Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/kjbrOnX172qfuge0dZI4lqTcS8k.roa
File: kjbrOnX172qfuge0dZI4lqTcS8k.roa (raw, json)
Hash identifier: u7Yl6LNiiA/pn2mOx8zq/hhnR16BkfIENx93bTitYcI=
Subject key identifier: 92:36:EB:3A:75:F5:EF:6A:9F:BA:07:B4:75:92:38:96:A4:DC:4B:C9
Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Certificate serial: 01905E463883F5C3A836C2BB2C18B0CE28F2
Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/kjbrOnX172qfuge0dZI4lqTcS8k.roa
Signing time: Fri 28 Jun 2024 09:56:18 +0000
ROA not before: Fri 28 Jun 2024 09:56:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60223
IP address blocks: 185.118.79.0/24 maxlen: 24
193.68.89.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jul 2024 12:35:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:5e:46:38:83:f5:c3:a8:36:c2:bb:2c:18:b0:ce:28:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Validity
Not Before: Jun 28 09:56:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9236eb3a75f5ef6a9fba07b475923896a4dc4bc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:0c:ec:a8:44:71:0e:43:40:d8:8c:ab:e3:e3:
86:7b:92:09:cc:94:b8:30:57:fd:77:34:80:d6:0a:
c4:25:73:75:d2:35:98:3e:fe:78:1d:af:e4:cd:d9:
db:d9:43:af:40:aa:6c:51:ca:ca:aa:42:3d:ce:38:
78:e1:ea:04:ec:22:a5:d8:df:40:ce:ca:cb:5b:86:
ca:0e:48:a1:1f:7d:9a:90:c2:ff:df:ac:f2:1c:41:
b8:26:41:d0:42:df:ce:bc:e0:56:1c:f1:41:ba:8c:
ee:c8:d4:75:4b:a4:ac:7c:93:ab:a8:66:71:c6:60:
0c:b4:fc:32:20:ee:1e:d6:1e:54:3d:f4:1f:5f:5d:
d9:e0:29:8b:99:0b:b7:da:b3:89:d3:3c:83:0d:bf:
f2:b5:07:fa:4c:2a:74:07:95:ca:14:a1:d9:f4:25:
10:22:ac:f3:ac:c6:6e:1e:b0:03:60:f7:41:65:1e:
b4:76:0a:17:4a:8a:58:b4:e9:a9:24:e6:7b:70:4f:
21:3f:ca:77:54:7a:f4:87:1a:fb:eb:72:97:6a:fe:
44:e4:17:a1:18:1d:65:0c:42:3f:29:d8:e5:de:6e:
c4:1b:df:11:6c:07:70:85:c6:4e:36:d3:08:e1:1d:
da:9b:b6:34:84:47:a7:3f:ca:67:cf:a5:86:39:51:
1e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:36:EB:3A:75:F5:EF:6A:9F:BA:07:B4:75:92:38:96:A4:DC:4B:C9
X509v3 Authority Key Identifier:
keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/kjbrOnX172qfuge0dZI4lqTcS8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.118.79.0/24
193.68.89.0/24
Signature Algorithm: sha256WithRSAEncryption
92:43:4f:af:c0:ad:8a:58:ca:8a:9c:e4:d0:b4:30:4f:04:da:
21:58:bb:bf:c2:36:55:af:3f:60:69:14:5d:6e:83:88:ce:13:
a7:09:d9:06:27:e6:20:4d:d5:d9:38:e3:8b:45:b6:4a:a3:e2:
4b:df:74:0e:3f:ef:54:99:37:20:62:31:4c:29:78:a6:de:4e:
a2:56:de:6d:01:29:bb:f6:b9:14:ac:99:9c:ff:5a:9a:29:03:
2d:8d:1c:8e:02:41:cc:6e:80:ce:38:e9:c3:c2:24:ae:ae:96:
66:1c:04:52:a8:33:09:05:b4:fb:8d:90:13:7b:c3:86:e5:84:
a8:9c:c7:72:53:58:ac:4e:14:21:9e:19:60:bf:30:d5:ec:b5:
a5:71:b2:d7:d3:83:81:a4:08:e9:53:22:59:b4:bc:5e:ee:69:
8f:9d:e1:ff:20:af:83:cd:b8:f1:f7:f8:36:a7:3e:d5:d8:69:
4f:05:cb:dc:fe:e1:78:b4:71:76:77:c5:b1:c9:d5:95:b2:ca:
4f:76:09:23:f5:7f:70:dd:c0:0e:28:b4:70:d6:e1:09:c9:1e:
28:07:10:ef:81:ca:fb:d4:0e:fb:c4:02:58:4d:5a:bb:bf:81:
08:55:ae:df:8a:33:a3:d3:8d:21:c6:e0:28:f9:09:81:ac:09:
b7:0d:a0:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 14:28:06 2024 by rpki-client on console-fra.rpki-client.org