Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/KYVl1x_AHuLkn79cRA7Kbg4pViI.roa
File: KYVl1x_AHuLkn79cRA7Kbg4pViI.roa (raw, json)
Hash identifier: gsh4eL9gP0r781+dwDfSq2+Pavn313PkvPtGqqOq2CI=
Subject key identifier: 29:85:65:D7:1F:C0:1E:E2:E4:9F:BF:5C:44:0E:CA:6E:0E:29:56:22
Certificate issuer: /CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Certificate serial: 01892547D2037181CB0C2D32FD2872D36058
Authority key identifier: F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/KYVl1x_AHuLkn79cRA7Kbg4pViI.roa
Signing time: Wed 05 Jul 2023 09:00:11 +0000
ROA not before: Wed 05 Jul 2023 09:00:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 46.175.130.0/24 maxlen: 24
141.98.139.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:25:47:d2:03:71:81:cb:0c:2d:32:fd:28:72:d3:60:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Validity
Not Before: Jul 5 09:00:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=298565d71fc01ee2e49fbf5c440eca6e0e295622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:a1:bc:b0:ad:1e:c9:74:b1:ce:2b:59:6c:f6:
02:64:d5:33:71:e6:12:9d:b0:83:73:49:92:6e:46:
69:a8:74:f6:5f:7d:b8:38:0b:67:43:49:47:0f:3b:
db:b6:cd:64:89:68:63:ed:4e:db:04:9e:d1:a1:52:
7b:a1:a8:24:1c:67:fc:90:d0:fa:25:2d:c9:d8:87:
4f:2a:be:98:5a:c4:04:3a:53:76:45:f2:e1:eb:21:
5f:e5:0d:89:4a:3c:92:b2:10:fe:d1:3a:b8:55:ef:
79:c1:c9:b0:ec:8b:b3:dc:6c:fa:7a:66:48:36:fd:
a1:a3:dc:4f:ed:70:a0:e1:cd:8c:cb:e7:c3:67:2a:
49:61:a0:c8:07:9f:0c:c2:95:bb:f8:c7:81:80:7e:
b4:ac:bf:45:cc:49:43:c9:81:98:27:d7:70:9e:2f:
67:77:1d:24:eb:8c:6e:7c:9d:0f:0c:9c:91:cf:03:
ba:22:34:30:de:f8:4e:6b:59:1d:07:88:f2:ed:5c:
7b:88:29:62:77:dc:7d:fc:b4:f9:cd:6b:6b:21:3e:
31:2e:5f:52:dd:d0:65:1a:f5:44:1d:8e:db:b9:7c:
35:f3:53:a7:e7:ca:e4:85:1b:f4:e1:d6:1e:ce:8a:
02:34:7d:ab:1f:5a:cd:39:bc:8c:10:97:05:de:ed:
84:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:85:65:D7:1F:C0:1E:E2:E4:9F:BF:5C:44:0E:CA:6E:0E:29:56:22
X509v3 Authority Key Identifier:
keyid:F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/KYVl1x_AHuLkn79cRA7Kbg4pViI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.175.130.0/24
141.98.139.0/24
Signature Algorithm: sha256WithRSAEncryption
98:69:a5:94:50:77:32:e9:a8:ce:f9:99:46:62:b5:bf:b2:97:
3a:1e:4f:8e:77:33:36:15:e9:0a:de:ff:d1:f0:9b:48:69:eb:
45:56:05:f5:4e:66:88:73:69:e9:fd:5d:58:c4:2b:3a:c3:12:
ec:f6:dc:cf:b5:f8:06:2c:6f:48:eb:21:09:86:1d:db:6a:dc:
f8:f4:49:45:7c:f8:ec:58:59:90:0c:22:5b:fc:68:c6:11:2a:
2c:20:80:8a:1b:4d:96:da:97:ce:2b:06:a9:ae:f1:10:1a:3a:
f6:1a:99:64:c9:f9:0b:8a:24:bb:7a:2d:d5:ef:29:d5:49:de:
58:b1:45:8d:82:8d:54:84:31:6b:86:6c:ba:6f:dc:cf:32:82:
79:2f:65:6e:43:69:f5:96:47:fd:79:61:52:30:bb:72:22:cd:
b8:4e:c1:b0:59:3d:cf:e3:32:48:bf:b0:89:2a:ec:3b:12:39:
19:40:46:fc:8a:a8:74:85:6a:a5:a0:4b:44:88:84:7d:f0:c7:
e1:d3:90:2d:8c:c9:7f:74:fb:8a:8a:9f:b5:74:00:c2:dc:bf:
8c:79:52:62:9b:b3:41:8a:0b:03:07:b3:fd:ba:b9:cb:3f:c4:
57:62:00:d5:cb:e4:2c:d2:cf:61:66:d0:66:f2:db:d5:f2:2a:
e4:ac:36:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:32 2023 by rpki-client on console-ams.rpki-client.org