Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/kRRub634xy3jxoWo8IwLqeKfD80.roa
File: kRRub634xy3jxoWo8IwLqeKfD80.roa (raw, json)
Hash identifier: 0iOqNzNNb3PYDt55+ClQWaaiUlKag2JrTp6eDuDT2cU=
Subject key identifier: 91:14:6E:6F:AD:F8:C7:2D:E3:C6:85:A8:F0:8C:0B:A9:E2:9F:0F:CD
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 01856C78618E3676B53C83326B0A5AECA4E3
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/kRRub634xy3jxoWo8IwLqeKfD80.roa
Signing time: Sun 01 Jan 2023 08:35:06 +0000
ROA not before: Sun 01 Jan 2023 08:35:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211237
IP address blocks: 81.28.253.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 22 Feb 2023 19:17:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:78:61:8e:36:76:b5:3c:83:32:6b:0a:5a:ec:a4:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Jan 1 08:35:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=91146e6fadf8c72de3c685a8f08c0ba9e29f0fcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:c4:7f:49:b4:f1:13:c1:8c:04:41:1a:eb:73:
02:0f:61:96:2c:03:f1:75:d8:3b:fd:08:45:52:1a:
20:60:d3:e3:e0:24:4c:ae:7c:83:95:0d:27:04:de:
04:43:3b:6d:41:04:47:13:3a:bf:74:da:9d:06:b2:
3d:a1:b6:b6:56:78:9a:91:63:b9:36:5e:29:18:ca:
ba:3d:e5:47:2d:48:e9:79:24:87:48:97:90:6f:b8:
c8:6a:7f:3f:4a:b4:53:ed:01:13:df:33:c9:b6:54:
e6:e4:79:d2:28:0a:f3:54:34:91:34:0e:26:1c:93:
31:e9:11:06:3b:f3:03:2d:f5:9c:bd:82:98:02:fb:
ef:2f:7f:83:d2:49:02:93:02:77:6f:45:78:9e:82:
14:e2:f4:38:4e:30:d0:21:59:16:57:f2:b1:d0:c8:
ac:6b:e6:42:26:b0:c2:fa:b9:48:c5:7a:16:f3:a3:
25:5d:fd:b8:b7:f1:99:4c:db:45:a6:bf:09:2a:53:
4d:e4:90:94:3c:18:85:2b:19:4c:e4:0a:37:e9:a2:
31:b2:0c:81:1e:29:19:94:56:69:a1:8c:fa:07:7c:
3a:c0:27:33:77:09:ad:37:83:ea:28:a3:8e:fb:f3:
30:e9:79:af:d2:a7:9c:6b:58:3a:d3:40:69:b8:ff:
ae:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:14:6E:6F:AD:F8:C7:2D:E3:C6:85:A8:F0:8C:0B:A9:E2:9F:0F:CD
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/kRRub634xy3jxoWo8IwLqeKfD80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.28.253.0/24
Signature Algorithm: sha256WithRSAEncryption
67:28:9d:be:c3:ec:24:82:df:ba:71:65:7e:9c:cc:12:13:a2:
7c:47:1a:99:3d:7d:a0:65:4c:fd:db:f1:16:9b:8e:72:2d:cc:
cc:3e:76:d7:35:fe:fa:c3:8f:c2:c7:bc:b1:7b:0e:49:1b:42:
17:f6:56:21:eb:97:7c:c6:73:e0:e7:99:bc:ef:31:6a:8f:7a:
84:d3:b6:91:1e:d9:14:58:9b:b8:36:ab:d8:cf:5d:5c:5c:30:
8e:7d:0c:10:27:0f:3f:fe:a0:ef:7e:30:0b:a3:fe:5b:3b:29:
4e:71:de:f8:70:a5:f9:00:69:06:c1:61:5e:4b:84:b6:bf:5a:
be:d4:dd:4d:4f:d6:9f:35:a2:31:67:bb:cc:ce:b3:0a:c4:43:
99:d2:ac:fa:36:ea:ab:b8:f3:0a:4d:6e:55:e6:71:d1:53:1f:
be:5f:35:6a:c2:5d:5b:62:ed:58:2b:9e:5d:00:67:3e:fb:d3:
0d:10:41:5e:1e:37:2b:48:5a:76:ad:74:74:95:79:d0:87:f3:
0f:96:c6:70:bb:59:6d:95:dd:a5:46:3c:d1:17:f7:7b:e3:d4:
27:43:b5:c1:e8:ef:23:9c:ea:c4:29:4a:75:6e:6d:1c:8d:a1:
6a:ef:d2:72:11:a8:c0:fd:90:5a:57:81:0d:cb:65:75:35:5b:
4a:80:79:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:49 2024 by rpki-client on console-ams.rpki-client.org