Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/kRV4B9pLNCrFIzrKWzMRwhuJRn0.roa
File: kRV4B9pLNCrFIzrKWzMRwhuJRn0.roa (raw, json)
Hash identifier: EbdOYYLhxas2tmaSb+sX2aXjRZHDfv5WOzw76tUBQMI=
Subject key identifier: 91:15:78:07:DA:4B:34:2A:C5:23:3A:CA:5B:33:11:C2:1B:89:46:7D
Certificate issuer: /CN=4fd6646c93c2974789ecef7b444656ee64161729
Certificate serial: 01856D01C74E76ED52F09BC6DE5642A98D65
Authority key identifier: 4F:D6:64:6C:93:C2:97:47:89:EC:EF:7B:44:46:56:EE:64:16:17:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T9ZkbJPCl0eJ7O97REZW7mQWFyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/kRV4B9pLNCrFIzrKWzMRwhuJRn0.roa
Signing time: Sun 01 Jan 2023 11:05:11 +0000
ROA not before: Sun 01 Jan 2023 11:05:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3356
IP address blocks: 193.19.92.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:30:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:01:c7:4e:76:ed:52:f0:9b:c6:de:56:42:a9:8d:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fd6646c93c2974789ecef7b444656ee64161729
Validity
Not Before: Jan 1 11:05:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=91157807da4b342ac5233aca5b3311c21b89467d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:88:6c:68:50:fd:41:8d:4b:6a:c0:40:90:4a:
13:49:e5:5e:21:b4:77:85:47:e9:81:c9:42:99:cd:
b5:a6:98:8e:bf:2a:e2:fb:ee:08:1a:ba:f3:9d:34:
a9:f8:55:40:e2:43:46:f1:06:59:79:97:54:26:b4:
a9:02:59:1f:88:41:70:a0:50:8f:87:8c:67:c1:5a:
28:c7:8e:30:f8:40:f0:21:20:49:58:8e:80:35:76:
b8:7f:75:06:0d:4a:61:26:8d:d9:59:a3:e5:df:68:
1b:68:2e:e0:d0:73:87:27:c7:b3:99:2c:bc:00:f5:
69:f9:0d:cc:d8:ba:1b:a3:89:a1:1b:28:cc:d5:2c:
bd:f5:aa:db:23:d8:9a:b1:43:57:10:0a:21:c2:be:
2e:b7:bb:28:55:e8:d7:e1:56:55:28:4b:eb:9c:6f:
d0:51:e3:0d:76:e2:e8:ce:a2:cc:bf:1f:97:9d:35:
39:84:d4:4b:d3:67:0e:71:15:2e:6a:56:cb:f6:c0:
ee:a7:a9:83:98:df:b3:c7:35:b4:0c:2c:28:5a:c4:
26:90:3c:a2:cd:1f:e1:97:f2:e8:20:87:64:6d:22:
ec:73:d5:e5:17:8f:bf:45:28:0e:40:99:93:11:39:
be:b0:61:b7:60:dc:d0:62:b6:e6:da:86:86:99:9f:
4e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:15:78:07:DA:4B:34:2A:C5:23:3A:CA:5B:33:11:C2:1B:89:46:7D
X509v3 Authority Key Identifier:
keyid:4F:D6:64:6C:93:C2:97:47:89:EC:EF:7B:44:46:56:EE:64:16:17:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T9ZkbJPCl0eJ7O97REZW7mQWFyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/kRV4B9pLNCrFIzrKWzMRwhuJRn0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.19.92.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:3e:cc:c7:98:15:2e:57:d0:7a:13:0b:af:f6:6a:9a:a8:a8:
54:57:8e:46:dd:0a:5e:6c:fa:95:ff:3e:95:9c:a3:d6:34:72:
2f:95:e9:55:00:bc:45:09:b2:53:0f:93:81:b6:36:00:78:6d:
73:d4:17:ad:69:54:d3:5e:d5:73:b0:c4:88:45:79:fa:74:48:
b8:3a:40:52:62:b4:a8:bd:5d:49:3f:67:ee:46:77:f8:e6:c0:
77:fa:4d:ae:ad:1b:08:5b:20:ba:d3:bf:20:5b:53:8b:38:eb:
06:27:21:63:2f:ee:30:b7:0f:99:63:22:21:07:a5:cb:e1:80:
e9:d1:d1:47:44:1e:a5:69:bb:06:e5:ef:78:99:9d:da:27:04:
b6:7c:28:6f:cf:ff:bf:9f:dd:5b:e9:e0:61:2a:bc:b6:9d:d1:
cc:2c:53:e3:81:89:f9:fd:d1:aa:f0:66:64:0a:05:6c:66:c1:
4b:c5:ef:53:54:39:01:9f:32:89:03:cf:1f:7c:d5:7e:a7:0a:
4a:83:a5:1e:95:f4:21:74:3b:2a:b9:08:35:da:bc:56:70:64:
27:7e:34:70:13:9c:2f:25:f3:fb:90:12:ef:2d:0f:53:7b:bc:
93:81:55:8f:7f:3a:44:92:7f:33:4b:28:3a:0c:b7:d4:ef:8e:
9f:c1:9f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:13 2024 by rpki-client on console-fra.rpki-client.org