Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/krsgoYnkBaaQj8cMi4mNQ7BXXB4.roa
File: krsgoYnkBaaQj8cMi4mNQ7BXXB4.roa (raw, json)
Hash identifier: tGXmbMJoadpTK3xLtCFyCaI1loQexD9PdedipmfVV58=
Subject key identifier: 92:BB:20:A1:89:E4:05:A6:90:8F:C7:0C:8B:89:8D:43:B0:57:5C:1E
Certificate issuer: /CN=082b303cb49e73e2d2a404583d5f8377ceb02545
Certificate serial: 018AD59E2B3C11F0207F711F7C96BEE94AA5
Authority key identifier: 08:2B:30:3C:B4:9E:73:E2:D2:A4:04:58:3D:5F:83:77:CE:B0:25:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CCswPLSec-LSpARYPV-Dd86wJUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/krsgoYnkBaaQj8cMi4mNQ7BXXB4.roa
Signing time: Wed 27 Sep 2023 07:50:27 +0000
ROA not before: Wed 27 Sep 2023 07:50:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16242
IP address blocks: 193.247.85.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d5:9e:2b:3c:11:f0:20:7f:71:1f:7c:96:be:e9:4a:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=082b303cb49e73e2d2a404583d5f8377ceb02545
Validity
Not Before: Sep 27 07:50:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=92bb20a189e405a6908fc70c8b898d43b0575c1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:61:f9:4a:c0:8f:8f:b4:ba:11:9c:4f:f8:52:
c1:c6:41:b2:1e:b5:b0:92:b1:7b:93:af:63:7d:7f:
41:37:a9:62:44:65:6a:5a:95:80:a2:8f:9b:74:f1:
a5:65:db:c4:ff:8a:27:6f:5c:32:0a:e9:66:82:e5:
6c:e7:a6:a0:c6:3f:48:08:df:97:af:64:72:26:dc:
5d:c7:2b:9d:fb:2f:de:bb:2a:bb:8c:b6:2d:31:8c:
ea:6e:fd:37:98:b7:e7:a7:62:ef:c8:75:ab:4a:a4:
5b:2a:2d:75:84:d9:70:d7:43:7c:9a:cd:05:a3:1a:
b2:8d:de:ae:f3:17:b8:41:a5:3b:3b:2a:a5:fd:12:
09:c4:9c:b9:ca:19:ec:f2:4d:23:d1:d7:c9:1b:d0:
8d:8c:8f:27:9d:5f:1e:42:d2:fa:47:8d:2c:cc:75:
b6:e8:15:45:78:84:cc:50:6f:68:a3:5a:90:84:8b:
ff:72:35:b2:95:ad:f2:85:17:df:43:43:b5:64:5b:
63:0b:18:09:80:17:06:a2:cb:0f:a6:c2:4e:e3:69:
08:d3:89:b7:1c:c7:03:26:8c:b9:83:5d:90:f3:4e:
18:6d:cd:b9:45:26:e3:a5:94:ff:73:90:30:72:fa:
cc:f5:da:c9:85:2e:55:11:c0:37:7c:64:c3:81:a3:
61:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:BB:20:A1:89:E4:05:A6:90:8F:C7:0C:8B:89:8D:43:B0:57:5C:1E
X509v3 Authority Key Identifier:
keyid:08:2B:30:3C:B4:9E:73:E2:D2:A4:04:58:3D:5F:83:77:CE:B0:25:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CCswPLSec-LSpARYPV-Dd86wJUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/krsgoYnkBaaQj8cMi4mNQ7BXXB4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/CCswPLSec-LSpARYPV-Dd86wJUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.247.85.0/24
Signature Algorithm: sha256WithRSAEncryption
67:4d:a5:0b:40:89:c2:b1:7c:91:78:fe:01:42:3e:5f:39:f0:
0c:64:09:7f:d6:41:66:56:b7:a2:79:ad:54:6c:31:38:b7:97:
a3:4a:24:0d:80:86:df:8f:c0:76:c5:7b:64:8d:6a:02:69:b9:
80:3d:68:f1:80:6d:66:5a:df:56:34:b4:2c:08:33:3d:03:d0:
2a:cb:6e:99:c6:c4:d3:3e:ac:6f:c7:d4:36:e6:ac:7b:f0:b4:
4c:12:c6:1b:09:f9:38:31:1a:de:33:42:18:6f:b5:ee:c9:45:
a8:07:97:aa:81:71:91:59:1e:ff:3d:7b:7a:cb:d5:c5:2e:8e:
c9:0b:54:da:9a:47:37:7c:ed:f0:11:b2:96:87:23:ee:e8:11:
c9:1b:44:b8:1e:26:a6:63:22:75:e4:0a:7d:d4:8d:c5:a3:0b:
df:35:10:33:45:cc:f1:b8:64:54:07:27:25:15:a3:fb:e3:b1:
10:c9:d8:01:ee:c3:91:27:fd:9e:6e:02:09:ef:3f:93:83:ba:
4e:c0:c0:94:41:46:74:71:e0:63:8a:5a:25:72:0e:f5:40:11:
bb:27:02:34:48:e1:ba:b6:82:2f:3c:36:e4:4f:37:ea:84:0d:
ca:a2:f1:76:cc:9b:b5:9b:02:96:fd:c6:29:70:c0:52:80:fa:
ff:33:33:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 7 14:03:20 2023 by rpki-client on console-fra.rpki-client.org