Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KUiYjcJ4HYc4hgvR5TcXGOJSOcs.roa
File: KUiYjcJ4HYc4hgvR5TcXGOJSOcs.roa (raw, json)
Hash identifier: 6Sa4+PvXj7IrrznmnqocygULJaxgL0R2sFSmLqkaFoo=
Subject key identifier: 29:48:98:8D:C2:78:1D:87:38:86:0B:D1:E5:37:17:18:E2:52:39:CB
Certificate issuer: /CN=297ae7592ca52491dc166a30fe1477d712bd465d
Certificate serial: 0191DD5009CBCBFF5938B0CC0BB4BD0C7CF3
Authority key identifier: 29:7A:E7:59:2C:A5:24:91:DC:16:6A:30:FE:14:77:D7:12:BD:46:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KUiYjcJ4HYc4hgvR5TcXGOJSOcs.roa
Signing time: Tue 10 Sep 2024 19:01:35 +0000
ROA not before: Tue 10 Sep 2024 19:01:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29076
IP address blocks: 94.159.71.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 10 Sep 2024 19:11:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:dd:50:09:cb:cb:ff:59:38:b0:cc:0b:b4:bd:0c:7c:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297ae7592ca52491dc166a30fe1477d712bd465d
Validity
Not Before: Sep 10 19:01:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2948988dc2781d8738860bd1e5371718e25239cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7e:01:dd:34:15:1d:72:ca:09:02:d2:92:b7:
5f:7d:9c:e1:c6:14:c7:d0:0a:3d:8b:0b:12:61:fa:
2a:59:db:30:a0:c1:7c:41:fc:b1:83:19:f3:cb:a0:
27:1f:38:b3:28:ec:d2:d5:1e:00:11:70:43:dd:79:
07:f8:ea:3e:06:fa:92:a9:75:b2:56:1c:28:39:61:
c2:56:7f:06:45:7f:5d:62:10:16:5f:b9:d6:39:3f:
8a:67:0b:ae:13:e3:88:2c:a2:ff:98:15:fb:a4:02:
3a:7a:10:bd:5a:de:be:16:a8:aa:57:04:80:c1:8e:
49:a2:6f:44:c0:4b:ad:f7:4a:7d:65:12:db:9c:80:
07:a2:6d:27:c0:8d:ed:27:07:44:b2:64:34:5e:30:
7b:69:f1:81:0f:3c:cc:08:f2:0b:29:0a:33:0a:b7:
79:e0:92:39:9f:2d:80:dd:82:30:70:a9:3f:15:e2:
8a:bf:5d:ef:0b:aa:e4:61:71:68:c4:91:c0:e5:6e:
03:88:cd:9a:4e:00:19:eb:80:9c:ac:c5:4a:24:50:
c3:51:6c:73:8e:95:98:f1:f0:69:28:a6:28:f4:41:
62:c9:23:64:99:58:f4:c4:a3:8e:b1:96:5d:f7:8c:
a1:13:e2:ee:2b:a2:99:b0:50:23:fc:b0:19:69:9f:
2d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:48:98:8D:C2:78:1D:87:38:86:0B:D1:E5:37:17:18:E2:52:39:CB
X509v3 Authority Key Identifier:
keyid:29:7A:E7:59:2C:A5:24:91:DC:16:6A:30:FE:14:77:D7:12:BD:46:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KUiYjcJ4HYc4hgvR5TcXGOJSOcs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.159.71.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:3f:15:d4:9e:20:ba:94:da:02:31:81:a2:a0:07:0e:47:34:
c8:16:86:05:f5:b6:f0:71:45:ef:8d:9a:5a:41:2b:bb:47:47:
16:66:37:84:04:d5:04:d9:48:b9:98:ad:b8:46:26:1f:8f:2f:
49:5f:ea:33:f1:47:d8:02:c2:ac:5c:da:f2:92:33:6f:bb:8f:
28:a1:5c:19:e2:fb:ce:18:1f:04:6b:78:98:8c:31:c1:18:95:
d1:32:56:d9:b0:3f:5d:03:d9:d3:00:4b:0f:d3:7a:b6:49:80:
bf:87:aa:dc:5f:7e:b4:5d:30:30:c1:62:ae:05:f6:c5:c8:e6:
e8:c6:12:fb:3e:c5:ff:33:03:96:ef:99:69:b6:15:bd:d4:75:
a3:4e:c5:3d:bd:c4:90:66:e1:c2:51:cb:6a:6f:07:11:b2:75:
cd:2f:55:c7:cb:64:ff:2a:ac:d9:fe:1f:f4:07:ab:ec:62:6c:
92:c6:36:62:31:f8:cc:59:26:89:9b:cc:2b:51:f1:64:d9:62:
cb:de:aa:f4:66:c6:36:37:cc:94:e2:73:4d:61:39:9e:de:35:
4c:91:bb:00:72:87:d7:29:49:18:83:a7:6c:c3:30:00:24:1f:
1c:46:81:26:9c:27:72:d2:2a:0a:68:10:44:33:b4:5b:44:11:
09:56:38:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 10 23:11:31 2024 by rpki-client on console-ams.rpki-client.org