Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/KLTGTtkNJE4eOwHrJAUKpYHtb2k.roa
File: KLTGTtkNJE4eOwHrJAUKpYHtb2k.roa (raw, json)
Hash identifier: I5BcVaitlAMpFok2QdcDX4nneeW192hf2B//3fiSyFs=
Subject key identifier: 28:B4:C6:4E:D9:0D:24:4E:1E:3B:01:EB:24:05:0A:A5:81:ED:6F:69
Certificate issuer: /CN=10eedc33aa442907189f0b3c563836951fb185bb
Certificate serial: 018570302DE4D083AECD301C784376AC479C
Authority key identifier: 10:EE:DC:33:AA:44:29:07:18:9F:0B:3C:56:38:36:95:1F:B1:85:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EO7cM6pEKQcYnws8Vjg2lR-xhbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/KLTGTtkNJE4eOwHrJAUKpYHtb2k.roa
Signing time: Mon 02 Jan 2023 01:54:43 +0000
ROA not before: Mon 02 Jan 2023 01:54:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207094
IP address blocks: 185.165.220.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:30:2d:e4:d0:83:ae:cd:30:1c:78:43:76:ac:47:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10eedc33aa442907189f0b3c563836951fb185bb
Validity
Not Before: Jan 2 01:54:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=28b4c64ed90d244e1e3b01eb24050aa581ed6f69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:3e:f2:fc:fb:c5:7d:d3:7a:8b:e2:68:95:62:
8c:8e:0e:20:3c:f3:48:17:f5:d5:61:f2:45:63:0e:
94:33:86:e7:c5:fa:89:f7:78:5a:73:0f:48:b6:ab:
7f:b8:d9:51:d2:90:31:90:74:26:35:fb:e6:16:64:
23:9a:91:59:4a:cf:39:f2:31:39:80:a1:f0:4c:30:
a8:dd:70:f2:b6:a3:7e:48:7e:1f:02:83:de:4b:3b:
0a:d1:98:7d:35:eb:a6:f5:b6:54:70:e5:d6:06:a2:
81:96:e2:4f:15:e7:6a:ab:b5:80:51:c4:a7:49:6f:
17:2c:43:3a:13:e3:60:20:b9:79:4f:43:20:34:44:
e4:64:65:c1:98:07:0e:b5:3b:e5:15:7f:74:95:54:
c0:41:90:62:fe:d9:75:54:77:70:97:f4:18:25:2c:
c8:e9:4b:0f:b1:8a:8d:fa:fe:47:82:c8:7c:17:37:
3a:33:2a:5d:48:b3:e0:1e:0c:59:69:04:6d:33:3e:
24:53:da:b4:8f:0f:9d:db:0a:fe:d5:dc:89:6c:b3:
86:a5:1b:fe:f4:1f:cf:c2:e0:8b:be:e2:01:05:87:
d8:bf:e5:3f:d1:16:80:2b:76:37:a9:b1:5f:7d:c5:
05:f6:d3:b7:88:ff:27:d6:40:9b:af:3d:95:74:b3:
98:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:B4:C6:4E:D9:0D:24:4E:1E:3B:01:EB:24:05:0A:A5:81:ED:6F:69
X509v3 Authority Key Identifier:
keyid:10:EE:DC:33:AA:44:29:07:18:9F:0B:3C:56:38:36:95:1F:B1:85:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EO7cM6pEKQcYnws8Vjg2lR-xhbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/KLTGTtkNJE4eOwHrJAUKpYHtb2k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/546c7e-d840-4e54-9223-534ebeef3389/1/EO7cM6pEKQcYnws8Vjg2lR-xhbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.165.220.0/22
Signature Algorithm: sha256WithRSAEncryption
01:d0:17:b3:f1:4f:e8:3b:e0:53:cc:9b:f1:1b:cd:f0:04:c3:
be:e9:56:cc:34:65:9c:93:01:bf:b7:1c:48:fb:6b:88:34:51:
1e:f7:84:f7:6f:5f:18:9e:f0:43:94:6d:e6:ba:e0:41:65:2b:
99:f5:aa:66:96:e3:b3:74:78:e8:43:b5:0d:5e:b1:4e:a8:2d:
f7:a2:eb:e9:e9:e0:ae:7b:f5:73:09:d0:a1:cf:9a:76:c3:fc:
36:0c:bf:8f:d0:aa:eb:12:21:60:bb:96:d4:52:01:3c:ee:37:
a5:a5:de:ef:40:ed:be:8b:ea:8c:2e:e0:d3:ae:01:5d:c7:d3:
66:4e:8b:f9:94:e7:0c:50:ec:84:07:7b:2a:55:db:27:42:07:
3c:ad:ab:e4:36:f2:8c:e6:a9:3d:c2:b2:69:1e:8c:83:92:ab:
5f:c3:37:73:bb:cf:9a:4a:01:78:8c:ea:d6:d5:52:39:1e:37:
55:2f:7f:5b:0a:2d:12:a8:f3:e0:27:3f:cd:b5:7a:ba:3b:85:
a1:8b:d3:fc:93:4e:d5:17:c9:0e:b6:d3:03:0e:54:77:c6:96:
c1:b7:dd:22:2f:eb:44:f5:93:c2:9b:fa:a6:8a:bf:67:db:ee:
d5:ce:87:0e:3b:12:95:91:44:a9:bb:3d:90:7f:ce:b6:9d:1f:
d0:18:81:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:16:58 2024 by rpki-client on console-ams.rpki-client.org