Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/kkt0HXbkh4XCqpArkrzR7wIriWI.roa
File: kkt0HXbkh4XCqpArkrzR7wIriWI.roa (raw, json)
Hash identifier: HGbQ0qF8fDFeX1ssyRoafMX/zapffsO1NWhxJFE8KJU=
Subject key identifier: 92:4B:74:1D:76:E4:87:85:C2:AA:90:2B:92:BC:D1:EF:02:2B:89:62
Certificate issuer: /CN=b0b5a80a7106e0a4b8545c8150bb72c699fcc9a0
Certificate serial: 01880CD164C77C2CE753C32B81F262B87DA2
Authority key identifier: B0:B5:A8:0A:71:06:E0:A4:B8:54:5C:81:50:BB:72:C6:99:FC:C9:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/kkt0HXbkh4XCqpArkrzR7wIriWI.roa
Signing time: Thu 11 May 2023 21:57:09 +0000
ROA not before: Thu 11 May 2023 21:57:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199964
IP address blocks: 185.93.71.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:0c:d1:64:c7:7c:2c:e7:53:c3:2b:81:f2:62:b8:7d:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0b5a80a7106e0a4b8545c8150bb72c699fcc9a0
Validity
Not Before: May 11 21:57:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=924b741d76e48785c2aa902b92bcd1ef022b8962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:38:33:4f:ae:b9:6a:e1:01:20:2f:8b:5d:a0:
04:33:89:e3:8e:70:5d:fd:01:d9:f5:09:7b:d7:85:
41:ae:95:8a:25:55:d1:bf:9d:c1:55:e4:22:4f:3b:
54:07:33:d1:bc:50:40:9a:85:94:7e:17:7a:a0:e6:
ae:41:c4:55:c7:01:bf:b8:66:87:43:a5:03:12:ae:
f6:cb:f0:b2:17:2d:4b:ec:f4:63:24:47:46:8f:05:
16:4d:fd:c1:9f:4b:18:ec:45:e7:98:13:86:f7:2d:
86:e8:66:fd:2e:a0:97:c6:cf:aa:02:80:56:7f:1c:
16:26:27:d0:8a:d4:ac:61:a9:ec:c0:d9:10:4b:7f:
41:e9:c5:23:52:f9:3b:9e:26:7c:03:df:e9:18:fd:
cf:54:a3:fc:54:0b:09:6f:ce:d1:ac:54:13:f9:4c:
7d:d9:a1:80:af:bf:8c:82:20:fc:05:f3:d2:a1:99:
54:66:e6:64:e4:3b:f0:34:a0:75:00:43:e4:fa:a8:
67:a0:31:7d:67:e9:e2:cf:61:1a:5d:f0:57:5b:f0:
64:c4:92:b2:a1:dd:52:ab:9c:02:d7:b8:fd:d2:44:
a7:b6:58:c4:fa:73:1b:77:51:a1:4c:6d:a4:66:79:
89:d5:f5:9e:07:7f:ee:ab:30:59:bb:27:bf:60:ee:
e2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:4B:74:1D:76:E4:87:85:C2:AA:90:2B:92:BC:D1:EF:02:2B:89:62
X509v3 Authority Key Identifier:
keyid:B0:B5:A8:0A:71:06:E0:A4:B8:54:5C:81:50:BB:72:C6:99:FC:C9:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/kkt0HXbkh4XCqpArkrzR7wIriWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.93.71.0/24
Signature Algorithm: sha256WithRSAEncryption
34:54:e0:ae:8a:a4:fa:33:1e:8a:27:78:af:c5:ca:39:a0:6c:
2d:11:e4:58:82:f6:db:15:9a:38:36:d1:c5:a6:9c:1c:68:ff:
ca:c6:d2:09:c4:34:df:9b:8e:6a:90:26:5f:1b:87:b0:46:95:
78:d9:b7:1b:d5:09:40:13:00:6c:97:00:77:01:d9:7b:8d:31:
8b:4a:44:36:55:4d:36:b0:c1:08:25:b5:b8:2d:e0:20:ce:72:
3d:af:7d:cb:1e:64:3c:4d:ed:b5:f2:89:66:43:37:fb:c0:de:
9f:4e:1b:ea:d2:dd:20:c0:29:3c:be:0f:da:f1:68:3c:f8:4e:
05:4e:74:0d:23:47:a7:c8:84:a7:e1:c8:e2:92:a9:ea:b3:66:
9f:f5:bf:39:1e:55:92:1d:01:9f:26:a4:57:bb:ff:3d:8a:54:
d1:3b:88:8a:c6:1e:94:65:69:93:0e:73:03:45:62:ce:76:c1:
df:a8:03:93:a6:7a:a2:28:86:87:e6:c7:68:92:e0:60:4f:7b:
25:a0:df:79:20:9d:a1:9d:e6:94:a3:88:6f:10:8c:d6:bc:23:
60:8b:4b:b5:89:92:8a:45:37:28:63:94:5a:1c:d3:9f:b6:8b:
06:7f:96:e4:79:d0:b2:0e:c9:b3:bb:97:88:e7:fa:d2:1f:2d:
26:6f:44:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:32 2024 by rpki-client on console-fra.rpki-client.org