2a:37:b1:f1:ab:57:fe:05:6d:38:
f7:24:1e:94:5b:e1:eb:05:f7:d5:7b:c7:8a:1e:68:
f6:cc:c0:81:bd:11:78:e3:e4:3f:59:dc:54:57:87:
17:86:dd:02:d0:16:24:e7:80:3e:be:11:04:0a:6d:
a9:8d:8c:6e:91:96:b2:c5:27:5a:07:eb:17:b6:f3:
a0:70:27:0b:a2:57:b0:71:90:97:01:65:24:97:f6:
10:05:2c:2e:a6:22:b7:f3:41:ad:68:9d:73:86:fd:
f0:bc:36:bb:6a:22:9f:66:be:4d:f7:7f:34:d7:a2:
1b:2d:21:45:c5:4e:42:ab:41:7a:45:00:fe:83:cd:
e4:b1:fd:68:b1:b0:c5:98:75:31:1c:d8:cc:ae:9c:
02:6b:cc:78:4b:28:e2:93:f7:8a:a0:0f:4f:e7:fa:
42:00:94:8b:b2:b3:f4:f1:47:8e:5f:3b:d6:45:be:
13:aa:d6:5f:32:3a:ab:fd:c5:ec:3b:d8:d8:86:ef:
72:4f:cf:7c:fe:0c:b0:eb:f0:b2:e2:e3:04:e3:89:
1a:10:d9:6c:a2:ce:eb:b5:66:40:48:fd:b7:6f:ed:
3a:25:96:ce:20:73:73:e1:af:a0:4e:44:5f:4c:9b:
6a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:87:3D:30:0B:49:19:07:07:13:90:AD:47:06:22:91:FE:48:AD:7F
X509v3 Authority Key Identifier:
keyid:23:7F:7D:B0:33:31:4C:47:3C:DA:19:4E:0D:F7:9F:1C:37:5D:A3:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I399sDMxTEc82hlODfefHDddo_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/koc9MAtJGQcHE5CtRwYikf5IrX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.140.128.0/17
194.54.192.0/18
Signature Algorithm: sha256WithRSAEncryption
a0:30:5d:86:d0:69:79:09:27:e8:0a:64:89:5e:f0:fb:06:50:
8c:a2:ea:57:5c:dd:1e:0e:19:c2:b1:ac:aa:aa:16:81:9c:ea:
f1:ab:ce:09:49:9d:b2:78:22:b2:70:35:86:ce:a6:96:56:f2:
0d:ed:65:4f:4b:d0:df:6d:cb:43:0d:48:a8:e7:f2:58:76:3e:
b9:ce:7f:fe:c1:6d:82:88:b3:d7:83:79:57:d3:85:bb:3d:cd:
b0:d7:99:1b:2e:30:1d:0d:94:cd:1b:95:17:69:c2:59:a5:1f:
c0:04:a5:a5:ce:db:50:ea:44:bc:28:ef:20:e5:52:d6:1e:e9:
33:51:ea:52:7e:5c:63:3e:64:34:28:b0:af:10:96:ce:88:6f:
e4:76:4c:71:44:c5:2c:ea:4a:91:1f:30:57:7d:eb:fe:ce:56:
a4:5e:50:f1:61:53:10:27:7d:dc:a3:3b:dc:5f:cc:08:d1:71:
cf:88:44:bf:89:04:1f:05:59:aa:5e:d7:29:fb:62:d7:0a:4c:
ff:bd:b8:ef:d6:65:8f:5c:2e:a9:e8:aa:c5:e4:ec:52:2a:f9:
d4:4f:22:c0:10:19:06:c8:7d:85:8a:c6:8f:d4:ee:ab:2c:bc:
34:f1:e7:ce:a2:fb:80:78:39:c2:59:ed:2b:88:6c:cc:ad:af:
01:2f:8a:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:58 2024 by rpki-client on console-fra.rpki-client.org