Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/KKgc-cq3FkpZ5riVh2VjifDEuDA.roa
File: KKgc-cq3FkpZ5riVh2VjifDEuDA.roa (raw, json)
Hash identifier: L4hVIi5dLHT5F5K+7gCi+tBVlnEhmPN/eXOxq8zEvKg=
Subject key identifier: 28:A8:1C:F9:CA:B7:16:4A:59:E6:B8:95:87:65:63:89:F0:C4:B8:30
Certificate issuer: /CN=0febfbfd6f937c5ae39e3e38e8ab8384107421a6
Certificate serial: 018572835AEF603249C8E463DA2D10F560BC
Authority key identifier: 0F:EB:FB:FD:6F:93:7C:5A:E3:9E:3E:38:E8:AB:83:84:10:74:21:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-v7_W-TfFrjnj446KuDhBB0IaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/KKgc-cq3FkpZ5riVh2VjifDEuDA.roa
Signing time: Mon 02 Jan 2023 12:44:49 +0000
ROA not before: Mon 02 Jan 2023 12:44:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200590
IP address blocks: 91.192.82.0/24 maxlen: 24
213.183.34.0/24 maxlen: 24
213.183.35.0/24 maxlen: 24
5.188.175.0/24 maxlen: 24
5.188.174.0/24 maxlen: 24
93.189.59.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:83:5a:ef:60:32:49:c8:e4:63:da:2d:10:f5:60:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0febfbfd6f937c5ae39e3e38e8ab8384107421a6
Validity
Not Before: Jan 2 12:44:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=28a81cf9cab7164a59e6b89587656389f0c4b830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:22:ea:73:e5:21:2d:ac:15:82:f8:ca:6d:a4:
6e:e5:a7:90:c3:54:10:1c:1a:7d:19:1f:01:90:fe:
60:b3:5d:c4:a3:64:1e:42:e5:02:6e:ff:a0:d1:6d:
bb:f6:02:f7:7b:2d:ca:a2:2d:86:b4:76:bd:57:fd:
98:b9:22:20:a3:fc:01:1d:25:1c:1f:79:6d:49:50:
de:49:82:2c:2a:c2:ac:f6:e1:30:5c:55:44:05:7a:
78:fa:2d:bf:6c:f1:8a:ca:ce:09:9c:06:40:d9:7d:
c9:cf:32:32:1e:c3:89:48:af:30:bb:49:7e:66:15:
48:d9:86:55:1d:be:39:87:e6:a7:af:f5:35:d6:e8:
10:98:85:ec:4a:af:0c:80:3f:15:18:b8:dc:ab:00:
77:f3:13:43:0c:0d:ca:97:59:8d:26:31:ce:65:ac:
6b:f4:a4:80:30:1b:28:b0:fa:08:47:1a:36:3f:c7:
1b:25:f7:ea:3e:fc:d2:32:2b:fa:3f:20:ee:e8:df:
55:ce:46:9a:ce:83:b4:4e:77:e1:dc:8f:e7:bd:7a:
25:4a:07:9e:04:9d:6b:64:87:3e:a2:c6:62:71:26:
82:39:f6:83:7f:f1:b6:d1:93:da:50:ab:c3:64:fe:
78:b0:89:8e:c6:69:45:5b:79:8e:ed:d9:3b:8e:0b:
40:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:A8:1C:F9:CA:B7:16:4A:59:E6:B8:95:87:65:63:89:F0:C4:B8:30
X509v3 Authority Key Identifier:
keyid:0F:EB:FB:FD:6F:93:7C:5A:E3:9E:3E:38:E8:AB:83:84:10:74:21:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-v7_W-TfFrjnj446KuDhBB0IaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/KKgc-cq3FkpZ5riVh2VjifDEuDA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.188.174.0/23
91.192.82.0/24
93.189.59.0/24
213.183.34.0/23
Signature Algorithm: sha256WithRSAEncryption
ab:9d:38:0f:21:72:6c:82:17:e4:f1:25:df:39:0d:b6:4d:5a:
64:ed:ad:79:0d:31:49:ef:4c:5b:c3:59:fb:56:cb:37:96:cc:
88:e7:d6:5f:79:00:4f:09:e4:6e:ae:dd:76:14:35:c2:0f:22:
6a:ed:14:02:45:47:04:84:fd:c3:55:c3:ac:f2:bb:82:cf:01:
25:17:b5:6b:84:5b:ac:a0:f5:28:3f:f8:af:1d:0a:29:57:f5:
7c:ce:41:89:6f:05:f1:9a:d1:ef:0d:96:7b:5f:6c:44:4e:1f:
17:19:3d:4b:ce:b1:7e:d4:4e:80:78:06:5e:9b:b5:24:6a:2d:
8e:19:e0:62:02:ba:cb:0b:c0:0c:8b:d5:31:6c:a9:af:35:8d:
b9:b1:50:24:c8:43:69:dd:ae:c6:88:e2:f6:b9:68:9e:ac:2e:
ad:d3:b2:fa:d2:c8:01:70:f9:a8:42:7b:66:32:ac:51:fa:6b:
39:e2:8b:0d:c0:aa:8e:00:18:dd:9b:47:d8:83:27:ab:f6:66:
14:40:ca:0d:d3:d9:dc:65:b9:ba:3f:d9:a9:67:91:0b:3d:6d:
13:ea:b4:a1:5c:ca:ba:ca:27:6e:a2:14:0e:bf:c0:46:8a:27:
e5:1b:d5:b3:41:2a:d8:73:0b:a3:64:fc:3d:20:e5:fb:82:f8:
37:b9:06:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:35:44 2024 by rpki-client on console-ams.rpki-client.org