Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kNaRjc57Uh19T6hdnBNoKLERZRY.roa
File: kNaRjc57Uh19T6hdnBNoKLERZRY.roa (raw, json)
Hash identifier: TaM5K5yhV7iFT4t5CTjZfHwIleKmVnnIMqcStZrXlLc=
Subject key identifier: 90:D6:91:8D:CE:7B:52:1D:7D:4F:A8:5D:9C:13:68:28:B1:11:65:16
Certificate issuer: /CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Certificate serial: 018CC424BA1F33231750F3C0B676621ED9BA
Authority key identifier: 92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kNaRjc57Uh19T6hdnBNoKLERZRY.roa
Signing time: Mon 01 Jan 2024 08:29:50 +0000
ROA not before: Mon 01 Jan 2024 08:29:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50673
IP address blocks: 5.56.133.0/24 maxlen: 24
87.236.212.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 14 May 2024 04:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:ba:1f:33:23:17:50:f3:c0:b6:76:62:1e:d9:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Validity
Not Before: Jan 1 08:29:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=90d6918dce7b521d7d4fa85d9c136828b1116516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:88:93:ab:f6:df:b6:c4:d0:51:b8:f1:eb:87:
e7:8a:6d:cd:aa:b1:f6:ea:ba:0e:ba:d5:22:50:9d:
db:38:86:16:e0:d3:4b:18:f2:6a:84:9c:4a:c5:70:
4c:e7:aa:6c:e9:2b:a1:8f:7c:90:3c:bd:e2:98:f7:
a4:6e:ea:5f:95:b3:ee:1b:7a:cb:8e:31:72:fc:98:
3c:bc:43:48:d0:a2:b0:88:f2:6f:db:4b:bd:b5:9e:
9c:45:ca:61:56:24:df:f8:9f:a9:6d:eb:d1:30:ab:
bd:84:7b:ec:dd:36:95:52:01:81:f6:01:cf:91:b0:
93:b5:12:74:f8:70:68:ce:c0:39:82:d3:43:b7:e6:
23:a4:e2:ef:08:4b:e7:52:f2:4e:40:39:28:67:16:
ed:86:a9:99:45:a6:97:34:ad:00:2a:24:6a:b0:05:
09:54:40:a8:a2:43:41:b7:65:72:62:48:5d:59:41:
b2:7c:8d:2f:9c:b8:23:de:a8:d5:ee:13:22:e0:17:
5e:28:73:b7:d5:a3:47:e7:24:dd:38:9e:bd:e5:47:
2a:2a:31:35:45:f0:c3:a6:42:fd:03:fc:a5:39:f0:
57:8c:8c:60:92:d8:b8:52:9a:99:1e:30:7f:7b:00:
f3:ed:33:e9:f6:c8:cc:0d:47:3b:c6:c6:ca:a2:4c:
f4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:D6:91:8D:CE:7B:52:1D:7D:4F:A8:5D:9C:13:68:28:B1:11:65:16
X509v3 Authority Key Identifier:
keyid:92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kNaRjc57Uh19T6hdnBNoKLERZRY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.133.0/24
87.236.212.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:78:a2:08:51:62:6b:89:25:dc:37:29:3f:10:b6:30:7d:75:
ff:93:00:6f:2a:80:39:32:41:d8:ee:da:39:09:e4:7f:37:b9:
d2:6c:b4:4b:89:e1:37:e7:cd:bd:9e:25:84:8b:32:5a:f7:33:
85:e4:c8:29:0b:6d:25:e2:47:d4:b2:07:b9:15:c9:9d:4d:50:
03:ce:9c:45:c2:4a:8d:81:e4:07:bb:ac:3e:0c:bc:f1:fe:64:
7c:9a:f1:a2:35:7d:34:78:fe:12:4f:fe:d8:03:75:5f:9c:25:
e5:1d:90:f0:9d:41:ab:fa:84:d4:87:85:d7:33:bf:3a:84:c2:
cf:27:b8:ea:bf:6b:3b:c3:07:cc:17:82:8c:8e:6d:91:a1:76:
44:6b:a4:94:64:ce:a6:5c:95:7b:1c:3e:33:98:77:41:90:2d:
61:82:b9:8a:4f:1f:09:7e:d9:b8:2b:ce:bc:36:51:45:04:be:
93:47:b4:01:44:4f:f6:d0:ab:6f:5f:5b:b4:d1:c8:95:d4:ff:
e2:03:d0:f4:84:96:40:d3:a4:6e:80:f8:6c:42:5d:24:52:33:
9a:7b:ca:7d:60:d2:fe:91:6a:b0:35:9e:1b:4b:6c:c9:84:f7:
70:63:4a:f9:09:1e:2e:9e:c0:92:e1:e4:d8:65:07:46:ff:8b:
2f:3e:76:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:43 2024 by rpki-client on console-fra.rpki-client.org