Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/kgV1CZKypFsvhUO50zxdyCodiJ0.roa
File: kgV1CZKypFsvhUO50zxdyCodiJ0.roa (raw, json)
Hash identifier: 2HfJlvZirexJ8xjIPAJwaxaq0OJAGzb03XaruRiNUSY=
Subject key identifier: 92:05:75:09:92:B2:A4:5B:2F:85:43:B9:D3:3C:5D:C8:2A:1D:88:9D
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01856E8B4D65F095544BD82E353649D7F55B
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/kgV1CZKypFsvhUO50zxdyCodiJ0.roa
Signing time: Sun 01 Jan 2023 18:15:01 +0000
ROA not before: Sun 01 Jan 2023 18:15:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200019
IP address blocks: 85.208.106.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:8b:4d:65:f0:95:54:4b:d8:2e:35:36:49:d7:f5:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jan 1 18:15:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9205750992b2a45b2f8543b9d33c5dc82a1d889d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b2:a3:52:d6:33:0c:ac:2d:87:3f:2f:63:20:
63:3f:26:17:cb:23:7b:89:9b:4d:55:8a:3f:1d:b4:
aa:34:dd:d8:4f:84:a9:8b:3f:fc:00:bf:66:62:3f:
92:4d:b7:ff:9f:5d:76:0d:f0:60:e9:a1:32:59:88:
4a:8e:50:35:9e:30:20:5d:72:b5:3c:29:1e:98:29:
ea:a4:c5:f2:a3:a5:4a:65:4c:a5:8a:22:80:6e:0d:
40:db:2f:ed:df:02:4c:07:12:29:83:9c:4a:d8:a6:
bb:17:df:6c:79:14:5f:d7:71:de:31:61:0b:48:c3:
9a:67:84:8d:08:69:d9:66:39:9c:a2:f0:e0:98:78:
cc:9c:f9:c8:18:d7:91:d8:e1:b9:0a:5b:ad:40:11:
9f:84:83:d6:d9:cf:ba:96:b3:d5:54:39:c2:5d:90:
5a:09:5c:fa:2a:df:f2:f3:5a:9b:07:42:be:2c:6d:
a6:8a:54:89:07:cf:27:14:48:ad:88:e1:db:c0:5a:
4d:a0:9c:6b:87:94:63:c8:bd:88:68:30:23:f3:cd:
22:6b:3e:17:b0:64:f4:7f:c5:1a:83:6a:aa:1e:9a:
db:51:37:6c:da:5e:4f:2c:41:bc:5a:00:da:a5:61:
d4:4b:db:64:23:8b:09:42:56:88:b1:22:b9:52:4a:
59:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:05:75:09:92:B2:A4:5B:2F:85:43:B9:D3:3C:5D:C8:2A:1D:88:9D
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/kgV1CZKypFsvhUO50zxdyCodiJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.106.0/24
Signature Algorithm: sha256WithRSAEncryption
49:d6:74:e8:a4:a5:f7:53:59:69:98:f9:c1:c3:a0:ca:fe:b8:
6f:78:cf:c7:91:e5:5d:8c:ac:c7:0c:97:ab:0f:9c:44:67:26:
89:0b:56:54:27:a9:a9:89:10:9c:1d:20:15:4f:4d:82:bd:9d:
8c:7d:bd:b7:71:cf:c5:94:75:73:66:01:fc:15:6d:a9:58:3d:
42:49:97:ce:96:e3:36:df:b1:50:c8:5e:95:7d:8e:87:44:79:
c6:67:7c:97:5e:96:dc:fc:08:49:4e:ca:3b:7b:aa:e7:26:45:
3e:d3:eb:66:18:ba:28:3f:46:d7:f2:d8:8f:e3:c2:90:eb:10:
02:bd:10:24:87:b9:41:54:bf:92:03:b9:ef:7a:b5:f6:0b:72:
a0:1b:fa:c3:da:92:ab:12:20:30:e7:b1:98:d7:1e:76:80:ae:
b7:dd:91:60:ab:67:30:2b:83:e1:9f:e1:9a:aa:b7:08:69:5e:
36:85:cb:a8:5b:94:6e:38:eb:b4:d3:5c:da:9c:61:25:9b:41:
b1:12:60:84:c0:4b:83:66:52:6d:92:39:d3:7d:82:6c:f4:e8:
ad:51:4b:fb:5d:30:dd:c6:72:24:e4:11:a5:0b:49:40:13:00:
fc:ea:fb:6d:b1:ee:b3:c0:7b:c9:27:1e:f9:a5:a9:dd:a5:f1:
8a:00:9a:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:23 2023 by rpki-client on console-ams.rpki-client.org