Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/cbfa9b-0291-48e3-805c-43d66a0331ec/1/kxt2tL5vWTYCIqtLAkKft24zgMQ.roa
File: kxt2tL5vWTYCIqtLAkKft24zgMQ.roa (raw, json)
Hash identifier: FiBgqQSo2vIO2KqYckynJEwXwqyMT9rCMUchXFq22ic=
Subject key identifier: 93:1B:76:B4:BE:6F:59:36:02:22:AB:4B:02:42:9F:B7:6E:33:80:C4
Certificate issuer: /CN=2bc8695772f0e64f3b9a1621733cc02506f74702
Certificate serial: 018C92EA9C7E0EB504A71E24190129611A27
Authority key identifier: 2B:C8:69:57:72:F0:E6:4F:3B:9A:16:21:73:3C:C0:25:06:F7:47:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K8hpV3Lw5k87mhYhczzAJQb3RwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/cbfa9b-0291-48e3-805c-43d66a0331ec/1/kxt2tL5vWTYCIqtLAkKft24zgMQ.roa
Signing time: Fri 22 Dec 2023 19:04:58 +0000
ROA not before: Fri 22 Dec 2023 19:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39402
IP address blocks: 91.188.211.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 27 Dec 2023 11:44:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:92:ea:9c:7e:0e:b5:04:a7:1e:24:19:01:29:61:1a:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc8695772f0e64f3b9a1621733cc02506f74702
Validity
Not Before: Dec 22 19:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=931b76b4be6f59360222ab4b02429fb76e3380c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d8:df:97:75:fe:6e:9b:bb:1d:c1:2a:9e:1f:
97:a1:a2:77:80:03:87:27:c8:ad:ce:5a:31:6d:bb:
be:d8:57:35:b1:54:59:b9:9a:5b:ef:27:17:20:09:
f0:27:db:e1:d2:1c:9c:53:10:b4:59:28:fb:79:4c:
e3:da:d4:8b:4a:fa:8e:a5:22:6d:16:78:57:3b:21:
a7:67:72:9c:38:5b:50:3a:7e:8c:ea:d3:99:5d:c7:
2e:51:52:1f:29:04:52:37:0e:55:81:7f:99:ac:08:
a9:0c:a4:09:74:4e:0f:d8:96:79:ac:8d:94:aa:72:
b0:45:0f:66:01:04:7d:ee:a3:0b:6a:b7:ac:5b:b1:
08:95:a3:92:05:8a:f2:1e:26:fe:e2:96:c9:14:50:
e6:15:d3:b3:50:c5:3d:03:6e:c5:65:02:2a:aa:7c:
5c:17:45:31:10:a9:fe:1f:28:a1:15:94:fb:60:c5:
59:3b:01:c2:59:9f:f9:c3:94:6e:6a:14:1d:d8:02:
d4:e2:09:e7:df:b8:fb:0e:b9:7e:3c:b8:da:47:49:
4b:55:a8:e2:de:14:96:58:53:bc:a4:a3:e3:f0:12:
0c:85:ea:d1:6a:36:5a:0f:c5:3e:32:89:b7:bc:76:
b2:53:e8:5d:19:86:cb:6f:29:10:df:9a:f0:d5:58:
80:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:1B:76:B4:BE:6F:59:36:02:22:AB:4B:02:42:9F:B7:6E:33:80:C4
X509v3 Authority Key Identifier:
keyid:2B:C8:69:57:72:F0:E6:4F:3B:9A:16:21:73:3C:C0:25:06:F7:47:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K8hpV3Lw5k87mhYhczzAJQb3RwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/cbfa9b-0291-48e3-805c-43d66a0331ec/1/kxt2tL5vWTYCIqtLAkKft24zgMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/cbfa9b-0291-48e3-805c-43d66a0331ec/1/K8hpV3Lw5k87mhYhczzAJQb3RwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.188.211.0/24
Signature Algorithm: sha256WithRSAEncryption
00:cb:0c:82:c9:94:be:47:41:ab:26:ee:27:37:57:8a:c7:ce:
96:27:4f:ff:c0:9d:d9:07:09:06:65:72:e0:6c:cf:21:8e:8d:
4c:75:9c:02:b0:17:31:e9:7e:16:e3:b7:83:d3:57:9d:8b:36:
63:ea:89:6c:a5:86:e4:8f:fe:4e:9a:9f:0a:41:39:e6:5f:48:
d1:8a:4b:f6:f7:15:ef:f9:c3:de:c7:82:1f:9a:c0:54:0b:e7:
04:fa:60:d8:5d:46:0a:ec:a0:ad:9d:72:7c:62:5a:ad:9b:91:
80:c4:37:0e:f6:60:3e:cb:66:c4:83:24:18:a1:d2:a4:38:e8:
7a:31:73:72:2f:7f:56:c2:35:db:94:bf:07:0c:14:09:cd:c0:
f6:40:55:a0:3e:b1:2b:f9:40:90:7f:a5:da:6d:a9:16:c1:fb:
dd:9a:11:01:38:a0:b6:5c:e1:90:ff:93:10:0c:da:78:cb:d4:
57:25:f6:da:59:f9:91:39:67:2a:cc:a7:67:3c:67:23:2f:39:
05:b4:2c:f6:fe:35:dc:47:49:dc:ab:09:66:1f:b8:49:91:26:
06:39:36:9a:ca:b5:f0:20:d0:b1:0d:a7:38:9b:ad:aa:be:fb:
c7:8e:1f:ee:4d:8a:7c:19:4b:ba:01:86:6b:f3:ed:56:cd:25:
c5:c5:74:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:25 2024 by rpki-client on console-ams.rpki-client.org