Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/KGeWHHaIzsr_gRTUHp6k3ZTIdZI.roa
File: KGeWHHaIzsr_gRTUHp6k3ZTIdZI.roa (raw, json)
Hash identifier: cLTYdf+uYUhVAo5+s45NSHuntxOAmM2wXHbglNXAbHo=
Subject key identifier: 28:67:96:1C:76:88:CE:CA:FF:81:14:D4:1E:9E:A4:DD:94:C8:75:92
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0185710C2778482D3037456028E3472250B2
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/KGeWHHaIzsr_gRTUHp6k3ZTIdZI.roa
Signing time: Mon 02 Jan 2023 05:55:00 +0000
ROA not before: Mon 02 Jan 2023 05:55:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60781
IP address blocks: 85.209.3.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 22 Feb 2023 08:54:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:0c:27:78:48:2d:30:37:45:60:28:e3:47:22:50:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 2 05:55:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2867961c7688cecaff8114d41e9ea4dd94c87592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:54:bc:94:fb:ae:d7:31:8e:45:4f:a1:84:5e:
a1:97:dc:8b:c5:07:4e:96:91:95:6a:e1:c7:ff:c0:
61:cf:3a:af:ca:48:68:31:f8:26:73:93:10:41:c6:
b4:4b:aa:56:2f:0b:7b:ed:e7:07:b9:1c:9d:b0:47:
33:db:43:3e:89:40:8d:1b:0b:e4:2d:db:6f:30:06:
28:89:63:93:5e:1e:f2:2c:07:0d:31:38:ec:63:98:
9c:80:f6:fc:29:8b:dc:1d:ce:0f:80:a5:38:68:89:
56:35:10:e4:2b:7a:7c:e9:7f:87:62:cf:d0:78:25:
d6:63:55:12:73:4c:d5:2a:af:9b:da:85:59:0f:16:
c5:b2:58:65:3d:66:cf:1a:e5:33:cb:51:3a:68:52:
08:8b:36:3b:25:da:a5:bf:9a:6e:2a:b8:4e:16:bf:
74:51:af:24:b6:8e:d1:01:b5:c7:c2:07:f5:29:c1:
2b:e4:c1:a4:c7:98:2e:ca:69:eb:67:3e:85:7a:2b:
88:e1:df:66:93:50:37:ad:54:fc:e4:63:da:dd:ff:
5d:80:02:a8:09:a8:b7:69:71:8e:3c:9f:21:db:81:
52:8e:a0:e9:7a:7b:52:61:bf:2c:26:fa:8a:19:97:
22:b1:e7:18:b7:4d:ff:2d:3f:87:c2:35:e5:3a:99:
c6:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:67:96:1C:76:88:CE:CA:FF:81:14:D4:1E:9E:A4:DD:94:C8:75:92
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/KGeWHHaIzsr_gRTUHp6k3ZTIdZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.3.0/24
Signature Algorithm: sha256WithRSAEncryption
61:36:97:ee:8e:6d:db:d6:aa:f7:83:96:87:71:7d:95:95:8d:
9e:f8:2e:e2:75:1c:05:c4:f3:8b:ff:d2:8d:c7:69:f1:ca:98:
bb:db:17:a8:b1:ea:ed:24:16:06:78:16:fa:04:dd:f8:f8:7e:
32:6d:01:86:93:04:c3:43:cb:8e:d4:fa:44:8c:af:17:10:f9:
d4:c9:1a:56:d4:ec:7b:c3:d9:e7:0e:e1:24:f1:de:7a:11:6d:
b0:35:bd:70:73:33:bf:98:99:d6:88:e9:9f:1d:6d:5f:b7:a1:
76:d7:81:2e:fc:57:e6:be:ea:7d:7c:4d:3e:9d:3c:85:67:08:
64:92:df:6c:b8:e1:6b:38:fd:3a:55:e1:f0:1b:27:68:f8:0c:
a3:66:98:fd:67:bf:07:a4:82:39:99:65:05:3a:4a:5b:52:40:
70:f7:e3:65:1b:3e:e6:fb:87:e7:c0:ef:46:b0:bb:e9:22:cd:
7e:cd:61:13:a7:b3:49:0e:cd:52:e0:e4:4a:27:45:de:be:e0:
7b:e0:de:60:ba:2a:f8:d3:52:b4:10:41:5e:67:7a:e8:74:a3:
1d:85:db:71:cd:98:e0:78:3d:ed:86:03:b5:50:77:47:6a:b4:
1d:5b:29:a8:5c:3f:1e:98:f0:79:1f:b4:61:1d:b3:e0:da:8d:
86:6b:8e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:10 2024 by rpki-client on console-ams.rpki-client.org