Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/KIO3I8UhNY2au1_K4nuqjkEXR2w.roa
File: KIO3I8UhNY2au1_K4nuqjkEXR2w.roa (raw, json)
Hash identifier: c0WlFOfNqSHUzhZXDQx0jX4g4ou+541Sh3vnhzlsyS8=
Subject key identifier: 28:83:B7:23:C5:21:35:8D:9A:BB:5F:CA:E2:7B:AA:8E:41:17:47:6C
Certificate issuer: /CN=f382cb13dde12658cdac18cacae91fbbf5c58090
Certificate serial: 018572BA866F0085433F9C84054EA0628A2B
Authority key identifier: F3:82:CB:13:DD:E1:26:58:CD:AC:18:CA:CA:E9:1F:BB:F5:C5:80:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/84LLE93hJljNrBjKyukfu_XFgJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/KIO3I8UhNY2au1_K4nuqjkEXR2w.roa
Signing time: Mon 02 Jan 2023 13:45:04 +0000
ROA not before: Mon 02 Jan 2023 13:45:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207190
IP address blocks: 193.218.38.0/24 maxlen: 24
193.218.39.0/24 maxlen: 24
193.218.38.0/23 maxlen: 23
45.141.71.0/24 maxlen: 24
45.141.68.0/24 maxlen: 24
45.141.68.0/22 maxlen: 22
45.141.70.0/24 maxlen: 24
45.141.69.0/24 maxlen: 24
178.236.43.0/24 maxlen: 24
178.236.42.0/24 maxlen: 24
178.236.42.0/23 maxlen: 23
178.236.44.0/24 maxlen: 24
178.236.44.0/22 maxlen: 22
178.236.40.0/21 maxlen: 21
178.236.41.0/24 maxlen: 24
178.236.40.0/24 maxlen: 24
178.236.40.0/23 maxlen: 23
178.236.46.0/24 maxlen: 24
178.236.45.0/24 maxlen: 24
178.236.47.0/24 maxlen: 24
193.203.215.0/24 maxlen: 24
193.203.214.0/23 maxlen: 23
193.203.214.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:ba:86:6f:00:85:43:3f:9c:84:05:4e:a0:62:8a:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f382cb13dde12658cdac18cacae91fbbf5c58090
Validity
Not Before: Jan 2 13:45:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2883b723c521358d9abb5fcae27baa8e4117476c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b1:14:07:a3:a4:fe:fa:fd:fd:36:23:ca:7a:
67:be:a4:61:b9:ae:97:05:e7:35:4e:8f:77:20:c1:
14:5a:22:b7:e6:b6:27:7e:f4:65:68:2c:4a:1b:52:
3c:38:18:43:22:59:22:6e:9c:cb:b6:a3:bb:c9:4b:
88:a3:bc:40:6b:08:ef:49:aa:a1:31:17:3b:4a:6b:
0d:d8:ce:49:68:43:18:bc:a1:3f:3b:38:a0:f5:24:
43:c0:7f:e7:f9:c7:8b:d7:1f:34:48:1c:47:dd:54:
07:66:fd:90:cb:fa:eb:ce:89:56:ec:9e:86:a1:61:
da:4f:d0:99:8b:49:c1:11:76:53:3c:e3:e1:34:d4:
f9:53:21:78:6e:84:6c:e9:d4:85:af:e6:83:71:62:
81:5e:4e:4c:fd:d9:d7:f4:9b:91:75:9c:d3:bd:e1:
54:a5:67:83:94:a5:f7:19:fd:6b:67:f9:06:a3:04:
b8:87:fe:bb:cc:ca:0c:a3:6e:89:51:65:17:85:bc:
7b:5a:56:67:b1:31:12:5b:76:c5:26:85:45:8a:af:
c7:09:b7:15:0a:03:27:e2:d5:bf:0e:38:dd:b4:e8:
76:47:9a:6d:27:ab:8c:cf:80:79:68:b7:b6:1d:95:
e3:41:62:74:2e:cf:72:f3:cd:5b:b2:41:54:a8:fc:
1a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:83:B7:23:C5:21:35:8D:9A:BB:5F:CA:E2:7B:AA:8E:41:17:47:6C
X509v3 Authority Key Identifier:
keyid:F3:82:CB:13:DD:E1:26:58:CD:AC:18:CA:CA:E9:1F:BB:F5:C5:80:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/84LLE93hJljNrBjKyukfu_XFgJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/KIO3I8UhNY2au1_K4nuqjkEXR2w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.68.0/22
178.236.40.0/21
193.203.214.0/23
193.218.38.0/23
Signature Algorithm: sha256WithRSAEncryption
32:3b:43:25:7c:7d:0c:75:04:fa:18:82:f6:46:aa:e8:8b:76:
2c:3c:fb:c5:38:1c:97:9a:94:b1:f4:43:24:ff:f3:27:ea:6f:
7f:5b:02:14:3b:40:6c:3f:de:56:8b:23:02:fd:02:18:e7:dd:
1d:ae:3b:81:a7:3a:b7:a7:c3:aa:08:69:95:28:e9:1a:aa:05:
10:ca:2d:b1:32:31:df:21:44:bc:22:9d:b5:94:67:60:47:c5:
2a:73:8a:dd:9d:d6:44:7d:db:84:86:0f:5e:ca:26:0e:f6:34:
66:63:6e:9b:25:24:3a:af:6c:ef:3f:94:97:d5:a6:4e:21:32:
95:34:5f:f0:dc:c6:8e:e1:00:06:71:7a:95:a8:25:9d:85:a1:
79:12:c8:c3:8c:5d:50:5e:46:1b:6f:16:7d:71:39:d3:e1:cf:
b3:b4:22:b3:5a:3a:89:69:4c:52:b5:73:e0:15:b8:8a:8e:94:
d8:83:3b:27:70:9f:5b:24:45:9e:f5:ac:53:63:a5:69:a7:30:
c2:86:d9:72:7c:a0:a9:54:8a:4c:47:cd:9e:49:d8:4e:71:75:
15:a2:35:8c:18:38:9d:03:81:11:fe:b6:4e:ca:24:ff:4c:93:
74:b5:71:be:b4:09:1b:c8:9f:44:6f:02:01:93:78:a5:9c:9a:
81:18:ff:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:52:32 2024 by rpki-client on console-fra.rpki-client.org