Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/KuXMYv_g_RG5uElZSdIBZtZQZmg.roa
File: KuXMYv_g_RG5uElZSdIBZtZQZmg.roa (raw, json)
Hash identifier: o8ytNypkEk2wVK4k7aFjmDsFbUS9AdSmlJ62ixDK4eQ=
Subject key identifier: 2A:E5:CC:62:FF:E0:FD:11:B9:B8:49:59:49:D2:01:66:D6:50:66:68
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 01888A252CE4FC899AA8D34E4D2CA7B3C933
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/KuXMYv_g_RG5uElZSdIBZtZQZmg.roa
Signing time: Mon 05 Jun 2023 06:01:12 +0000
ROA not before: Mon 05 Jun 2023 06:01:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61138
IP address blocks: 194.143.217.0/24 maxlen: 24
194.143.218.0/24 maxlen: 24
194.143.223.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:8a:25:2c:e4:fc:89:9a:a8:d3:4e:4d:2c:a7:b3:c9:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Jun 5 06:01:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2ae5cc62ffe0fd11b9b8495949d20166d6506668
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:19:c0:5a:52:b7:95:e9:52:e2:fc:67:02:3c:
06:e3:5f:2b:51:06:f3:82:44:41:1d:a4:94:de:7f:
34:71:18:5d:c2:3f:f6:29:02:b3:86:e7:0f:0f:99:
da:05:4a:57:54:1f:a5:b0:62:02:16:ba:3e:17:ec:
24:18:00:4c:3f:99:f9:ac:2b:ae:dc:f5:06:0c:f0:
e0:bf:d1:14:b6:a2:21:0a:6f:e9:bb:b4:82:2e:41:
86:86:f5:a1:2c:95:4a:70:bd:1e:0f:a1:00:6e:8a:
6d:d5:84:31:d5:1b:20:2b:56:ef:0a:06:58:12:1d:
90:63:42:5e:03:d0:aa:e6:e3:3b:2f:98:84:ff:64:
c7:1d:86:72:7f:d9:32:21:81:a9:07:fd:ce:70:08:
37:6c:23:17:91:3a:82:7a:33:93:ef:c8:c3:cf:e3:
63:a8:41:ca:d6:67:d4:03:1d:71:66:c8:c8:d4:21:
12:80:82:29:e1:38:8f:74:d6:55:ff:9a:d5:49:a9:
a0:fe:33:e1:47:40:d6:e1:05:ab:68:93:16:1e:a4:
4b:f1:b4:9f:f6:4c:f7:3f:a9:16:71:99:07:6f:64:
1d:09:5b:af:f0:86:0b:82:15:db:40:91:0d:13:26:
6e:91:b7:98:43:9a:72:d0:ff:c3:2e:94:9a:45:ab:
0d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:E5:CC:62:FF:E0:FD:11:B9:B8:49:59:49:D2:01:66:D6:50:66:68
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/KuXMYv_g_RG5uElZSdIBZtZQZmg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.143.217.0-194.143.218.255
194.143.223.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:cc:cf:c4:1d:51:e7:d7:d5:c2:fa:e4:93:41:d3:d9:81:5d:
f4:ee:32:e0:35:ba:01:8c:93:1a:4d:f7:d5:27:ac:11:e8:2d:
a8:64:e1:77:a4:f3:e5:e7:7d:6a:7a:72:c5:fc:fd:8d:29:50:
01:c8:52:c9:f1:d6:0a:46:ae:1b:ea:20:7c:da:f0:9b:83:1c:
a6:79:10:39:2d:cc:47:0e:b9:99:e2:47:bd:56:c1:16:2a:f8:
3f:8b:88:e8:d9:8c:b6:6d:37:6d:2a:18:fe:da:79:89:94:4d:
89:7b:b5:76:82:35:05:0f:49:7b:6a:b7:51:e1:ee:e5:98:0b:
c6:99:6d:fc:e9:e4:18:c9:dc:61:52:f4:94:be:56:67:a6:b5:
4a:85:87:2b:fc:cc:b0:5b:2a:eb:0c:98:52:7d:df:9d:e8:e2:
78:f5:6f:2e:c4:b5:6e:3a:2d:5b:b9:7f:7d:c3:3b:81:57:d4:
9e:d8:b4:80:d9:02:02:59:3a:e7:7f:d1:af:18:60:3d:8f:e0:
8b:a0:78:25:3f:32:eb:28:2b:68:42:c4:66:9c:f8:6f:6b:7e:
6b:95:d1:3a:6b:e4:67:48:04:5a:a2:cc:49:16:c3:f0:0b:4b:
f4:23:1c:93:54:fd:11:8c:d4:e9:b2:b0:6f:6f:50:85:9f:cf:
10:0b:1e:89
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:51 2023 by rpki-client on console-fra.rpki-client.org