Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/koin8C5vzu1uxZltmU94M03j2gc.roa
File: koin8C5vzu1uxZltmU94M03j2gc.roa (raw, json)
Hash identifier: JVxgKPVxb8a1q4XmN7Xlz8jHXB210ZQ1oVnjiNsdnl8=
Subject key identifier: 92:88:A7:F0:2E:6F:CE:ED:6E:C5:99:6D:99:4F:78:33:4D:E3:DA:07
Certificate issuer: /CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Certificate serial: 018572BA3CCF7CDABCFE1E13C971EB342B9B
Authority key identifier: 5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/koin8C5vzu1uxZltmU94M03j2gc.roa
Signing time: Mon 02 Jan 2023 13:44:45 +0000
ROA not before: Mon 02 Jan 2023 13:44:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3323
IP address blocks: 194.177.196.0/24 maxlen: 24
2001:648:2000::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:ba:3c:cf:7c:da:bc:fe:1e:13:c9:71:eb:34:2b:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Validity
Not Before: Jan 2 13:44:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9288a7f02e6fceed6ec5996d994f78334de3da07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d3:d8:8a:bd:ee:fd:86:a0:40:c6:cd:ed:02:
e7:bc:2b:b3:b8:f1:5d:31:36:2a:9e:16:7b:af:c5:
92:92:7e:3f:e4:be:b2:de:ca:15:05:2c:58:c4:1a:
e3:6d:c9:16:41:f2:cf:dd:41:5e:e5:e7:03:b0:e6:
51:05:8b:58:4d:73:15:52:c4:8f:eb:46:dc:46:4b:
a4:b7:d3:72:d0:04:f5:2a:32:f9:33:4b:ee:6e:24:
98:8f:de:a5:af:b4:70:d6:c6:6b:7e:87:8e:49:43:
6f:a1:60:b7:c5:e0:03:ff:54:fa:e3:6a:65:a0:27:
90:74:b2:34:20:07:0c:30:61:fe:9a:72:69:01:00:
43:38:b4:d4:83:c1:09:29:33:e2:c6:34:07:39:f1:
f3:d5:a8:a7:30:90:81:8b:86:bb:6b:d6:f5:34:5c:
ab:8d:f5:bd:5c:77:14:86:a1:28:03:15:dc:cc:e3:
39:89:70:fe:8b:45:52:d3:e4:08:45:8a:f8:d8:d5:
4f:2c:0c:9b:d7:8c:bc:af:4f:c4:70:0d:fb:89:9e:
c5:2f:bf:7c:3e:ab:c2:af:a0:11:dc:77:24:b8:ae:
0d:66:a2:69:d8:84:48:2b:02:cf:a9:9d:15:89:49:
19:4e:12:89:3d:78:34:09:9b:ab:74:ad:48:2b:43:
d2:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:88:A7:F0:2E:6F:CE:ED:6E:C5:99:6D:99:4F:78:33:4D:E3:DA:07
X509v3 Authority Key Identifier:
keyid:5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/koin8C5vzu1uxZltmU94M03j2gc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.177.196.0/24
IPv6:
2001:648:2000::/48
Signature Algorithm: sha256WithRSAEncryption
05:50:d7:a8:61:72:dd:10:1a:c7:df:e9:d1:3c:fa:d1:44:4a:
54:0b:a0:f6:0c:1c:01:f1:10:4f:b7:53:75:23:b8:08:2b:ca:
e3:ab:d7:62:f2:54:e8:00:1c:97:ef:aa:ee:87:0f:fe:b8:90:
f5:1c:15:db:c1:62:c1:59:1d:0c:48:55:59:1c:60:2c:0a:7e:
90:28:de:30:91:72:14:49:e3:be:c5:87:73:2f:f9:93:75:92:
94:6d:b6:0e:8e:77:57:5f:09:57:90:4f:57:88:e1:56:a0:59:
a7:3a:2a:fe:2a:2b:8b:8f:05:a6:ca:16:6f:77:12:22:66:24:
34:f4:53:d0:af:11:d9:85:d0:4c:6c:ba:1d:6a:d4:e2:12:c1:
0d:73:6f:b0:51:66:a1:92:7a:b9:4c:bb:36:a3:e3:ec:3b:69:
bd:86:25:e4:61:32:07:48:f9:3e:4f:27:60:d1:17:f4:e4:92:
82:4c:6b:00:1d:9e:df:20:ac:b4:8b:d2:1e:be:bf:07:a5:90:
65:83:e1:6b:68:3a:6c:ec:a0:81:a1:dd:52:91:0b:e7:b1:f4:
cc:75:6e:a7:80:7d:af:d3:05:74:32:71:78:ae:57:4a:9e:da:
39:c2:11:32:90:a6:8a:89:4f:0c:ed:6d:c1:75:7b:81:68:45:
a7:68:c0:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:49 2024 by rpki-client on console-ams.rpki-client.org