Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4da2ea-abc0-4bf4-9e06-075e83dd3356/1/K98q-2tgWVV8mQXE_kQhyKi5Vrk.roa
File: K98q-2tgWVV8mQXE_kQhyKi5Vrk.roa (raw, json)
Hash identifier: OXa8KXYlCetC6TnDXJKv955L/z5fZol6xFAzGU2OKWU=
Subject key identifier: 2B:DF:2A:FB:6B:60:59:55:7C:99:05:C4:FE:44:21:C8:A8:B9:56:B9
Certificate issuer: /CN=b092425ab7d66bab711fbaa22757377807834159
Certificate serial: 0185729EF1F5DAF2E562B53B6E27E81C574B
Authority key identifier: B0:92:42:5A:B7:D6:6B:AB:71:1F:BA:A2:27:57:37:78:07:83:41:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sJJCWrfWa6txH7qiJ1c3eAeDQVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4da2ea-abc0-4bf4-9e06-075e83dd3356/1/K98q-2tgWVV8mQXE_kQhyKi5Vrk.roa
Signing time: Mon 02 Jan 2023 13:14:57 +0000
ROA not before: Mon 02 Jan 2023 13:14:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44410
IP address blocks: 193.3.255.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:9e:f1:f5:da:f2:e5:62:b5:3b:6e:27:e8:1c:57:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b092425ab7d66bab711fbaa22757377807834159
Validity
Not Before: Jan 2 13:14:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2bdf2afb6b6059557c9905c4fe4421c8a8b956b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:b0:0a:78:d4:c0:66:6f:73:2a:e3:70:ab:42:
86:8e:ca:e8:5d:af:c4:2e:9d:bc:9a:95:37:9c:17:
fe:7e:a6:32:3e:90:0e:dd:e3:42:0c:2d:06:c1:e8:
37:9c:e3:36:13:00:b7:84:36:2c:61:24:a6:14:0c:
89:08:cb:79:e3:44:79:a8:8c:36:a9:aa:0a:85:42:
74:fc:4b:42:ba:4f:ef:86:9a:f9:84:fd:ff:e7:a7:
cf:88:92:11:85:ea:41:18:d3:dd:06:ff:7b:4b:63:
a4:08:f2:41:9f:68:be:65:cc:bb:f3:e7:4e:d8:54:
93:45:a7:7e:87:8e:9a:aa:af:55:01:4b:54:01:ce:
b0:6b:6a:6a:89:40:9f:d5:7f:8c:86:c7:56:3c:bf:
07:8e:f5:c9:25:ac:fd:47:5c:ca:ee:26:cb:36:2d:
b4:3e:18:18:a6:3c:af:3c:54:cb:42:ac:b2:5a:e8:
cf:87:fe:ae:f9:f0:c0:28:0f:43:e4:08:b1:53:b0:
06:f5:03:82:75:7a:e1:2f:8b:25:52:de:3f:12:b0:
fb:b6:5f:b4:10:d0:a1:b4:68:23:d9:94:1e:6a:7d:
05:e0:5a:ed:0b:64:88:3f:0a:19:90:1a:52:45:75:
66:20:c4:94:d5:97:41:36:20:01:af:14:6c:e2:ad:
20:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:DF:2A:FB:6B:60:59:55:7C:99:05:C4:FE:44:21:C8:A8:B9:56:B9
X509v3 Authority Key Identifier:
keyid:B0:92:42:5A:B7:D6:6B:AB:71:1F:BA:A2:27:57:37:78:07:83:41:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sJJCWrfWa6txH7qiJ1c3eAeDQVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4da2ea-abc0-4bf4-9e06-075e83dd3356/1/K98q-2tgWVV8mQXE_kQhyKi5Vrk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4da2ea-abc0-4bf4-9e06-075e83dd3356/1/sJJCWrfWa6txH7qiJ1c3eAeDQVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.255.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:d1:57:bb:01:01:6d:05:08:a5:33:13:ce:45:d6:32:87:ae:
33:ca:49:54:ab:30:23:0a:e9:85:a2:bf:a7:18:2b:c0:df:e4:
01:b5:36:08:67:56:a9:bf:ee:12:d4:50:f2:17:ce:fc:2d:65:
be:ef:b4:6a:6f:dd:40:b6:ab:3b:1c:91:56:7d:9b:e7:48:c5:
71:0e:fd:4c:ce:54:ea:a7:10:2b:a3:f4:c9:75:56:d3:f1:b1:
ba:3a:bf:5f:8e:b3:05:ce:5a:13:07:29:48:1d:56:35:7e:fb:
ab:e3:00:ec:25:13:5a:73:93:1e:20:6b:0e:73:e6:37:80:d3:
d3:79:40:21:08:87:41:35:8e:a1:6f:29:78:69:36:45:c9:d3:
fe:fd:6f:01:31:cd:92:d1:49:db:c9:c1:c4:05:32:bb:d6:3a:
a9:84:97:8b:9d:c4:b1:c3:27:bc:f7:9d:36:36:21:cb:79:80:
8a:3e:50:3e:92:88:8e:69:46:a9:ec:2a:58:08:d1:f1:00:7c:
1d:fe:ba:d5:f9:63:e6:f3:49:15:d5:48:61:6a:3c:40:e5:59:
f6:b8:65:41:5c:36:1f:20:c7:6d:30:46:a8:41:f1:84:f1:86:
b4:83:71:af:c7:a2:00:9b:ce:64:e4:ca:10:a8:e3:9b:3d:fd:
b5:08:b5:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:56:57 2024 by rpki-client on console-fra.rpki-client.org