Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/K0VK2VgY5qYiVws2NQJk-3xv9wE.roa
File: K0VK2VgY5qYiVws2NQJk-3xv9wE.roa (raw, json)
Hash identifier: 020cxf5KpIM57MEzpiPyg/p/XHsuH+xXyCYGTN7bfKU=
Subject key identifier: 2B:45:4A:D9:58:18:E6:A6:22:57:0B:36:35:02:64:FB:7C:6F:F7:01
Certificate issuer: /CN=2160b2b1c829d88936b1adaeec97fdd1b40d41e5
Certificate serial: 01856D4AE6BE2B3B80B8BEA843D4C91E4187
Authority key identifier: 21:60:B2:B1:C8:29:D8:89:36:B1:AD:AE:EC:97:FD:D1:B4:0D:41:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/K0VK2VgY5qYiVws2NQJk-3xv9wE.roa
Signing time: Sun 01 Jan 2023 12:25:03 +0000
ROA not before: Sun 01 Jan 2023 12:25:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48716
IP address blocks: 90.156.230.0/24 maxlen: 24
188.225.31.0/24 maxlen: 24
217.151.230.0/24 maxlen: 24
2a03:6f06::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 17 Jul 2023 13:08:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:4a:e6:be:2b:3b:80:b8:be:a8:43:d4:c9:1e:41:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2160b2b1c829d88936b1adaeec97fdd1b40d41e5
Validity
Not Before: Jan 1 12:25:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2b454ad95818e6a622570b36350264fb7c6ff701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f3:6d:af:45:77:d6:2a:01:3d:b6:2c:ca:f5:
0d:82:ac:9c:9d:e7:8a:e2:d0:89:c4:a7:cc:34:57:
c9:cd:97:31:2b:a9:5e:6e:4c:10:3c:ed:2f:0a:aa:
da:fe:7a:29:9f:2e:e4:26:62:ea:58:f7:57:6a:31:
f1:12:9f:38:6c:fe:ff:02:16:fe:38:8f:32:fe:00:
85:7d:e8:22:1e:df:26:f8:ff:12:ba:11:c4:07:84:
55:80:45:5b:2c:d8:dd:f6:23:5a:6b:23:97:d1:47:
3b:b0:8f:07:73:44:ce:8e:b0:e8:25:94:e0:2f:f3:
a2:80:35:46:04:76:3a:f7:73:8b:98:3c:4b:33:c7:
2f:db:c9:c4:4b:e5:5e:67:5d:7c:7c:ea:c5:17:be:
15:b7:85:83:92:a7:c5:f1:8c:a8:37:fc:b9:d5:15:
6a:c8:47:de:78:0c:3a:1e:bd:d2:e5:8d:0c:6d:6a:
dc:5b:b2:d8:88:3e:93:88:69:a1:8c:1a:76:80:da:
90:c5:51:b2:d9:5b:4e:d4:08:b6:38:c4:6d:ae:8d:
70:9b:81:93:be:38:48:b1:ce:97:4c:1a:7a:43:5f:
61:fb:b4:43:9e:97:69:05:b8:6f:30:3a:75:fa:79:
20:9e:b9:1f:69:5b:c8:c4:d4:3d:a0:d0:2a:76:e2:
1e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:45:4A:D9:58:18:E6:A6:22:57:0B:36:35:02:64:FB:7C:6F:F7:01
X509v3 Authority Key Identifier:
keyid:21:60:B2:B1:C8:29:D8:89:36:B1:AD:AE:EC:97:FD:D1:B4:0D:41:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/K0VK2VgY5qYiVws2NQJk-3xv9wE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.156.230.0/24
188.225.31.0/24
217.151.230.0/24
IPv6:
2a03:6f06::/32
Signature Algorithm: sha256WithRSAEncryption
75:05:0a:23:73:e9:96:dd:d5:30:ce:90:5f:3a:6b:1f:d4:9a:
3e:ef:72:cf:ca:40:df:78:2a:71:b2:b1:98:2f:60:88:74:ef:
d0:8d:48:9c:5e:bd:d6:a5:ce:50:0f:9b:61:0f:c3:ba:7e:32:
73:4c:51:b2:79:1c:fb:03:07:d3:94:60:46:bb:52:f6:c9:b3:
4c:6c:e1:fb:c0:f8:a2:01:6b:e5:9b:74:6d:0a:3e:b0:d4:14:
44:fa:6c:ae:25:5e:3d:ac:4e:03:2a:f7:a6:91:85:12:4b:77:
28:c0:a7:35:fd:6d:6b:75:5f:06:6d:2a:f7:6c:3d:01:2b:f3:
72:58:0d:7b:9c:26:69:21:1a:d4:db:9f:c9:f0:f0:8d:d2:43:
35:53:4a:ce:18:c7:2b:a7:e7:c7:91:22:b5:32:88:d5:a2:0e:
b7:d5:64:2a:60:22:66:a5:ac:31:27:d2:82:d3:9e:ed:4c:e4:
8b:49:2f:35:cd:c5:9d:71:e1:a7:ca:53:ff:f1:ab:70:d1:19:
bc:ce:d0:bf:68:d0:08:65:11:df:12:6b:8d:48:49:4c:bb:c4:
75:2a:e2:15:73:5a:98:f6:0e:f3:cc:60:3c:79:2c:ef:cc:c1:
e0:5c:e4:aa:ba:8b:a0:0a:98:7f:3c:52:34:ce:99:60:40:d6:
3c:1a:7b:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:03 2024 by rpki-client on console-ams.rpki-client.org