Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/_ckv_RL9jt9--RtjN9MI4_h8uPY.roa
File: _ckv_RL9jt9--RtjN9MI4_h8uPY.roa (raw, json)
Hash identifier: ptUnY1d5nLrUZ69ITUwy/vC9+eNgjEmbHVXSny8+Kqw=
Subject key identifier: FD:C9:2F:FD:12:FD:8E:DF:7E:F9:1B:63:37:D3:08:E3:F8:7C:B8:F6
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 018849D486A51C92838CA0F36FFE99A0BF8E
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/_ckv_RL9jt9--RtjN9MI4_h8uPY.roa
Signing time: Tue 23 May 2023 18:17:24 +0000
ROA not before: Tue 23 May 2023 18:17:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209638
IP address blocks: 185.215.231.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:49:d4:86:a5:1c:92:83:8c:a0:f3:6f:fe:99:a0:bf:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: May 23 18:17:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fdc92ffd12fd8edf7ef91b6337d308e3f87cb8f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:1b:d1:3d:2d:42:3e:b5:4a:58:56:76:a0:ee:
ff:b4:6f:9c:fa:23:ca:61:38:32:d5:92:99:36:0b:
7c:14:5f:e0:b7:5e:9b:d8:ae:16:5c:54:40:bc:9c:
a4:47:44:93:14:a8:12:45:7a:0d:cf:a1:4a:6d:aa:
43:3a:5b:19:36:32:6e:c2:76:1c:cc:5a:44:cd:03:
28:2d:95:7d:f9:de:bd:7d:96:49:a9:3e:31:e1:d9:
2d:cc:89:0f:9c:76:f7:b2:d1:e1:88:a8:9c:65:ac:
94:6e:d9:60:b3:21:df:7a:94:26:90:63:3c:27:0d:
79:df:61:23:45:b5:fc:b1:7b:d0:92:7c:e6:28:2f:
e9:35:50:a4:7a:93:0a:0e:3b:af:e8:a7:e9:8b:a8:
55:ca:17:27:cd:6f:22:56:93:07:a2:3a:84:58:f9:
e9:5e:e6:1d:63:6c:ef:2c:bd:22:a0:8f:1f:0d:a0:
26:21:52:39:e3:16:26:43:98:b0:c2:88:9a:b1:8a:
2b:15:6b:54:06:16:9e:89:53:74:4f:90:dd:33:6a:
8a:05:b5:35:20:79:b4:69:6a:f7:ce:45:d7:f9:5a:
9e:09:a1:14:59:b3:67:cc:65:b5:58:30:43:e8:9e:
2f:93:e1:4a:1f:3c:ce:42:3f:96:03:fd:94:b3:84:
99:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:C9:2F:FD:12:FD:8E:DF:7E:F9:1B:63:37:D3:08:E3:F8:7C:B8:F6
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/_ckv_RL9jt9--RtjN9MI4_h8uPY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.215.231.0/24
Signature Algorithm: sha256WithRSAEncryption
90:b7:bd:75:ad:76:3c:d2:99:a7:c0:62:ff:fd:a8:69:af:af:
4e:d7:f9:35:ba:d6:f3:9f:8e:0c:d3:fb:bb:54:2a:2d:da:03:
72:6a:71:a5:03:b2:15:9e:23:99:8c:06:b3:79:85:da:08:51:
b1:d9:14:e1:48:03:bd:fe:b3:2f:c3:70:c0:0b:e7:d0:20:6a:
57:f4:77:25:db:f4:e4:34:25:08:f0:3d:9b:05:55:6b:5d:b7:
06:78:0f:72:ea:c2:87:97:9c:19:0a:84:d5:8e:70:31:42:91:
c9:38:c8:77:41:0b:98:b5:7a:58:93:8f:ff:92:c4:a9:a8:4c:
06:29:c4:d8:bf:d1:9a:08:fb:5f:42:d5:de:49:72:91:a9:62:
8d:db:d8:3b:1a:e7:e9:81:29:49:46:65:b8:ba:fa:70:c0:c9:
19:91:aa:fb:33:a7:d3:fc:f5:20:be:0f:e7:64:c9:e3:65:72:
ec:b6:99:92:ff:d2:13:0b:a1:92:80:bc:8d:f5:a3:e7:8f:79:
9d:dd:fe:b6:ce:46:8c:c2:38:b5:4f:f6:ef:2e:1a:9b:55:0b:
be:3f:16:84:9c:ac:cf:6e:51:e7:67:ac:8c:85:dc:d3:aa:cf:
45:78:bf:04:15:45:8b:25:a9:f9:83:33:c5:4f:ce:4d:47:7e:
57:4e:f4:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:33 2023 by rpki-client on console-fra.rpki-client.org