Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/Kt5ZLsbdc1E_KY5vIeAoroDHmo8.roa
File: Kt5ZLsbdc1E_KY5vIeAoroDHmo8.roa (raw, json)
Hash identifier: Qh2A/dBxrZfpRODU79FWgxsZ1elOHotjFg93DeUQHMk=
Subject key identifier: 2A:DE:59:2E:C6:DD:73:51:3F:29:8E:6F:21:E0:28:AE:80:C7:9A:8F
Certificate issuer: /CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055
Certificate serial: 018793B7A94D70D44B5DEC28E76F418F86F8
Authority key identifier: 92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/Kt5ZLsbdc1E_KY5vIeAoroDHmo8.roa
Signing time: Tue 18 Apr 2023 09:34:59 +0000
ROA not before: Tue 18 Apr 2023 09:34:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 147.161.3.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 25 Apr 2023 19:10:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:93:b7:a9:4d:70:d4:4b:5d:ec:28:e7:6f:41:8f:86:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055
Validity
Not Before: Apr 18 09:34:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2ade592ec6dd73513f298e6f21e028ae80c79a8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:63:84:43:44:a0:44:d2:3f:19:88:69:1c:b6:
4a:5d:33:6f:b6:24:36:50:87:60:5d:34:40:6d:53:
b0:34:55:d4:eb:b8:34:74:7d:fb:b8:f9:ce:74:87:
e7:07:91:5a:e2:03:4e:96:34:b7:7e:04:7e:ca:4d:
d2:c7:bc:d2:47:51:49:a6:23:0b:d4:50:7c:fc:d2:
9e:62:d3:22:9c:ae:5b:1f:12:42:78:69:d7:af:05:
46:a1:9e:2e:60:4b:16:15:75:45:b1:32:61:a9:cc:
b2:aa:7b:a5:97:b3:71:48:ae:fc:30:b3:d9:c3:19:
cf:fe:8c:64:e9:65:0a:66:ba:03:c8:7a:95:ab:37:
5d:56:30:f9:36:73:54:62:8e:84:f1:10:eb:2e:79:
62:c2:7d:3f:d2:c9:f4:3d:1d:3c:f6:0e:6f:51:62:
02:ca:ab:b8:9c:7d:bf:72:fb:e7:80:2d:5d:73:1a:
34:df:a9:76:99:26:37:18:44:da:0a:68:6c:e1:04:
95:5b:55:d4:ec:12:2d:09:a7:eb:c7:a7:01:73:f0:
19:e0:b7:41:4f:5c:b5:72:b4:16:c7:1b:28:dd:ce:
b0:87:e9:4a:0e:25:1c:6f:78:6f:13:98:10:9c:25:
e4:e7:67:f1:2c:fc:96:f0:1e:32:b2:38:aa:7b:21:
4b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:DE:59:2E:C6:DD:73:51:3F:29:8E:6F:21:E0:28:AE:80:C7:9A:8F
X509v3 Authority Key Identifier:
keyid:92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/Kt5ZLsbdc1E_KY5vIeAoroDHmo8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.161.3.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:8e:41:de:a3:e6:82:ab:96:dd:c4:c5:98:f0:0a:91:41:d2:
51:65:12:65:28:06:60:10:5c:6e:2a:7d:65:0f:bb:2e:e9:65:
78:bc:c7:51:8c:9a:e4:25:97:be:7e:cc:8d:f0:5a:57:61:df:
c3:21:ac:bb:1e:e4:8f:21:c5:ab:12:fc:84:7e:7f:0f:5c:cf:
42:b9:75:ed:2a:4a:6c:af:25:ba:9d:99:8e:d2:b4:43:68:0a:
86:ef:1b:de:23:34:82:8e:21:64:47:bb:50:43:fb:e5:5b:e5:
23:71:4f:2c:b6:31:5a:82:27:fb:78:4a:36:68:95:f3:2d:d5:
48:82:51:83:c6:c7:9c:00:b7:95:bd:bc:05:9b:9d:4f:cc:10:
3b:0a:23:fd:dd:ea:37:f4:da:14:65:fa:73:9a:2c:3f:d6:a5:
54:02:75:c1:d8:bd:0d:56:18:e2:f4:cb:c2:c2:1b:18:45:af:
1f:5a:78:1e:b2:ac:12:78:5d:56:82:99:e8:64:b5:07:e0:a0:
ae:cd:22:ce:d1:1e:be:8b:d6:a7:41:83:32:38:4f:52:f8:ea:
5f:e0:8c:9f:5a:d0:76:42:c6:44:55:0a:0f:fb:f0:17:4b:4e:
dc:53:57:76:29:e1:cc:7f:31:17:0e:0e:5c:30:19:bd:25:49:
3e:e2:07:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:20 2024 by rpki-client on console-fra.rpki-client.org