Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/kvKdjoCayoMbkDOkAExvbMZT1iQ.roa
File: kvKdjoCayoMbkDOkAExvbMZT1iQ.roa (raw, json)
Hash identifier: 1lMgwgQemkyogX6WcPti2RGo/Nt/KGfza2UUpKmKgV0=
Subject key identifier: 92:F2:9D:8E:80:9A:CA:83:1B:90:33:A4:00:4C:6F:6C:C6:53:D6:24
Certificate issuer: /CN=e4a2b8e90d157ea022f8e700024a93dc356a514d
Certificate serial: 018B665BB9EF17DDAB874CCF269A20B83C94
Authority key identifier: E4:A2:B8:E9:0D:15:7E:A0:22:F8:E7:00:02:4A:93:DC:35:6A:51:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/kvKdjoCayoMbkDOkAExvbMZT1iQ.roa
Signing time: Wed 25 Oct 2023 10:22:49 +0000
ROA not before: Wed 25 Oct 2023 10:22:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209466
IP address blocks: 188.132.184.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:66:5b:b9:ef:17:dd:ab:87:4c:cf:26:9a:20:b8:3c:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4a2b8e90d157ea022f8e700024a93dc356a514d
Validity
Not Before: Oct 25 10:22:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=92f29d8e809aca831b9033a4004c6f6cc653d624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:71:5b:a5:4e:bf:e5:49:e8:9b:31:47:77:9f:
05:f5:84:2f:e2:af:5e:4e:50:6c:58:e6:33:59:48:
18:5c:43:a8:d0:c2:f8:29:1e:cd:60:07:d1:68:7e:
7e:d6:02:8e:68:cf:5e:a7:6d:04:62:50:a5:cf:4d:
56:39:52:0a:96:a6:b0:c6:3c:bd:f0:a8:ff:be:cd:
28:58:f2:ee:60:2f:b8:6a:c2:2d:5d:23:1a:91:0d:
4c:b7:66:91:12:6e:3f:ea:00:42:2e:3b:ba:25:de:
64:bb:27:22:48:2a:47:27:76:03:a1:7a:6a:39:cc:
46:ce:e2:78:14:11:1d:59:c8:5e:b3:38:b6:55:e9:
c3:45:b4:b4:3a:18:03:2d:c9:47:34:25:ba:15:8a:
de:d3:2c:29:df:e5:80:41:17:bb:53:1a:9f:a3:9a:
8f:18:51:04:24:e3:df:bd:79:fd:80:d0:20:ef:b1:
69:21:72:a9:68:81:5d:94:f6:35:5f:84:57:3e:e8:
2f:32:73:fc:3e:5a:81:26:23:bd:88:31:ec:fa:49:
5f:16:f9:fa:13:b5:e6:34:f6:34:fd:77:1d:a7:d4:
f8:9a:ce:ef:ab:83:00:fb:75:5d:5e:5a:60:d8:09:
15:71:a0:23:e8:8f:f4:5e:9f:5d:9e:d2:3c:60:68:
5c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:F2:9D:8E:80:9A:CA:83:1B:90:33:A4:00:4C:6F:6C:C6:53:D6:24
X509v3 Authority Key Identifier:
keyid:E4:A2:B8:E9:0D:15:7E:A0:22:F8:E7:00:02:4A:93:DC:35:6A:51:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/kvKdjoCayoMbkDOkAExvbMZT1iQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/5KK46Q0VfqAi-OcAAkqT3DVqUU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.132.184.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:fb:3a:18:4d:dd:7b:6c:0c:e0:49:fa:33:f7:45:63:a7:e6:
08:ce:ac:c2:32:a3:6a:1e:73:72:ab:e2:54:c7:67:c1:17:2d:
fc:40:08:cb:ed:b2:11:fe:2f:db:19:57:09:2d:88:42:33:b2:
55:a2:a0:78:b7:f3:61:47:63:cf:17:44:d3:e6:82:14:dc:47:
1b:72:47:39:32:78:87:58:a1:b7:af:f7:a7:1a:0f:35:59:38:
3a:01:4c:0c:0d:45:9e:64:dd:10:59:4b:26:cc:46:69:44:a9:
12:7a:62:7e:0b:0e:71:2b:ec:81:11:0c:f6:7f:0d:12:95:36:
36:83:3c:f8:ec:b2:5c:e4:dd:5b:a7:c2:54:d0:76:06:5a:1d:
f9:1f:ad:c5:6c:d9:44:cb:41:ea:0f:97:54:64:d6:cb:af:13:
97:c0:5b:48:46:0b:ce:4f:35:9a:9b:94:1e:a1:ab:34:f8:8f:
f3:39:77:ea:a3:e3:f8:56:9b:ec:9e:d4:ca:e0:30:db:6b:50:
70:97:ab:7b:f9:f5:0d:e7:36:f7:bd:9b:76:36:9f:45:ad:36:
ea:32:8b:0c:52:b3:b5:89:0b:21:59:26:9a:92:4a:52:a4:51:
41:75:44:90:b7:eb:8b:e1:fa:37:94:bd:36:ab:e7:c5:9d:4b:
8f:83:22:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 15 17:59:33 2023 by rpki-client on console-fra.rpki-client.org