Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/kcs10xbNY5KtAUsNtG4n0-AXvuQ.roa
File: kcs10xbNY5KtAUsNtG4n0-AXvuQ.roa (raw, json)
Hash identifier: Qz8h37X5Y6je6oms7VxT3/Yivkwp5HRSnKhnxA1pDL8=
Subject key identifier: 91:CB:35:D3:16:CD:63:92:AD:01:4B:0D:B4:6E:27:D3:E0:17:BE:E4
Certificate issuer: /CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf
Certificate serial: 018A35BB91239AA0C3D3257F42BCF96ED071
Authority key identifier: F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/kcs10xbNY5KtAUsNtG4n0-AXvuQ.roa
Signing time: Sun 27 Aug 2023 06:43:19 +0000
ROA not before: Sun 27 Aug 2023 06:43:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202391
IP address blocks: 95.38.144.0/22 maxlen: 22
95.38.148.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:35:bb:91:23:9a:a0:c3:d3:25:7f:42:bc:f9:6e:d0:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf
Validity
Not Before: Aug 27 06:43:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=91cb35d316cd6392ad014b0db46e27d3e017bee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ce:50:77:92:83:0d:6a:4d:0f:25:2d:be:61:
9e:ac:2b:3c:d8:e0:a4:6d:1f:ee:9d:55:32:ff:bf:
47:16:22:6c:43:be:6c:95:2c:7d:99:9c:27:a3:35:
bc:cb:d3:c3:16:35:01:87:4a:08:83:f5:13:2c:56:
f1:a5:9d:6e:fd:bf:c2:d4:e7:ad:4f:a4:e5:8b:92:
c2:14:d6:4a:a4:46:14:19:db:b8:b8:ed:54:4b:de:
1a:0d:ee:cc:4e:66:53:d5:3e:3b:f6:38:5a:26:c6:
9a:c5:0f:27:ee:b4:61:2d:36:d5:31:78:2a:43:f6:
9d:2f:d6:4f:1d:cb:f4:a7:c3:23:44:9f:55:7a:b2:
cb:a0:84:53:ed:3a:e4:9d:30:54:71:a1:19:ba:b7:
72:b9:86:73:74:78:d1:88:e9:28:69:b3:d6:67:7b:
88:71:ac:0f:36:15:3f:0c:28:8a:8a:bc:29:8b:32:
ff:8f:6d:e5:f3:9d:14:d5:b4:50:d3:31:53:a0:c8:
aa:3f:dc:3b:d8:cf:b9:1a:e8:a3:65:0c:ec:cf:a1:
92:04:f6:f8:99:95:43:7a:12:51:41:6e:29:18:37:
41:65:87:4e:4c:0b:b0:f1:58:3a:ad:dd:74:f9:88:
07:66:8e:2b:20:e5:35:42:f8:93:d6:c2:53:42:cb:
1a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:CB:35:D3:16:CD:63:92:AD:01:4B:0D:B4:6E:27:D3:E0:17:BE:E4
X509v3 Authority Key Identifier:
keyid:F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/kcs10xbNY5KtAUsNtG4n0-AXvuQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.38.144.0/21
Signature Algorithm: sha256WithRSAEncryption
0e:1d:38:65:c6:dd:44:d5:0e:09:a2:3b:dc:36:2d:43:3d:d7:
a4:31:57:ea:ad:1f:49:17:1e:6f:99:bd:48:ba:b9:f9:85:22:
60:7a:3b:15:cc:b4:1d:3a:d6:23:8f:fd:15:f4:4c:9b:c9:b9:
9b:91:46:5c:29:2f:1c:35:b5:9c:f3:41:b8:d0:74:e6:cb:cb:
05:f0:42:c9:9e:be:0e:20:cc:41:08:e1:74:c7:2a:ee:12:27:
10:f8:18:c8:0b:1a:68:ce:c3:13:19:63:26:f3:44:f0:e1:ca:
06:76:4e:69:90:9e:f2:c6:c9:22:7d:33:db:0a:44:af:24:a3:
79:bd:8b:a6:38:e7:10:da:e6:45:49:54:3a:81:a8:60:58:d6:
22:31:d1:83:d4:4c:bf:1b:5c:27:df:e6:35:a4:f6:52:a7:85:
24:f9:82:90:66:6f:25:39:22:bd:f9:40:8c:b1:85:bf:a0:25:
ea:94:8d:47:24:47:51:e6:99:9b:aa:6c:a2:ba:0e:8e:e9:6b:
d5:6c:b2:df:89:d4:50:ff:86:cd:c7:e8:9a:e2:20:9e:6e:97:
21:86:f3:f8:0f:c1:32:f5:ff:93:0f:71:9e:6e:64:f9:2f:b2:
79:3f:c2:04:fe:8c:b8:50:f7:97:0f:a5:9e:03:4b:28:b3:b5:
07:e8:7d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:54 2024 by rpki-client on console-fra.rpki-client.org