Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/80b930-ad97-403a-9fdb-0156d00272b7/1/KNLqop9xui1KZOi_C3BpeKGYCpA.roa
File: KNLqop9xui1KZOi_C3BpeKGYCpA.roa (raw, json)
Hash identifier: 1ejMRKQRfYusiNdq4KrHoLUph773X0gGOw1ITpAaDVE=
Subject key identifier: 28:D2:EA:A2:9F:71:BA:2D:4A:64:E8:BF:0B:70:69:78:A1:98:0A:90
Certificate issuer: /CN=75e8b2b28bba3dc4e861d5cbf5bc1cc98c89e576
Certificate serial: 01857139E7E41F2B3984030143241608FCFE
Authority key identifier: 75:E8:B2:B2:8B:BA:3D:C4:E8:61:D5:CB:F5:BC:1C:C9:8C:89:E5:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/deiysou6PcToYdXL9bwcyYyJ5XY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/80b930-ad97-403a-9fdb-0156d00272b7/1/KNLqop9xui1KZOi_C3BpeKGYCpA.roa
Signing time: Mon 02 Jan 2023 06:44:58 +0000
ROA not before: Mon 02 Jan 2023 06:44:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202470
IP address blocks: 213.109.207.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:39:e7:e4:1f:2b:39:84:03:01:43:24:16:08:fc:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75e8b2b28bba3dc4e861d5cbf5bc1cc98c89e576
Validity
Not Before: Jan 2 06:44:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=28d2eaa29f71ba2d4a64e8bf0b706978a1980a90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d3:01:f5:ff:8e:3a:e8:95:2a:98:6d:70:37:
50:c8:44:dc:75:b0:ae:d2:ed:81:fd:e8:52:a5:ba:
ad:ef:41:44:55:10:ca:69:9a:95:77:b7:eb:cc:9f:
35:26:6c:1f:a4:68:6c:50:26:e6:85:d5:ca:bf:3e:
60:50:54:dd:cd:43:2a:87:3b:ff:1b:0b:20:b7:6d:
f4:3a:a8:29:90:62:b5:25:dd:1b:e9:58:07:e8:4e:
47:db:09:aa:48:68:ab:63:c8:5c:6f:9a:b3:e8:41:
7d:4c:91:88:03:87:aa:f4:f1:fc:a3:16:60:60:b7:
e1:b5:60:08:92:b6:81:c8:0f:40:12:4a:4f:ab:8e:
6a:48:b4:51:a2:e9:91:d4:88:59:7e:c3:84:65:04:
96:4a:6a:db:36:9a:f9:99:7b:e3:31:a6:41:55:e5:
e5:d1:50:9c:10:ee:d4:64:2b:6d:fc:e5:6a:48:12:
bc:27:7c:da:25:f6:e9:c3:51:bd:a8:0d:67:5d:8e:
92:47:68:9e:b9:19:2f:95:1c:b3:89:93:c6:64:1a:
9b:76:db:07:4e:75:2e:e1:b8:42:a6:37:89:8f:92:
05:d5:e1:56:11:dc:b5:84:ab:45:d2:0b:60:91:ea:
25:9c:b0:cf:b9:97:9d:10:6b:a7:60:a3:7b:be:aa:
6f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:D2:EA:A2:9F:71:BA:2D:4A:64:E8:BF:0B:70:69:78:A1:98:0A:90
X509v3 Authority Key Identifier:
keyid:75:E8:B2:B2:8B:BA:3D:C4:E8:61:D5:CB:F5:BC:1C:C9:8C:89:E5:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/deiysou6PcToYdXL9bwcyYyJ5XY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/80b930-ad97-403a-9fdb-0156d00272b7/1/KNLqop9xui1KZOi_C3BpeKGYCpA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/80b930-ad97-403a-9fdb-0156d00272b7/1/deiysou6PcToYdXL9bwcyYyJ5XY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.109.207.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:46:ee:20:81:f1:6e:47:07:39:6c:83:bd:05:9a:aa:d6:03:
a9:69:9d:14:e8:c3:56:2e:5c:09:15:cb:78:c7:5c:9b:d6:83:
d4:82:6f:69:88:71:01:43:96:02:b6:1f:cd:85:32:7f:30:1a:
22:98:28:bc:1a:73:97:ed:8a:69:cf:71:2f:a4:7e:a1:64:6b:
f2:ca:3c:a5:10:1f:a6:bc:d7:f5:df:d0:79:77:ef:90:12:d3:
cd:0a:1c:3b:c8:fa:7b:bf:8c:99:50:3e:50:c1:f8:12:8f:bf:
d8:a0:07:34:6c:79:17:49:86:8e:d6:9b:db:9f:09:44:34:c8:
37:66:82:81:d9:e4:1a:26:6c:09:c9:64:f1:96:96:a1:7b:2d:
a0:b7:b6:74:82:60:54:91:ac:9c:43:9c:43:55:24:a6:12:d8:
70:04:a7:2b:7c:66:3f:c4:4f:35:f4:7c:3d:c1:55:b5:10:6a:
68:c5:ab:f3:79:c6:95:00:15:68:e3:b8:66:f0:80:e2:c4:f3:
c3:55:8a:95:ab:09:78:8b:25:27:75:3c:a9:72:09:6b:03:77:
cc:e0:ef:cf:76:98:e8:cd:34:3e:19:79:8b:05:12:a4:2e:3d:
16:06:9b:02:f3:cd:2f:84:50:32:33:23:53:c1:83:49:e5:8d:
a8:f9:16:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 02:56:31 2024 by rpki-client on console.sobornost.net