Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/KAGTP2OuuJqPxR6qGu0nJkmCy3M.roa
File: KAGTP2OuuJqPxR6qGu0nJkmCy3M.roa (raw, json)
Hash identifier: cK5ge//wmxHVnyoWPCw6cQDXJzOk6uUIeFtn76Lc3Ys=
Subject key identifier: 28:01:93:3F:63:AE:B8:9A:8F:C5:1E:AA:1A:ED:27:26:49:82:CB:73
Certificate issuer: /CN=081868ee84c5f27d9169d243c337b74b6ff8c14d
Certificate serial: 01856D6F4B0B43CA06531DEA8E616193E3A5
Authority key identifier: 08:18:68:EE:84:C5:F2:7D:91:69:D2:43:C3:37:B7:4B:6F:F8:C1:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBho7oTF8n2RadJDwze3S2_4wU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/KAGTP2OuuJqPxR6qGu0nJkmCy3M.roa
Signing time: Sun 01 Jan 2023 13:04:48 +0000
ROA not before: Sun 01 Jan 2023 13:04:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198682
IP address blocks: 185.140.136.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:6f:4b:0b:43:ca:06:53:1d:ea:8e:61:61:93:e3:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081868ee84c5f27d9169d243c337b74b6ff8c14d
Validity
Not Before: Jan 1 13:04:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2801933f63aeb89a8fc51eaa1aed27264982cb73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fe:9c:d1:08:f2:90:82:c9:ef:7e:f4:49:e2:
b5:d2:77:ae:d3:18:f0:48:fa:ba:4d:e9:a8:65:40:
b8:11:b8:da:ac:5e:fb:67:6a:3b:80:bb:bf:7d:80:
14:9b:25:a5:44:da:c9:91:04:5e:45:b8:95:68:24:
86:98:14:b7:fd:dc:cf:73:35:2b:c1:03:c8:29:5c:
2e:3a:0e:4c:b2:ec:6c:49:32:4e:26:eb:24:e0:d1:
0b:5e:f7:de:d3:ef:32:ab:1a:65:34:19:a9:aa:9e:
d7:b0:91:b0:42:d7:5c:10:1f:32:dc:a5:58:4b:d4:
15:cc:e6:0d:8f:3f:77:38:cc:d4:97:af:b5:18:12:
16:13:14:d0:4e:f7:a8:26:a1:d5:29:04:c6:f8:a1:
75:9d:73:48:65:4c:47:f0:66:74:2d:0e:0f:4f:07:
e9:e9:b2:dd:b3:b1:5a:5a:8b:fc:72:f6:bb:06:03:
18:c9:d2:9d:f1:7c:e9:56:c6:b9:2a:d3:40:ba:56:
52:20:28:23:fe:4a:38:e8:31:76:51:1f:23:5f:1f:
89:ba:10:00:21:e2:33:6f:be:85:e9:4e:90:08:6c:
23:a3:36:55:2a:fa:6d:5a:a7:f8:bc:e9:c5:0e:52:
7d:a4:00:74:a7:e9:66:3d:e4:e4:7e:1a:91:40:2d:
4e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:01:93:3F:63:AE:B8:9A:8F:C5:1E:AA:1A:ED:27:26:49:82:CB:73
X509v3 Authority Key Identifier:
keyid:08:18:68:EE:84:C5:F2:7D:91:69:D2:43:C3:37:B7:4B:6F:F8:C1:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBho7oTF8n2RadJDwze3S2_4wU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/KAGTP2OuuJqPxR6qGu0nJkmCy3M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.140.136.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:1c:14:5b:b3:53:25:44:9e:76:62:af:b1:db:6d:99:db:b6:
96:0a:c2:ad:4d:76:bc:99:ea:51:a2:d7:32:19:b1:1e:c2:91:
00:3b:53:86:7e:0b:27:6e:d5:6a:3b:33:24:48:50:d3:fd:ff:
52:71:51:11:89:fb:e3:5a:55:40:77:f6:61:6b:3f:d7:36:5c:
a8:19:cc:e5:ee:00:fb:7b:16:4c:97:99:53:fc:f7:4a:a4:68:
df:d1:fd:d7:d8:54:38:c8:28:43:cb:d8:2c:36:6b:7f:41:1d:
4a:0b:cb:6c:72:75:d9:77:9a:7b:0a:dc:84:1c:5b:12:16:f6:
d1:0b:9d:58:38:82:46:29:02:65:c7:4f:80:99:47:0c:56:ca:
e2:f4:de:93:ac:bf:ea:59:f2:35:da:9f:6b:6d:94:94:a4:b6:
f5:e9:af:cd:98:64:4c:36:f7:d5:a7:a7:50:72:1d:b6:a7:7a:
41:f8:8b:68:52:81:c1:4d:4d:33:1a:46:d7:d6:01:7f:68:98:
99:5e:d8:11:a0:b1:36:87:8b:78:35:9b:89:14:87:ca:f0:7b:
95:f5:43:af:ff:91:f8:d7:9e:10:7d:a3:7d:2e:c4:e6:ab:bd:
98:16:f9:88:44:a1:e1:eb:6d:1a:7e:de:bf:5b:db:57:88:3f:
6a:1f:2e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 16:34:52 2024 by rpki-client on console.sobornost.net