Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/afbb62-0098-42b3-81ae-f0bb2e15f6d0/1/KrfwFw81UzAjda4P2rnrVFHkbpc.roa
File: KrfwFw81UzAjda4P2rnrVFHkbpc.roa (raw, json)
Hash identifier: /uJex0zpm/1CiePmi843IuTL/xHyeV4+dDWmGNuo92g=
Subject key identifier: 2A:B7:F0:17:0F:35:53:30:23:75:AE:0F:DA:B9:EB:54:51:E4:6E:97
Certificate issuer: /CN=e57731ea857b903aa40a8e5fd8d88446505b5233
Certificate serial: 01856FF01D724F2D98A3D8BF1159DD771BEF
Authority key identifier: E5:77:31:EA:85:7B:90:3A:A4:0A:8E:5F:D8:D8:84:46:50:5B:52:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Xcx6oV7kDqkCo5f2NiERlBbUjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/afbb62-0098-42b3-81ae-f0bb2e15f6d0/1/KrfwFw81UzAjda4P2rnrVFHkbpc.roa
Signing time: Mon 02 Jan 2023 00:44:45 +0000
ROA not before: Mon 02 Jan 2023 00:44:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7046
IP address blocks: 193.67.192.0/22 maxlen: 22
193.67.192.0/20 maxlen: 20
193.67.206.0/23 maxlen: 24
193.67.201.0/24 maxlen: 24
193.67.200.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f0:1d:72:4f:2d:98:a3:d8:bf:11:59:dd:77:1b:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e57731ea857b903aa40a8e5fd8d88446505b5233
Validity
Not Before: Jan 2 00:44:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2ab7f0170f3553302375ae0fdab9eb5451e46e97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:34:b6:ee:cb:2e:d6:ea:51:8c:a1:11:c9:54:
87:20:11:9d:7a:a9:d7:61:59:74:e5:ba:fb:05:55:
b5:41:53:e8:ce:28:f4:b2:87:4e:01:1d:4a:32:2f:
0a:d7:93:aa:38:73:e2:e9:47:0b:51:4f:f1:2e:03:
9a:87:66:b7:ee:d1:cb:1c:70:ab:40:16:b8:1c:8c:
f3:92:b6:21:83:01:07:28:df:aa:d0:53:fd:3d:20:
cd:12:07:22:3e:b8:42:5a:82:e7:61:9c:1f:ec:35:
9b:00:fb:75:c8:79:20:45:79:63:fc:85:dd:66:e9:
55:cd:5a:3b:91:57:73:f1:ba:b7:37:5b:3a:7e:c7:
ee:40:da:43:70:d2:e9:c3:8c:99:cb:48:08:70:10:
15:e4:ac:07:57:de:9d:08:fb:81:11:8c:5e:c6:53:
96:6c:e6:2a:6c:e7:f1:1c:20:72:50:5f:0f:56:87:
cb:71:23:ba:93:47:cb:15:7e:5c:01:b0:f0:9c:f1:
65:7d:fe:65:fe:75:87:bb:88:fb:c4:d0:44:dd:72:
b5:72:f9:bb:57:5f:87:a8:30:7d:bb:29:7a:ab:9e:
6b:81:77:b8:f4:e6:e4:dd:38:20:7e:64:f0:d3:4b:
12:61:6c:8a:42:79:92:d6:e0:02:62:4e:10:67:d6:
e1:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:B7:F0:17:0F:35:53:30:23:75:AE:0F:DA:B9:EB:54:51:E4:6E:97
X509v3 Authority Key Identifier:
keyid:E5:77:31:EA:85:7B:90:3A:A4:0A:8E:5F:D8:D8:84:46:50:5B:52:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Xcx6oV7kDqkCo5f2NiERlBbUjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/afbb62-0098-42b3-81ae-f0bb2e15f6d0/1/KrfwFw81UzAjda4P2rnrVFHkbpc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/afbb62-0098-42b3-81ae-f0bb2e15f6d0/1/5Xcx6oV7kDqkCo5f2NiERlBbUjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.67.192.0/20
Signature Algorithm: sha256WithRSAEncryption
9e:5d:73:09:18:58:13:59:11:4e:7f:27:c8:b0:80:bc:88:2e:
72:a1:71:80:77:2f:83:e3:0e:28:11:ac:fe:cc:9b:57:4b:28:
35:1c:5a:8c:a7:e1:8d:79:0e:46:b8:99:a5:76:cc:05:a7:2f:
82:95:02:06:54:ef:af:55:5b:78:9c:54:c0:3b:f9:a2:b5:c5:
fd:d5:ba:71:33:9a:22:aa:ca:28:7f:74:2e:cf:2a:3c:58:0d:
ea:71:d8:47:34:18:6a:de:69:2c:50:15:ac:59:ef:78:a1:05:
61:69:1e:12:db:c1:85:7d:b8:52:41:16:4f:6e:b4:72:06:8b:
a0:85:99:5e:13:84:78:67:44:3f:05:87:22:7d:97:0f:b8:6b:
bd:f6:a8:19:dc:e1:6d:f0:88:51:fa:f6:76:cb:7a:a9:b9:c9:
d1:9d:4f:01:04:2e:e9:75:94:5b:4b:39:31:00:ff:e7:9e:ec:
ac:c8:f7:ef:24:93:4c:11:cf:18:c9:6e:05:e9:6a:bf:28:5e:
46:f3:ed:cd:e5:eb:b0:4f:ba:94:4f:04:4f:ad:9f:e8:54:62:
c3:9c:8f:90:cb:d3:b0:42:bc:5e:73:7c:4b:dc:37:59:87:4b:
f2:ea:4a:19:75:a1:cb:48:47:c6:15:68:28:6a:0f:c1:17:0f:
e1:d2:2a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:20 2024 by rpki-client on console-ams.rpki-client.org