Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/K2t1trvQCVJC49qWSy3NiTqqFhM.roa
File: K2t1trvQCVJC49qWSy3NiTqqFhM.roa (raw, json)
Hash identifier: pk2+bxh9tJJSRcB5+ezEJYI46b09CtjYCFE6uJXkyAY=
Subject key identifier: 2B:6B:75:B6:BB:D0:09:52:42:E3:DA:96:4B:2D:CD:89:3A:AA:16:13
Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial: 01896D70A9C035285972825866AA57907509
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/K2t1trvQCVJC49qWSy3NiTqqFhM.roa
Signing time: Wed 19 Jul 2023 09:17:27 +0000
ROA not before: Wed 19 Jul 2023 09:17:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 399471
IP address blocks: 92.61.97.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 19 Aug 2023 10:11:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:6d:70:a9:c0:35:28:59:72:82:58:66:aa:57:90:75:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Validity
Not Before: Jul 19 09:17:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2b6b75b6bbd0095242e3da964b2dcd893aaa1613
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:31:b3:3c:e1:7b:9b:8d:03:8a:e3:28:d1:3f:
f0:aa:46:4f:bf:0b:2f:9d:a8:f5:a5:9d:8a:ca:3e:
0c:75:9e:e8:ca:e9:9a:ef:92:41:ae:02:26:30:18:
95:49:ef:8b:3f:3f:ef:d6:db:d9:3e:59:f6:15:e2:
e0:22:9f:51:ad:d2:94:29:26:5c:f5:b6:fe:b4:12:
40:69:25:1d:8d:22:8e:4d:1b:42:8b:5d:1b:f4:ad:
6c:47:5d:b8:55:c8:55:ab:11:1c:1d:3d:8c:4f:82:
62:6e:16:92:f3:4d:2d:eb:1b:6e:ac:17:65:aa:70:
1e:2b:33:73:dc:6d:3b:49:d2:4c:c7:32:ca:8e:a3:
ea:89:aa:36:5d:80:36:70:11:76:89:f2:43:ea:2e:
46:77:14:12:b1:70:fe:6b:19:84:80:1d:5c:4f:b3:
48:52:93:ac:1d:f8:cd:28:2f:c8:c7:c1:25:70:c1:
b6:3e:97:6e:2a:d1:c5:dd:ba:87:ba:86:4d:83:40:
76:ca:10:22:e0:e6:e9:62:9b:dd:ba:e2:40:48:91:
59:05:6f:f5:16:0d:52:fd:59:73:3c:8b:16:d6:6d:
9b:06:45:b6:58:87:9c:89:66:b4:25:4a:3f:5a:4e:
75:6b:da:04:a4:7d:51:94:80:1c:1b:68:ce:6c:14:
07:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:6B:75:B6:BB:D0:09:52:42:E3:DA:96:4B:2D:CD:89:3A:AA:16:13
X509v3 Authority Key Identifier:
keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/K2t1trvQCVJC49qWSy3NiTqqFhM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.61.97.0/24
Signature Algorithm: sha256WithRSAEncryption
11:82:64:56:53:9d:80:c1:04:e4:32:05:af:92:fe:f9:20:b0:
cd:72:76:37:74:d9:71:9e:92:60:25:42:b9:49:20:be:73:07:
9e:b9:80:04:b5:44:0f:71:74:9e:41:36:6b:2f:0c:8b:19:97:
d4:87:06:18:70:e0:5a:17:a4:ec:56:c5:8f:88:09:b8:d6:2f:
f1:b2:d1:2c:f0:2b:10:4d:e2:65:cd:18:da:76:52:8e:c7:55:
fa:b8:bc:cd:6f:16:ab:34:41:1a:ea:df:56:49:99:8c:e5:bd:
45:a6:58:6f:20:f8:5b:b7:7d:14:7d:a3:a8:8b:af:bc:e5:e6:
9d:4b:85:9d:10:80:ee:59:4d:fb:f4:76:87:18:e7:4f:45:9a:
0e:f1:66:23:01:5d:6a:3e:40:de:1a:58:e1:0e:34:98:0f:69:
53:d4:af:0d:ee:6e:7f:c7:27:02:b6:1b:d0:1b:c0:ac:69:46:
da:d9:99:13:59:52:d4:de:f5:5a:9f:9b:bd:2a:55:86:82:ee:
9e:c3:30:0e:20:62:11:3e:c6:bd:01:30:e6:38:79:da:c9:26:
67:e5:53:a0:b3:ca:f9:b7:23:d3:f4:7a:37:c4:1d:9c:95:98:
7b:9e:e3:54:9f:df:42:c6:0d:27:6c:74:c0:74:3f:e3:07:b1:
f9:89:87:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:21 2024 by rpki-client on console-ams.rpki-client.org