Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/K0QTtGqaOJX7xjdtpthKBIDqghQ.roa
File: K0QTtGqaOJX7xjdtpthKBIDqghQ.roa (raw, json)
Hash identifier: s7YhjsQcqzFo6Ws1HWtE3E9bTaTHTk4JREWW4krJgyg=
Subject key identifier: 2B:44:13:B4:6A:9A:38:95:FB:C6:37:6D:A6:D8:4A:04:80:EA:82:14
Certificate issuer: /CN=f6090b4db06a4d65935141bac98098127a8b8f5a
Certificate serial: 018A9282A62760ED58780647C9E32613A2D7
Authority key identifier: F6:09:0B:4D:B0:6A:4D:65:93:51:41:BA:C9:80:98:12:7A:8B:8F:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9gkLTbBqTWWTUUG6yYCYEnqLj1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/K0QTtGqaOJX7xjdtpthKBIDqghQ.roa
Signing time: Thu 14 Sep 2023 07:05:50 +0000
ROA not before: Thu 14 Sep 2023 07:05:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 136258
IP address blocks: 185.93.173.0/24 maxlen: 24
188.214.157.0/24 maxlen: 24
92.243.80.0/24 maxlen: 24
185.196.61.0/24 maxlen: 24
185.192.124.0/24 maxlen: 24
185.90.61.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:92:82:a6:27:60:ed:58:78:06:47:c9:e3:26:13:a2:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6090b4db06a4d65935141bac98098127a8b8f5a
Validity
Not Before: Sep 14 07:05:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2b4413b46a9a3895fbc6376da6d84a0480ea8214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:40:0c:b9:ad:a2:f0:fb:f4:ca:00:a8:d6:af:
06:e0:e8:5e:c5:44:af:97:96:66:5a:1a:8f:38:0f:
1b:7f:cb:8b:0b:b8:62:79:63:83:d2:e6:3b:9e:f6:
ef:ac:6c:ce:e6:f0:bb:9a:d3:78:6f:66:14:f8:82:
15:51:47:0d:59:12:9e:82:0c:1d:8e:5d:5e:f5:f2:
5f:78:78:2f:1c:cd:bf:6d:a8:56:d4:b4:2e:b8:6f:
55:55:88:ae:d8:d6:c6:37:a5:3f:f9:0a:9c:b7:08:
46:e0:52:d2:45:9e:5c:5d:aa:46:67:be:76:11:47:
62:97:7e:3b:23:df:13:5d:b6:a2:90:5f:38:37:b2:
bf:35:4c:28:6a:78:2c:04:16:50:e5:4a:b6:b2:98:
0c:d3:12:0b:ce:2e:18:4c:da:d7:44:1d:a2:8b:d8:
35:9f:90:10:be:61:09:62:c4:1e:75:6a:8f:f4:80:
d2:62:12:74:65:55:7f:19:6f:d8:a1:0e:e8:5a:32:
c8:43:a7:63:6d:4b:16:c8:d3:ad:1b:32:1f:97:95:
4d:26:d1:1c:6b:23:8a:02:ed:29:ef:ee:38:9f:92:
50:a4:72:d2:27:de:4a:c0:6a:69:10:5c:c5:b7:a1:
ff:c0:43:0d:d1:a2:38:2c:79:ef:f9:05:fb:9f:85:
19:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:44:13:B4:6A:9A:38:95:FB:C6:37:6D:A6:D8:4A:04:80:EA:82:14
X509v3 Authority Key Identifier:
keyid:F6:09:0B:4D:B0:6A:4D:65:93:51:41:BA:C9:80:98:12:7A:8B:8F:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9gkLTbBqTWWTUUG6yYCYEnqLj1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/K0QTtGqaOJX7xjdtpthKBIDqghQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/9gkLTbBqTWWTUUG6yYCYEnqLj1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.243.80.0/24
185.90.61.0/24
185.93.173.0/24
185.192.124.0/24
185.196.61.0/24
188.214.157.0/24
Signature Algorithm: sha256WithRSAEncryption
77:f9:d7:a6:bc:36:3b:1c:ac:02:ee:8c:bf:bf:d8:6c:70:d2:
60:2e:a5:cf:98:77:54:0e:de:97:a1:ef:32:5a:4b:99:ab:d0:
17:b2:5e:d9:11:ed:e4:9b:fa:ec:e3:f0:bb:fb:d9:80:ae:78:
7b:95:c9:6a:6a:32:81:48:ce:00:4e:42:5e:22:96:25:ba:b7:
64:90:0e:1f:07:ed:66:43:8f:75:e7:6c:2f:60:43:75:3f:14:
5c:6f:99:ae:c2:03:b4:9b:f9:26:70:d6:cb:cc:b7:0b:0d:aa:
d4:ed:3e:0b:0f:f9:82:84:76:78:4c:c2:0f:8f:89:6e:30:17:
27:6f:c5:cb:7a:95:62:8b:07:b0:1b:37:40:6d:fa:c4:c0:d1:
54:be:5c:b7:32:78:43:e0:13:d9:fd:f4:ba:55:1d:76:1c:3a:
f5:08:10:dd:ae:55:b0:b3:11:45:20:a9:bb:dc:c2:92:e9:46:
81:89:78:6c:63:cf:43:2f:a8:7e:b1:81:de:16:c1:e9:93:27:
40:9f:6b:61:08:72:a4:75:44:39:0b:cd:a8:00:09:c8:d9:d5:
95:c1:54:bf:bd:13:6b:18:e5:70:71:bb:30:1a:46:12:44:27:
47:1d:a6:8d:52:e4:73:e9:ea:ae:22:72:b9:5e:90:0b:9e:05:
cb:fb:b4:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:24:35 2024 by rpki-client on console-fra.rpki-client.org