Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/kkJb_2DQ0AYkbHq3bxGLH66cq3Q.roa
File: kkJb_2DQ0AYkbHq3bxGLH66cq3Q.roa (raw, json)
Hash identifier: BVnxDcmTzNRWS2sEOlZZDxUquqxUGtWvj0fFC+nwUlg=
Subject key identifier: 92:42:5B:FF:60:D0:D0:06:24:6C:7A:B7:6F:11:8B:1F:AE:9C:AB:74
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 01876603479B2916D6116404D829B8766672
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/kkJb_2DQ0AYkbHq3bxGLH66cq3Q.roa
Signing time: Sun 09 Apr 2023 12:35:03 +0000
ROA not before: Sun 09 Apr 2023 12:35:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50053
IP address blocks: 88.151.194.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:66:03:47:9b:29:16:d6:11:64:04:d8:29:b8:76:66:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Apr 9 12:35:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=92425bff60d0d006246c7ab76f118b1fae9cab74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:84:e9:d5:b0:fb:c3:10:19:69:83:d2:44:e4:
b7:06:66:93:60:b6:32:d8:d7:89:9e:a1:56:9b:d0:
34:e6:6e:4d:39:60:0f:f2:0d:b4:fb:2b:f1:d0:97:
de:c3:f4:f6:7c:1e:6f:57:84:e9:0b:cd:d9:bb:b2:
ee:2b:2b:9c:c3:8d:99:ae:b9:39:e6:6e:50:ec:c5:
90:df:a5:3a:d8:ec:4e:df:78:bd:b9:52:47:a5:87:
0d:39:b5:96:d7:89:90:2e:e7:ee:9e:6e:67:03:a8:
f7:90:79:08:fd:c1:5e:86:50:4f:78:31:08:8e:33:
b5:8a:ad:6c:3c:0e:16:f0:52:ad:90:33:6e:4a:7d:
5a:a0:2a:e0:c0:38:21:43:0b:9d:d1:72:d9:72:b2:
ce:f2:bb:94:dc:d6:c9:43:81:17:9f:79:01:d1:07:
1c:8d:9e:69:74:14:7d:f8:e0:b1:cf:73:67:63:29:
f8:cb:21:8f:25:2e:29:d7:b1:ee:d6:3d:44:4e:64:
83:25:64:1d:7d:94:0e:e1:2f:e5:11:9d:90:a4:e7:
84:8c:d9:8f:bc:2f:f9:99:c5:a1:30:0f:08:db:ef:
73:f3:bd:9a:10:a9:18:ff:e5:89:c9:a8:ff:1c:46:
ef:30:d3:f3:01:7a:63:fb:32:a9:bf:6f:d9:9a:42:
46:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:42:5B:FF:60:D0:D0:06:24:6C:7A:B7:6F:11:8B:1F:AE:9C:AB:74
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/kkJb_2DQ0AYkbHq3bxGLH66cq3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.151.194.0/24
Signature Algorithm: sha256WithRSAEncryption
d4:64:4d:3c:81:7c:b4:74:57:62:03:fb:90:35:41:bb:e5:14:
22:c9:1c:a0:f6:b2:a4:a3:e9:9d:ef:ee:3a:73:92:0b:07:af:
e3:65:36:6b:c4:e1:87:7b:cd:f9:ac:08:93:2d:3d:48:e5:db:
a2:c6:f4:da:8f:11:fa:b7:70:0e:55:1f:46:a6:67:36:78:c4:
2f:e0:f9:c7:b7:66:cf:03:68:ea:5f:c0:a3:70:d1:20:3c:86:
e1:67:4e:37:13:1c:29:83:af:f1:08:5b:a9:71:a7:9b:28:7b:
37:67:45:50:26:b3:0f:9d:fe:55:dd:7c:8d:43:5b:40:88:bb:
ac:63:09:64:fa:7f:84:63:66:07:89:46:49:1a:57:0e:28:59:
eb:a5:be:34:c1:35:9c:84:ca:2c:41:4b:67:4d:96:4d:c5:4f:
03:49:26:1b:57:e1:a0:2e:16:e6:56:f7:a8:bc:2d:6a:58:35:
09:08:ba:45:99:59:63:bf:d1:e6:a9:d4:bd:2a:0c:aa:29:c7:
75:f5:26:83:14:08:b4:7f:2b:86:6d:ae:82:f2:49:f0:56:78:
be:b8:65:39:24:98:c6:df:6f:c6:a8:ee:43:7b:f6:58:0b:f7:
b5:3f:74:d8:5a:de:ab:f7:93:05:16:99:c8:d9:c5:46:ad:55:
21:84:37:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:01 2023 by rpki-client on console-fra.rpki-client.org