Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/JkBHkk8LOlXm5K2234HO5kScp5U.roa
File: JkBHkk8LOlXm5K2234HO5kScp5U.roa (raw, json)
Hash identifier: Mz/V2WEUumPjn2cf4/eRH+PMN9j4e9VPtoZAffMJxEI=
Subject key identifier: 26:40:47:92:4F:0B:3A:55:E6:E4:AD:B6:DF:81:CE:E6:44:9C:A7:95
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 018612E56857D79DF0208E0FE3909934AAB5
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/JkBHkk8LOlXm5K2234HO5kScp5U.roa
Signing time: Thu 02 Feb 2023 16:11:09 +0000
ROA not before: Thu 02 Feb 2023 16:11:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 92.63.190.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:12:e5:68:57:d7:9d:f0:20:8e:0f:e3:90:99:34:aa:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Feb 2 16:11:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=264047924f0b3a55e6e4adb6df81cee6449ca795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:01:71:1b:57:ad:41:49:6f:54:21:78:13:2d:
1b:90:b0:a1:54:7f:4d:67:d8:a2:92:5b:ba:21:48:
b3:7a:ae:56:6e:aa:0c:6d:a2:32:30:6c:7b:d0:f5:
f8:9d:09:2d:80:f4:d7:14:d3:29:dd:00:89:7b:7d:
c7:c7:c8:7e:2d:1d:84:a5:9c:86:11:3b:cc:cf:be:
ae:3d:af:45:43:01:b9:d5:61:e2:d3:b9:55:e3:1a:
fc:ed:ad:37:e8:f9:53:31:bd:a5:36:d4:3a:57:11:
e3:17:44:98:f5:c4:91:57:d5:71:27:3f:f6:13:a8:
c3:0c:ea:35:16:1f:eb:e1:f7:dd:3b:57:56:e7:04:
f6:0b:83:79:97:6b:d9:f6:a3:58:e8:28:cb:f5:1a:
dc:41:88:62:3f:a4:6d:b5:75:ef:28:a1:d5:7d:b2:
3a:a0:51:6a:8a:f9:f9:4b:db:30:b7:72:96:44:f2:
6b:4f:16:e1:cb:db:b4:e2:fd:ad:9e:01:53:46:97:
f5:84:ef:5a:09:a6:70:94:dc:eb:14:63:e4:32:f9:
cf:57:5c:4b:a9:a4:13:db:65:fb:75:55:ef:bb:c8:
73:e9:73:45:cf:75:89:e0:1a:cc:f1:f4:48:b5:f7:
ea:4d:ec:80:9e:4a:da:3d:69:67:6d:2d:b8:f2:35:
bf:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:40:47:92:4F:0B:3A:55:E6:E4:AD:B6:DF:81:CE:E6:44:9C:A7:95
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/JkBHkk8LOlXm5K2234HO5kScp5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.63.190.0/24
Signature Algorithm: sha256WithRSAEncryption
57:8a:a7:6f:ce:1e:aa:c1:a8:66:34:52:b6:48:bd:7e:4d:f3:
b9:98:92:98:7a:6c:79:36:6b:47:3d:b2:9f:28:2f:cd:e1:a6:
01:4d:05:c5:86:e8:db:ab:af:eb:0a:5d:3a:8d:0b:97:a7:33:
ed:fb:d9:e6:3e:03:b6:3d:4f:5d:c3:37:ea:c2:d0:83:73:5a:
03:fb:f0:92:68:91:22:61:2c:16:da:0a:64:a0:c2:d1:49:a5:
3d:8f:a8:04:90:a8:79:af:ef:17:ec:a2:37:63:b7:e7:ec:f0:
8e:b1:c7:9f:74:c8:18:0d:8b:bd:15:f0:60:63:60:8b:f6:dd:
68:8f:3e:af:50:00:ea:da:84:3c:98:ec:b9:75:18:53:19:e9:
ab:02:a7:68:ed:bb:4a:78:77:50:37:ac:51:16:83:c0:5c:8e:
0e:b0:4a:c3:34:57:bc:de:1d:f5:09:e4:95:8b:fe:2c:fb:e7:
43:6c:b5:57:10:0e:51:e3:f2:dd:bb:0e:2a:d1:86:a4:f1:ea:
72:8d:1f:1d:fa:c6:38:ce:1f:b3:1c:09:58:46:28:7b:fd:76:
14:51:7c:b7:06:6d:bf:81:d4:40:e8:7f:e6:fc:08:d0:06:ed:
6f:f8:d9:02:d7:40:d7:e6:cd:b0:ed:47:8e:f0:0f:c6:7b:e0:
c1:dc:31:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:10 2023 by rpki-client on console-fra.rpki-client.org