Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/k4K_1wS-s8IIgwuKy2OC1kmKOUI.roa
File: k4K_1wS-s8IIgwuKy2OC1kmKOUI.roa (raw, json)
Hash identifier: cnqGEIyNfyViYK3y2bW3gicdfKuy9czQacakJj+/Zw4=
Subject key identifier: 93:82:BF:D7:04:BE:B3:C2:08:83:0B:8A:CB:63:82:D6:49:8A:39:42
Certificate issuer: /CN=0f92c52f86009879c177092f7cd83418b4df8cab
Certificate serial: 01856F26B9CD0E7ECF5CD8C60492B6924907
Authority key identifier: 0F:92:C5:2F:86:00:98:79:C1:77:09:2F:7C:D8:34:18:B4:DF:8C:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5LFL4YAmHnBdwkvfNg0GLTfjKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/k4K_1wS-s8IIgwuKy2OC1kmKOUI.roa
Signing time: Sun 01 Jan 2023 21:04:46 +0000
ROA not before: Sun 01 Jan 2023 21:04:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 4755
IP address blocks: 81.28.112.0/20 maxlen: 24
188.123.160.0/19 maxlen: 24
185.175.248.0/22 maxlen: 24
82.212.64.0/18 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:26:b9:cd:0e:7e:cf:5c:d8:c6:04:92:b6:92:49:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f92c52f86009879c177092f7cd83418b4df8cab
Validity
Not Before: Jan 1 21:04:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9382bfd704beb3c208830b8acb6382d6498a3942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:db:1d:80:10:5b:f9:9e:9a:05:ca:58:9a:a5:
54:24:ec:66:c4:65:ab:b5:43:fa:67:96:5b:5e:a5:
f5:12:d2:2a:30:e5:d7:0c:a1:3a:54:b9:f8:e9:b7:
ca:4b:41:e4:43:06:2f:b1:b6:78:1e:b6:f8:1b:54:
9f:49:6e:db:cc:0f:16:41:59:df:31:c8:32:44:60:
a3:86:2e:b1:dc:b5:00:fa:41:df:25:ae:75:33:b9:
f8:8b:83:db:65:1b:4b:3a:24:82:d3:17:1d:4b:6c:
27:2e:b1:15:d2:a0:4f:cb:90:4d:5b:6c:8c:f8:61:
7d:3a:bd:06:1c:ce:4b:fe:82:a9:db:6b:5f:57:66:
9c:69:8e:2b:0a:91:92:32:58:db:4f:af:cf:ac:d9:
ec:a9:7f:d9:8e:de:cc:6d:18:14:d3:dc:48:c5:6c:
2d:90:de:1f:a4:bd:10:40:bd:f1:07:64:8c:9e:8e:
7f:05:af:f7:66:74:c2:ef:41:3f:36:53:9c:76:63:
bc:4e:55:ff:a2:87:ea:78:df:d1:cb:2d:dc:94:28:
56:83:6f:3f:2b:6e:d9:46:35:b7:90:3b:3c:38:b5:
43:60:2b:7c:42:e7:6a:f4:18:fe:29:ff:a5:cb:89:
54:8a:22:16:d1:96:c0:24:aa:aa:60:0e:c6:d2:fd:
5a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:82:BF:D7:04:BE:B3:C2:08:83:0B:8A:CB:63:82:D6:49:8A:39:42
X509v3 Authority Key Identifier:
keyid:0F:92:C5:2F:86:00:98:79:C1:77:09:2F:7C:D8:34:18:B4:DF:8C:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5LFL4YAmHnBdwkvfNg0GLTfjKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/k4K_1wS-s8IIgwuKy2OC1kmKOUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/D5LFL4YAmHnBdwkvfNg0GLTfjKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.28.112.0/20
82.212.64.0/18
185.175.248.0/22
188.123.160.0/19
Signature Algorithm: sha256WithRSAEncryption
5c:9b:9b:54:a3:b8:ee:ee:7c:f2:7d:b1:af:2c:b2:95:9e:ab:
28:a5:b2:dd:8e:66:6d:fa:1d:3a:28:75:ae:6c:0a:d9:df:e3:
a3:ea:ef:cc:6f:93:f5:de:d0:c2:13:6d:ab:44:a6:5d:53:d6:
5b:4f:60:e3:64:59:57:ce:40:b3:9e:84:5a:fc:be:59:89:9b:
f5:8f:54:a4:99:cd:bb:e1:93:99:cc:d5:4d:7b:5a:ef:b3:11:
44:5f:7c:79:df:51:e1:13:a2:9a:d6:ba:f5:81:31:e6:3c:6f:
fa:a7:c4:69:5b:af:ae:f9:03:75:31:98:48:a1:59:87:b9:1a:
7b:4d:63:28:90:3a:25:34:9d:34:4f:18:7b:e8:1d:e1:e9:fb:
52:89:2d:7e:24:c7:09:67:7a:48:3e:29:b7:62:17:75:5a:bf:
00:5a:8f:c3:89:48:3b:38:3f:d3:b6:54:fa:f2:e3:2e:47:ed:
5f:c1:64:1e:58:03:d5:66:46:9a:47:b1:ff:9a:a6:36:8b:11:
c2:99:e7:5d:be:5a:a8:a2:57:01:0a:06:be:83:e8:8a:79:5a:
14:aa:4c:86:42:55:32:79:49:49:58:2f:75:ab:a1:86:67:16:
93:a3:a5:92:5f:99:16:79:55:5b:40:f6:03:e2:17:75:c6:1b:
58:95:d0:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:17:04 2024 by rpki-client on console-ams.rpki-client.org