Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/KV5bF2_A1r6qV8Z9OEGZfw2W0p0.roa
File: KV5bF2_A1r6qV8Z9OEGZfw2W0p0.roa (raw, json)
Hash identifier: YBeM8LAXKzv/51SP/Srn6hqXSG7Jw5dlTlxPfnsOleo=
Subject key identifier: 29:5E:5B:17:6F:C0:D6:BE:AA:57:C6:7D:38:41:99:7F:0D:96:D2:9D
Certificate issuer: /CN=71949b47df313cbab9452da98fcc637608a909bd
Certificate serial: 018BD35EF33D535D8AF2E3B9796B230599E4
Authority key identifier: 71:94:9B:47:DF:31:3C:BA:B9:45:2D:A9:8F:CC:63:76:08:A9:09:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/KV5bF2_A1r6qV8Z9OEGZfw2W0p0.roa
Signing time: Wed 15 Nov 2023 14:24:57 +0000
ROA not before: Wed 15 Nov 2023 14:24:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 28742
IP address blocks: 185.158.30.0/23 maxlen: 23
185.158.28.0/23 maxlen: 23
185.158.30.0/24 maxlen: 24
185.158.29.0/24 maxlen: 24
185.158.31.0/24 maxlen: 24
185.158.28.0/24 maxlen: 24
93.93.16.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d3:5e:f3:3d:53:5d:8a:f2:e3:b9:79:6b:23:05:99:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71949b47df313cbab9452da98fcc637608a909bd
Validity
Not Before: Nov 15 14:24:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=295e5b176fc0d6beaa57c67d3841997f0d96d29d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:35:82:79:03:2a:66:89:39:39:16:13:81:9f:
ac:fd:8b:7e:f4:96:d9:1c:79:e4:c9:f1:25:79:d6:
23:81:30:af:94:3d:f1:bb:15:0e:2a:20:88:72:12:
73:18:43:50:3d:1c:1d:07:b8:44:e9:3b:0b:1e:0e:
ed:83:50:3d:59:67:63:5f:79:a0:7e:4b:ae:fc:88:
6b:0b:82:83:90:f8:f9:1c:8c:a9:c3:06:8c:6a:80:
5f:4e:d2:92:37:c2:31:1f:dd:2c:e6:d1:8f:02:7a:
be:e7:87:45:27:53:08:a4:b0:5f:c3:65:dc:65:e5:
57:bd:b3:68:2c:2e:85:66:e2:b7:2a:c5:10:5b:06:
c9:ec:8f:30:41:f4:19:97:c6:ca:e7:3f:cd:d5:7e:
9c:6a:2e:01:af:67:a5:d5:a4:d8:33:2b:71:e4:ea:
75:6e:a3:d9:0e:56:2e:df:4e:5f:66:e2:a0:4c:03:
45:78:a3:57:12:22:4a:c3:f3:ea:90:74:29:e8:5e:
8b:96:db:5f:ea:2a:04:e2:f4:13:87:20:79:e3:1f:
8a:db:32:c5:fa:60:3d:1d:a9:22:d3:35:68:df:9d:
6b:57:62:40:61:94:30:a3:a3:44:e0:45:70:cc:72:
fb:15:a0:e9:75:27:dc:3c:68:ea:8a:e3:7c:12:04:
3c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:5E:5B:17:6F:C0:D6:BE:AA:57:C6:7D:38:41:99:7F:0D:96:D2:9D
X509v3 Authority Key Identifier:
keyid:71:94:9B:47:DF:31:3C:BA:B9:45:2D:A9:8F:CC:63:76:08:A9:09:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/KV5bF2_A1r6qV8Z9OEGZfw2W0p0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.93.16.0/23
185.158.28.0/22
Signature Algorithm: sha256WithRSAEncryption
49:ad:4d:4b:23:43:d6:22:d8:6c:25:f5:51:c7:ab:ef:b5:a1:
b9:ce:f8:77:d4:7a:f8:e3:e6:c8:16:57:fb:0f:77:c8:d0:f5:
1e:ec:0d:24:ab:64:17:10:37:58:eb:91:fb:d3:19:77:c5:46:
57:36:0b:43:12:98:a0:88:35:d5:68:46:b8:9f:d4:59:c2:05:
27:d6:83:6e:fd:6a:30:bc:44:23:3f:63:2d:64:d3:b7:06:98:
29:5a:5b:f0:60:24:09:66:2b:03:1b:58:a3:d4:81:f0:93:78:
2c:1a:88:05:46:74:b2:86:9a:78:48:48:c3:ae:41:56:96:c5:
83:56:d1:9c:5b:ef:10:fb:79:d6:0d:8f:33:ea:c2:f0:c5:d0:
40:f3:7d:50:0e:31:5c:70:66:a9:14:e9:2f:52:01:99:4b:94:
eb:0a:15:0d:ea:a3:90:8a:e7:b6:de:a1:c9:d2:29:11:a0:80:
b3:8c:79:b9:61:b9:b8:0f:50:8c:59:ee:ca:72:0a:14:5c:0c:
6f:a1:17:d8:9f:c5:09:36:9d:7f:89:7c:9f:1c:21:57:46:d9:
5d:42:de:93:d5:62:5a:fd:29:de:de:ef:bf:f0:38:21:50:f7:
59:69:ca:9f:2e:87:a5:bc:77:ed:07:5d:af:b9:f5:7a:56:44:
40:88:cf:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:02 2023 by rpki-client on console.sobornost.net