Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/215de6-4176-42d2-8da2-6b70169cda1b/1/kdKZiYPdVdTwXOFEJQfR3PEVB-g.roa
File: kdKZiYPdVdTwXOFEJQfR3PEVB-g.roa (raw, json)
Hash identifier: wHgHVwK0oV0rPX5gw8Bzb4D2uBz3r9OQre+fhqRAp7U=
Subject key identifier: 91:D2:99:89:83:DD:55:D4:F0:5C:E1:44:25:07:D1:DC:F1:15:07:E8
Certificate issuer: /CN=fc9beb0192d0d346a5e6858aa744b0434fed3189
Certificate serial: 01856D01B5C4F1121C050EFB35AAA9D1B893
Authority key identifier: FC:9B:EB:01:92:D0:D3:46:A5:E6:85:8A:A7:44:B0:43:4F:ED:31:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JvrAZLQ00al5oWKp0SwQ0_tMYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/215de6-4176-42d2-8da2-6b70169cda1b/1/kdKZiYPdVdTwXOFEJQfR3PEVB-g.roa
Signing time: Sun 01 Jan 2023 11:05:06 +0000
ROA not before: Sun 01 Jan 2023 11:05:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 559
IP address blocks: 194.11.135.0/24 maxlen: 24
194.11.134.0/24 maxlen: 24
194.11.133.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:30:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:01:b5:c4:f1:12:1c:05:0e:fb:35:aa:a9:d1:b8:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc9beb0192d0d346a5e6858aa744b0434fed3189
Validity
Not Before: Jan 1 11:05:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=91d2998983dd55d4f05ce1442507d1dcf11507e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:15:15:87:77:1f:d8:4c:5f:64:e3:a5:5e:c6:
84:69:c2:fd:e2:9d:66:0b:3d:ec:8d:59:dd:8e:01:
1f:94:53:8c:21:aa:19:bd:21:31:e3:5c:11:65:61:
b6:0e:93:fe:09:96:c4:c5:4e:e8:d5:32:fe:be:73:
15:26:b1:2c:2e:6f:6d:d4:4d:5b:ff:7b:18:31:b8:
8d:12:0b:f1:7f:8d:fd:71:81:32:29:0b:7c:2f:2f:
77:f2:e2:01:99:3a:07:30:4e:8f:72:bd:ee:d2:0e:
9a:f6:ac:54:a5:eb:9c:d4:f5:1a:96:c3:e4:e8:c6:
76:14:95:65:b7:dc:f9:1d:6e:a7:ad:ce:8a:bc:d2:
34:97:de:65:02:17:43:77:3d:b8:0d:e0:d0:90:52:
d6:58:c5:35:30:0b:be:96:55:dd:3b:de:5c:7e:c7:
02:93:cb:93:4c:d8:60:76:ce:2a:56:18:68:9a:b4:
4a:8a:05:f6:c4:f8:96:57:fe:2b:38:7b:ef:c8:e5:
37:7b:2c:47:7a:ee:2a:2e:85:07:35:13:23:da:61:
65:3a:78:9c:23:1a:4a:a7:a4:74:25:33:7d:33:bd:
e8:32:6a:74:3a:22:06:f4:d1:16:2b:8f:68:fe:07:
d6:9e:04:9f:38:b5:8c:be:11:81:65:aa:ab:3b:b2:
3a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:D2:99:89:83:DD:55:D4:F0:5C:E1:44:25:07:D1:DC:F1:15:07:E8
X509v3 Authority Key Identifier:
keyid:FC:9B:EB:01:92:D0:D3:46:A5:E6:85:8A:A7:44:B0:43:4F:ED:31:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JvrAZLQ00al5oWKp0SwQ0_tMYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/215de6-4176-42d2-8da2-6b70169cda1b/1/kdKZiYPdVdTwXOFEJQfR3PEVB-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/215de6-4176-42d2-8da2-6b70169cda1b/1/_JvrAZLQ00al5oWKp0SwQ0_tMYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.11.133.0-194.11.135.255
Signature Algorithm: sha256WithRSAEncryption
56:88:44:30:4f:c2:58:6a:5e:c6:96:46:7e:fc:36:3c:ed:2f:
f0:d1:aa:64:1e:96:ac:4b:f7:04:e7:d7:7b:b6:2f:1c:b0:9c:
17:c1:c0:ef:cd:01:c0:54:f8:c8:3f:35:45:96:fb:b1:fa:dc:
99:99:c2:34:35:78:5f:13:0b:cc:4c:6f:10:fd:9d:71:c4:6a:
35:67:5f:fa:05:b7:e0:b2:91:16:e9:a0:8c:fa:2e:fd:02:e5:
9c:e8:c3:68:62:1a:b6:9b:01:a1:c7:10:c2:7a:ef:37:14:ce:
95:07:9e:61:a0:e8:93:4b:24:a4:08:b3:ca:7a:c8:4d:b9:e0:
22:90:48:59:31:24:50:93:ce:51:52:26:9a:8e:59:6f:d5:98:
7b:89:cb:de:47:45:a2:bd:2e:46:25:c6:8c:33:83:dd:85:f1:
46:6f:9e:0e:1e:ab:80:48:f4:1d:c2:ea:62:94:d5:78:cf:08:
0e:14:bc:c6:d7:80:54:e8:f9:c2:d7:5c:d0:cd:e1:16:46:de:
f7:a3:e3:fa:2d:81:01:ae:f9:ee:63:d9:07:f6:25:0b:95:0d:
ab:ec:3b:b0:b2:ea:9e:8e:4c:d3:b2:a8:82:73:04:86:b3:42:
89:d3:49:50:f8:78:52:5a:9d:7d:aa:94:54:bb:02:2e:09:a5:
94:1b:41:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:40 2024 by rpki-client on console-fra.rpki-client.org