Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/kvv6Z3LqjxttnO9gRGfsySD4psU.roa
File: kvv6Z3LqjxttnO9gRGfsySD4psU.roa (raw, json)
Hash identifier: ssmeincIcU+jL12EnqZdxZ6wBZ0StGGlgd8CcMmoITg=
Subject key identifier: 92:FB:FA:67:72:EA:8F:1B:6D:9C:EF:60:44:67:EC:C9:20:F8:A6:C5
Certificate issuer: /CN=8267fb4a0b677b8377907b82fb1fb8810a2fef08
Certificate serial: 0186A1F76218A420174AA81D170EED6D0779
Authority key identifier: 82:67:FB:4A:0B:67:7B:83:77:90:7B:82:FB:1F:B8:81:0A:2F:EF:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmf7Sgtne4N3kHuC-x-4gQov7wg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/kvv6Z3LqjxttnO9gRGfsySD4psU.roa
Signing time: Thu 02 Mar 2023 10:56:29 +0000
ROA not before: Thu 02 Mar 2023 10:56:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209242
IP address blocks: 193.200.52.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 09 Mar 2023 09:47:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a1:f7:62:18:a4:20:17:4a:a8:1d:17:0e:ed:6d:07:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8267fb4a0b677b8377907b82fb1fb8810a2fef08
Validity
Not Before: Mar 2 10:56:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=92fbfa6772ea8f1b6d9cef604467ecc920f8a6c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ed:8c:16:48:0b:64:06:32:4a:e2:87:14:93:
25:a9:9a:74:b1:4d:fb:9f:29:a9:9f:8d:f8:c6:c2:
e0:fe:37:d7:bf:3d:f2:b6:cd:de:70:7b:2c:49:8e:
f9:29:fc:86:09:d8:ab:e7:a7:7c:22:89:cb:7e:28:
b7:cf:14:69:38:1d:c0:73:0b:b7:b9:42:b1:f9:01:
b0:09:95:d1:a1:6b:f5:8f:98:ef:2e:2c:f5:28:dd:
da:68:4b:07:ce:d1:8d:82:3d:50:b7:2b:32:e5:ff:
b5:ed:df:a6:87:32:ba:63:ec:66:d2:8a:fe:4b:e3:
3f:ef:44:8c:7f:0f:d3:79:70:dd:f5:e8:6a:0f:27:
04:0c:a3:58:5f:8e:b9:d6:f0:c7:40:79:29:e7:4e:
48:30:df:fe:17:be:a4:a7:ab:ea:70:a4:08:38:f7:
e9:05:e4:f2:f7:04:36:13:08:0e:03:db:74:73:fd:
44:83:f8:c9:1a:45:b4:93:65:d7:32:d0:f8:86:ea:
f3:85:a2:47:d7:17:7f:ad:f0:6b:aa:80:0f:88:83:
1c:b4:53:a0:02:c1:f6:6b:4a:69:50:d1:e5:b3:47:
af:82:3b:e4:26:97:94:aa:0f:42:e9:53:2e:1f:48:
58:9d:36:0a:5d:c3:39:d0:fa:11:0c:35:6b:cb:ba:
b6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:FB:FA:67:72:EA:8F:1B:6D:9C:EF:60:44:67:EC:C9:20:F8:A6:C5
X509v3 Authority Key Identifier:
keyid:82:67:FB:4A:0B:67:7B:83:77:90:7B:82:FB:1F:B8:81:0A:2F:EF:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmf7Sgtne4N3kHuC-x-4gQov7wg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/kvv6Z3LqjxttnO9gRGfsySD4psU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/gmf7Sgtne4N3kHuC-x-4gQov7wg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.52.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:17:2d:08:68:70:d2:02:96:38:9c:5d:3d:12:57:5c:cd:1e:
81:0d:69:56:13:71:30:57:6f:43:ad:20:f4:73:63:b0:41:7c:
c8:3c:d9:da:f2:9e:75:0e:34:4c:57:68:c6:13:5b:73:0d:1f:
ad:41:14:0d:d6:e3:db:df:91:13:a8:50:98:94:3d:42:49:df:
ed:b2:37:c7:4e:1f:93:91:46:fd:04:60:ba:3b:a2:58:7b:53:
ee:12:29:7c:e3:2a:27:ff:7d:29:1e:88:34:7e:18:87:52:6c:
6c:73:f9:e3:c0:b9:e1:cb:4c:51:8f:7e:fd:1a:c5:b3:22:8d:
12:01:d2:c9:a2:7b:36:96:97:9a:74:00:59:55:77:b9:53:43:
53:18:01:03:5d:15:7d:82:17:a8:29:ce:f0:18:41:8a:9c:26:
b4:30:1b:6f:4c:86:ef:2a:c1:2f:aa:d2:7f:b7:e7:56:9a:be:
8e:1d:b4:83:c6:58:f2:0c:36:36:6d:40:c0:7e:ec:43:7f:a8:
5e:1c:da:16:65:43:a3:77:6b:ec:a1:0c:7b:b9:56:68:ed:6f:
3e:33:64:b2:25:a4:6b:f3:7c:9f:5d:09:de:56:ff:b0:74:a0:
d9:ae:bd:d1:25:d2:09:ba:81:23:65:f7:ff:c8:26:25:c4:b3:
cf:77:8b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:28 2024 by rpki-client on console-fra.rpki-client.org