Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/KRvGWv8xk9Fc3cXP2o12CwyR4Tc.roa
File: KRvGWv8xk9Fc3cXP2o12CwyR4Tc.roa (raw, json)
Hash identifier: CCgm8S2Dd6XvOwEb51yYOkfFKrbxW6rrNWtabjLt6Oc=
Subject key identifier: 29:1B:C6:5A:FF:31:93:D1:5C:DD:C5:CF:DA:8D:76:0B:0C:91:E1:37
Certificate issuer: /CN=2719412918a6627f99cce55c7aca139057b8574e
Certificate serial: 018B005CCF77F1385AE18F060A2291452C5F
Authority key identifier: 27:19:41:29:18:A6:62:7F:99:CC:E5:5C:7A:CA:13:90:57:B8:57:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/KRvGWv8xk9Fc3cXP2o12CwyR4Tc.roa
Signing time: Thu 05 Oct 2023 15:02:44 +0000
ROA not before: Thu 05 Oct 2023 15:02:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 194.50.0.0/24 maxlen: 24
45.149.62.0/24 maxlen: 24
45.149.62.0/23 maxlen: 23
45.149.63.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:00:5c:cf:77:f1:38:5a:e1:8f:06:0a:22:91:45:2c:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2719412918a6627f99cce55c7aca139057b8574e
Validity
Not Before: Oct 5 15:02:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=291bc65aff3193d15cddc5cfda8d760b0c91e137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:4b:b5:be:30:b2:69:54:ed:33:d7:a9:b4:53:
b9:70:c2:b0:e3:d3:91:3e:90:4b:5d:b6:98:ea:74:
3a:c7:4c:43:a0:85:ea:27:e5:22:fb:c1:cc:b3:83:
73:c2:ae:73:0a:25:0b:c5:6d:a8:f4:4b:24:c7:e9:
96:4a:38:4d:d9:53:76:7a:db:9e:18:f6:9c:f8:9f:
9a:60:e3:a3:45:6e:c1:5d:66:16:d9:23:b7:8f:14:
88:79:0c:28:e5:c3:0c:6e:9f:55:68:fd:ec:a5:12:
52:77:1f:03:83:c8:2c:89:e0:c2:e7:b6:a4:c2:8c:
ec:ea:68:96:36:ad:d9:b4:52:81:14:6e:b0:05:0d:
a5:49:c8:42:d7:8d:83:e3:bc:ea:22:af:65:7e:d4:
2b:5c:63:c7:77:28:18:6a:41:05:b2:64:ed:b6:04:
a2:c1:26:87:c5:30:f8:4b:0f:5e:5f:62:ac:a8:7b:
94:47:37:92:1e:0d:e2:4d:8a:06:b3:ac:50:75:d4:
52:4f:47:8a:77:66:55:3a:0e:f9:9d:b0:7c:22:21:
a0:df:ff:eb:dd:49:a2:ac:aa:b8:78:62:cb:33:f0:
fe:c3:ad:96:43:4e:31:91:7a:77:70:af:e4:8e:29:
cf:53:54:00:a9:88:32:9a:df:ce:23:21:f7:b3:64:
5a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:1B:C6:5A:FF:31:93:D1:5C:DD:C5:CF:DA:8D:76:0B:0C:91:E1:37
X509v3 Authority Key Identifier:
keyid:27:19:41:29:18:A6:62:7F:99:CC:E5:5C:7A:CA:13:90:57:B8:57:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/KRvGWv8xk9Fc3cXP2o12CwyR4Tc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JxlBKRimYn-ZzOVcesoTkFe4V04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.62.0/23
194.50.0.0/24
Signature Algorithm: sha256WithRSAEncryption
92:1f:b6:43:75:a1:b4:8a:c2:6f:09:9c:1b:82:85:d3:57:53:
5c:fe:04:2f:cd:5b:6a:f9:ed:2c:ab:96:fc:df:25:d8:93:c1:
86:82:1e:06:ca:4c:d6:5f:0a:a1:a4:94:18:4e:f4:8f:db:79:
b5:64:32:a4:0c:b7:4a:84:b0:3b:78:cc:af:fd:85:22:cf:4d:
18:39:c7:da:8f:d5:ad:5d:84:31:c4:48:61:24:9f:a5:14:65:
76:2d:ff:b0:de:81:a1:56:49:f7:04:14:a7:ce:a1:52:4c:93:
b8:02:ca:0e:94:38:50:b1:c8:e1:ff:a4:ad:83:b0:49:10:4d:
f2:37:32:32:ff:0f:96:e8:1b:23:2e:91:ca:ec:ce:df:4b:9f:
69:4f:bf:f9:0d:83:c0:1a:a3:b7:ae:00:ee:ad:2f:2b:94:1f:
72:40:14:22:fa:12:68:51:3a:e7:43:0a:e5:65:0e:7d:ae:62:
89:fc:7e:0a:98:3a:19:d4:de:a9:1e:93:6e:b5:cb:41:bf:00:
d4:5c:ae:cd:ec:f0:4e:0c:29:f7:e7:50:68:8a:bb:3d:ca:57:
d1:20:1c:34:0e:cb:a2:2b:01:3b:c4:4e:13:74:82:8d:f5:8d:
16:2e:d6:12:d6:19:98:8f:c6:cb:0a:77:eb:b3:94:ad:dd:a3:
02:f1:94:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 10 17:07:19 2023 by rpki-client on console-ams.rpki-client.org