Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/rkQ6go8AdbCQYEesJ5K7JNOILL4.roa
File: rkQ6go8AdbCQYEesJ5K7JNOILL4.roa (raw, json)
Hash identifier: Ntg53KE1V7s4tqVqDbeLFFLjOnfFHIvlMO2dN+Sk8lA=
Subject key identifier: AE:44:3A:82:8F:00:75:B0:90:60:47:AC:27:92:BB:24:D3:88:2C:BE
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018697C2A2472C0B25264473876F3C948157
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/rkQ6go8AdbCQYEesJ5K7JNOILL4.roa
Signing time: Tue 28 Feb 2023 11:22:40 +0000
ROA not before: Tue 28 Feb 2023 11:22:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 193.19.108.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:97:c2:a2:47:2c:0b:25:26:44:73:87:6f:3c:94:81:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Feb 28 11:22:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ae443a828f0075b0906047ac2792bb24d3882cbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:fd:51:82:bd:bf:fa:89:92:b4:e0:c4:37:15:
bf:fb:b3:67:0f:35:c2:f7:de:7e:c8:db:cb:71:b0:
11:90:8b:08:35:e4:10:8a:3e:49:15:bf:eb:2b:dc:
ce:6e:43:81:8f:ac:97:4f:72:f2:52:f9:d3:dc:a3:
a9:71:14:48:f5:51:60:73:f7:78:cb:e7:4d:12:ac:
91:85:2b:89:65:36:9a:5c:2a:79:4a:db:8b:f0:88:
4e:e4:87:dc:8e:ea:ae:f5:70:ff:d1:20:99:73:a3:
fc:82:b3:d5:1b:1a:30:13:49:fc:ae:37:04:66:c3:
a5:65:d1:09:36:e9:ba:b7:91:1e:7b:8d:9a:8e:9c:
40:b2:ea:0c:47:73:f7:f1:c5:3b:ac:76:63:6d:39:
a4:fd:2f:71:63:8c:90:a4:4f:e8:43:0a:d0:44:81:
90:52:aa:4c:d8:2e:86:3e:a5:8c:98:7b:4f:47:d1:
78:b4:54:f0:9c:6b:7e:74:cb:24:be:b7:c1:d4:0f:
9f:2c:ad:41:4b:1f:50:38:99:a3:bb:3d:ea:2f:05:
15:91:82:b6:2e:4e:50:a6:4b:74:e9:b2:60:f1:fd:
0c:04:7f:f3:c1:41:6c:cb:63:84:69:7a:05:d6:3b:
51:e4:e8:54:77:2a:56:2d:19:62:67:99:68:7e:91:
4e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:44:3A:82:8F:00:75:B0:90:60:47:AC:27:92:BB:24:D3:88:2C:BE
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/rkQ6go8AdbCQYEesJ5K7JNOILL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.19.108.0/24
Signature Algorithm: sha256WithRSAEncryption
04:8e:15:de:60:55:16:bc:42:97:00:18:f9:2f:5d:c4:a6:94:
6f:22:10:fe:d9:9e:80:8b:2c:9b:76:b1:7b:dd:66:8f:80:a0:
a0:9e:43:35:6e:85:7f:53:09:a9:4e:03:ef:fe:8e:d8:41:88:
e9:0c:e0:a9:d3:27:f1:fd:0f:c7:58:2b:25:d3:bc:cb:82:df:
d0:f8:f9:dc:fd:59:2f:8c:86:45:dc:1a:bf:8e:79:b0:91:0c:
55:ff:4c:90:40:97:fd:33:b1:1e:11:9e:3c:dd:ac:8d:a4:a7:
d7:71:d3:de:d8:04:49:43:82:96:82:b9:3b:05:fc:c5:92:5a:
b5:ef:3e:b8:56:fa:ab:06:96:59:55:23:ad:4b:92:5a:71:ae:
ca:36:9c:12:01:cb:e7:5c:87:5a:d7:6a:b2:bb:95:2f:b7:1f:
f3:85:4d:bc:8f:b0:d9:41:3b:5f:57:ab:c0:ac:50:6f:11:41:
43:68:fa:a9:c3:65:4e:5f:81:c0:c8:c1:7a:eb:36:9b:64:a9:
10:16:60:63:d4:dc:ec:70:44:94:dd:00:18:11:8d:bd:62:8f:
2a:f3:d2:cc:fd:fc:c0:d3:fa:43:c7:65:fc:71:b8:ba:68:73:
ab:b8:c5:3c:ca:e8:04:a4:8f:5b:c5:44:e2:ec:fe:24:99:c0:
67:9f:6a:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:56 2023 by rpki-client on console-ams.rpki-client.org