Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/dcc86a-5f51-4d12-963d-f27c628b8353/1/kkWS-uRhsqLEM_jCAdfUSPzZAq8.roa
File: kkWS-uRhsqLEM_jCAdfUSPzZAq8.roa (raw, json)
Hash identifier: tVDfeCgrtpSYq5h7R30snd6NPggvVALFLGJvjAh+39U=
Subject key identifier: 92:45:92:FA:E4:61:B2:A2:C4:33:F8:C2:01:D7:D4:48:FC:D9:02:AF
Certificate issuer: /CN=05eb8cbbaaf25a71bf2fcab6e11057ebf91f01e3
Certificate serial: 018571D7A14FC3F5A8D422EF2E2C8A666378
Authority key identifier: 05:EB:8C:BB:AA:F2:5A:71:BF:2F:CA:B6:E1:10:57:EB:F9:1F:01:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BeuMu6ryWnG_L8q24RBX6_kfAeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/dcc86a-5f51-4d12-963d-f27c628b8353/1/kkWS-uRhsqLEM_jCAdfUSPzZAq8.roa
Signing time: Mon 02 Jan 2023 09:37:14 +0000
ROA not before: Mon 02 Jan 2023 09:37:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2119
IP address blocks: 193.241.241.0/24 maxlen: 24
193.241.249.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:a1:4f:c3:f5:a8:d4:22:ef:2e:2c:8a:66:63:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05eb8cbbaaf25a71bf2fcab6e11057ebf91f01e3
Validity
Not Before: Jan 2 09:37:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=924592fae461b2a2c433f8c201d7d448fcd902af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:1f:58:8b:a8:11:b4:ff:11:ec:73:22:39:60:
6e:f8:e6:53:cd:b9:08:d0:21:ae:e4:b2:f5:6f:85:
ed:6a:5b:3b:11:a7:a6:d8:48:4c:91:85:22:6c:38:
aa:b1:b6:ec:d0:6f:20:f3:64:60:ed:18:67:24:36:
6e:90:e3:af:5b:05:82:a1:b5:cf:32:46:c4:8c:7b:
ed:3a:df:a0:0e:13:67:3f:37:59:0a:e1:05:3e:d0:
ac:ad:cf:6d:40:90:bb:df:f4:2e:c3:7d:38:3c:ff:
dc:4a:92:1a:11:fd:10:55:12:f9:be:c6:72:d5:8b:
1b:be:3c:d5:90:30:4c:95:3e:e4:d5:53:2f:db:11:
90:f5:91:b2:f6:13:52:01:7f:44:14:bc:d3:51:12:
94:05:23:ab:40:5f:92:47:0a:58:e7:2a:1e:35:b1:
10:cf:b6:46:ae:32:65:e5:30:af:9a:29:c1:56:1f:
30:84:e6:a9:66:88:64:82:78:14:11:b3:c7:b5:88:
3e:3e:c7:83:54:6d:a4:25:c7:8e:77:d4:29:e9:ac:
9c:9f:b2:e6:db:19:85:8d:af:25:e3:85:54:32:73:
06:9f:79:89:93:a0:ba:b3:c3:e3:6e:99:13:0c:98:
9c:09:c2:f6:7b:15:b2:6a:01:a7:30:ca:8d:2b:17:
6a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:45:92:FA:E4:61:B2:A2:C4:33:F8:C2:01:D7:D4:48:FC:D9:02:AF
X509v3 Authority Key Identifier:
keyid:05:EB:8C:BB:AA:F2:5A:71:BF:2F:CA:B6:E1:10:57:EB:F9:1F:01:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BeuMu6ryWnG_L8q24RBX6_kfAeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/dcc86a-5f51-4d12-963d-f27c628b8353/1/kkWS-uRhsqLEM_jCAdfUSPzZAq8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/dcc86a-5f51-4d12-963d-f27c628b8353/1/BeuMu6ryWnG_L8q24RBX6_kfAeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.241.241.0/24
193.241.249.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:09:fc:1c:85:05:7a:39:57:da:82:f3:2b:32:a2:4b:25:22:
53:83:ff:d7:64:e1:0d:ac:af:64:b0:20:2d:69:09:3d:5a:83:
fc:b6:c9:49:ac:e2:d2:d8:0c:2e:bb:3e:f5:ca:4c:57:89:c5:
d0:a1:a8:58:54:38:6e:17:fe:f3:62:63:cd:b6:12:d0:3d:61:
71:f4:0f:c5:75:01:2a:af:a7:4c:24:28:cf:b4:98:38:85:05:
c6:b5:18:85:28:96:ed:f4:78:2e:21:60:32:e3:37:ce:fc:66:
20:01:70:fa:1b:35:ee:95:c5:9b:54:26:2d:89:b3:be:3f:3c:
74:2b:d4:f9:62:5d:c8:fe:e9:8e:9f:50:2d:50:e8:5f:a7:84:
c0:b3:7d:87:b5:84:e4:26:09:11:eb:18:19:c1:ed:6d:dd:bf:
6c:62:6b:87:80:bd:19:c4:32:4d:c4:71:6c:41:a4:c0:66:c0:
41:ce:3f:78:95:ad:b9:5c:67:ee:1c:73:51:b8:64:34:40:49:
ca:ef:9f:64:e4:60:84:7b:63:47:75:1f:9a:85:ba:fb:da:4a:
18:50:b0:a7:03:e4:1c:5a:ab:00:6d:c2:6f:57:a5:4a:67:a8:
64:16:1b:c8:11:24:a0:27:1d:d5:bb:8e:01:50:29:d3:02:d5:
d9:d8:af:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:27:55 2024 by rpki-client on console-fra.rpki-client.org