Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/kc03-__9adnQLGVHjHZUNRyi7C4.roa
File: kc03-__9adnQLGVHjHZUNRyi7C4.roa (raw, json)
Hash identifier: QRunCzpA/Yu//9kBiZyGsu6Bj8t8TTAQ4g2vWhVdYWc=
Subject key identifier: 91:CD:37:FB:FF:FD:69:D9:D0:2C:65:47:8C:76:54:35:1C:A2:EC:2E
Certificate issuer: /CN=954a2aee086174b01272fae779ad431eb092aeb7
Certificate serial: 01856FC2661FCB61F29B04CC15059876B44C
Authority key identifier: 95:4A:2A:EE:08:61:74:B0:12:72:FA:E7:79:AD:43:1E:B0:92:AE:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/kc03-__9adnQLGVHjHZUNRyi7C4.roa
Signing time: Sun 01 Jan 2023 23:54:49 +0000
ROA not before: Sun 01 Jan 2023 23:54:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20860
IP address blocks: 37.247.116.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:30:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:c2:66:1f:cb:61:f2:9b:04:cc:15:05:98:76:b4:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=954a2aee086174b01272fae779ad431eb092aeb7
Validity
Not Before: Jan 1 23:54:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=91cd37fbfffd69d9d02c65478c7654351ca2ec2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:aa:ae:f6:a6:b9:f7:3e:90:c2:97:6c:96:4e:
8f:19:49:7b:6a:ac:d4:f2:06:44:53:dc:6e:35:58:
53:2f:89:11:23:f1:04:54:aa:1f:77:62:a4:9f:2b:
3c:f0:10:d7:5c:dd:4b:36:c0:f0:de:29:c7:1d:e8:
da:9b:46:c6:27:4a:45:ab:fa:05:19:b1:1b:54:d1:
3e:35:29:de:4f:b5:12:50:8c:79:ed:f6:45:e7:b5:
a4:55:3d:64:cf:87:fc:aa:cb:9b:fb:ae:23:ee:06:
05:8b:f6:66:21:d5:a0:6b:9d:f4:f1:64:03:01:f6:
11:22:12:b6:99:38:80:e1:8e:7e:de:d3:c3:16:c8:
66:dc:25:bf:48:66:82:40:d4:7f:81:8c:ff:f0:12:
b7:bf:22:3d:8a:24:ae:27:db:26:bb:b2:db:b5:c8:
fa:f5:ff:27:67:4f:26:09:85:c7:8e:36:83:e2:33:
2a:3a:5b:88:0d:07:6d:ce:c9:f8:96:e9:ac:04:17:
7c:7e:c6:2a:ec:39:18:43:d7:62:86:81:12:72:c8:
a8:a7:0e:5b:12:c1:7a:28:1c:5b:77:e8:bd:7e:16:
c3:f3:0a:59:2b:25:89:ec:59:51:aa:2f:b6:26:c5:
83:51:5a:4e:1f:61:b2:e1:75:b9:f9:db:4b:8d:37:
ee:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:CD:37:FB:FF:FD:69:D9:D0:2C:65:47:8C:76:54:35:1C:A2:EC:2E
X509v3 Authority Key Identifier:
keyid:95:4A:2A:EE:08:61:74:B0:12:72:FA:E7:79:AD:43:1E:B0:92:AE:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/kc03-__9adnQLGVHjHZUNRyi7C4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.247.116.0/23
Signature Algorithm: sha256WithRSAEncryption
ce:c4:f5:b7:7e:6e:93:5c:a2:ab:e1:f0:23:a8:f6:2b:00:4a:
74:4d:3a:a5:44:d3:b3:d4:49:bf:62:ca:12:85:7b:6f:e6:31:
07:70:31:a5:eb:4d:62:69:ff:67:fd:4a:9f:b5:2d:da:99:74:
4e:95:0c:d7:06:c4:0c:a4:4d:82:eb:65:0e:28:87:b5:05:d2:
94:40:7a:cc:c5:8b:bc:41:4e:11:40:5b:a1:72:19:a3:2c:bf:
d4:2f:8c:05:12:3a:6e:e3:cc:f3:81:e8:b3:1a:e6:47:e6:81:
69:73:c3:76:2a:95:7a:04:1d:ba:3f:c2:e7:55:e7:dc:bf:8a:
d6:ca:bb:30:9f:b1:36:d5:e3:87:10:fb:a2:9f:c2:e4:a1:34:
4f:dd:ba:ca:26:75:3d:d4:16:7b:2f:99:b8:3c:c1:86:b4:79:
dd:4f:f8:cb:d9:bc:7a:fc:7c:bb:d7:68:f3:3b:16:3f:23:c9:
a5:6f:f2:0a:2d:01:54:cb:9a:66:a6:60:9f:e1:0a:63:0f:4c:
02:d7:b9:59:83:1b:1c:8d:87:8b:d4:96:4d:70:27:ec:f1:e1:
5d:50:c6:ee:79:1c:28:f2:7c:20:8b:09:74:b4:17:58:56:cf:
b5:ae:0d:c9:8a:65:a5:a1:bf:9b:4d:d5:57:9d:79:3b:de:a2:
42:2d:fd:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:18 2024 by rpki-client on console-ams.rpki-client.org