Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/kh_GGI08IJk3v0CAjgDP60f9ui0.roa
File: kh_GGI08IJk3v0CAjgDP60f9ui0.roa (raw, json)
Hash identifier: YJjB/VbgopX/ED3elRq20b5beZcWbkNHaAdDcYjM3/M=
Subject key identifier: 92:1F:C6:18:8D:3C:20:99:37:BF:40:80:8E:00:CF:EB:47:FD:BA:2D
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 0185F509570DCA0E43AD54F39CDD7F7CAF77
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/kh_GGI08IJk3v0CAjgDP60f9ui0.roa
Signing time: Fri 27 Jan 2023 21:01:48 +0000
ROA not before: Fri 27 Jan 2023 21:01:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39521
IP address blocks: 91.186.204.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 27 Feb 2023 13:24:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:f5:09:57:0d:ca:0e:43:ad:54:f3:9c:dd:7f:7c:af:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Jan 27 21:01:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=921fc6188d3c209937bf40808e00cfeb47fdba2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:db:b7:3c:5a:2c:8d:d9:82:0a:7f:ff:69:0f:
9f:c9:30:4b:42:d7:0f:41:9d:a8:8f:6f:de:81:f2:
78:3e:2e:40:da:8c:42:3a:3c:bc:1e:89:d2:49:da:
1a:7a:dc:19:96:a4:49:9f:1d:b4:1d:ff:1a:4c:86:
e9:c0:15:c5:cf:b9:63:67:3b:ee:e0:78:25:25:fc:
88:e3:8e:3c:05:b6:ec:b8:4a:7a:0a:7d:58:24:d3:
87:7b:6a:24:93:71:4b:48:49:8e:11:ab:f8:30:69:
6f:94:61:d3:a1:b4:87:a6:33:50:eb:f3:14:55:9b:
74:a2:3c:07:b0:37:e1:6e:dd:89:09:df:cb:aa:fb:
f1:ee:0a:51:cb:ae:f7:de:07:85:90:dc:8f:90:24:
87:ef:87:ba:af:30:bd:b3:5f:88:ea:20:db:a2:31:
15:42:94:20:37:4e:ce:da:3d:36:c7:ab:ac:a8:6a:
09:42:00:ee:78:b8:f4:f8:94:a1:b3:80:e6:64:f5:
93:ff:0f:99:a1:99:3b:79:5b:f1:3f:ce:92:47:bd:
d9:39:0d:63:1d:3f:eb:8f:ea:e5:68:5b:66:ab:4f:
9d:ce:09:c6:5f:ca:3a:c5:a2:30:9d:b5:17:07:e0:
4d:7d:04:00:7b:85:5a:0b:91:76:be:db:8a:15:8c:
0d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:1F:C6:18:8D:3C:20:99:37:BF:40:80:8E:00:CF:EB:47:FD:BA:2D
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/kh_GGI08IJk3v0CAjgDP60f9ui0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.186.204.0/22
Signature Algorithm: sha256WithRSAEncryption
86:b5:fa:dc:8d:40:35:e0:75:81:59:8c:fb:42:1b:e0:27:53:
87:7c:7c:37:16:31:50:d7:f5:60:d4:b7:f5:f8:5b:bb:11:e1:
8d:30:0f:58:d2:3f:4c:08:6d:ab:77:5c:29:2f:1d:ce:af:3e:
58:d6:44:ea:a8:2b:e3:09:9e:39:b0:ac:2d:fe:21:bf:3c:29:
e8:fe:64:08:58:70:4f:aa:0e:65:4d:d3:07:bb:06:f3:1f:4e:
fb:04:05:42:92:4a:ec:8b:9a:72:27:07:a9:0a:59:25:ba:3a:
55:cf:8d:d4:72:ed:ae:01:fa:43:0d:b3:62:3d:32:c4:30:b7:
49:1e:ab:13:58:c3:18:58:72:2a:bb:14:95:03:e6:9d:3c:93:
ab:89:c3:8d:fb:9b:e2:b4:3c:a2:0d:2a:5f:27:96:eb:69:dc:
08:34:f0:55:16:1b:97:01:4e:70:65:e7:23:ff:14:72:ac:38:
d4:0d:2c:e9:a1:a8:cf:c7:31:a5:78:de:c9:3f:95:d8:3a:b6:
9f:44:22:93:59:c1:c3:16:40:29:27:be:c4:ac:d3:10:c0:00:
f6:de:aa:b3:b5:28:ca:8d:9e:ce:55:65:a2:50:38:41:11:5d:
e3:2e:59:12:f5:ff:d7:9d:e7:d1:16:eb:18:66:aa:33:cf:b2:
95:bd:a4:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:19 2024 by rpki-client on console-ams.rpki-client.org