Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/ke-CjtLLBX4XMn25_pp82_FLsJg.roa
File: ke-CjtLLBX4XMn25_pp82_FLsJg.roa (raw, json)
Hash identifier: TebA6KHFgDJFjcpP9H6CC7hmOr7sj4YjUL2+0U91PL4=
Subject key identifier: 91:EF:82:8E:D2:CB:05:7E:17:32:7D:B9:FE:9A:7C:DB:F1:4B:B0:98
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018EEE2B1AAB30D576086ECFC9FF8C1DC299
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/ke-CjtLLBX4XMn25_pp82_FLsJg.roa
Signing time: Wed 17 Apr 2024 22:26:25 +0000
ROA not before: Wed 17 Apr 2024 22:26:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203511
IP address blocks: 45.9.28.0/24 maxlen: 24
45.88.138.0/24 maxlen: 24
45.88.139.0/24 maxlen: 24
45.94.171.0/24 maxlen: 24
45.151.2.0/24 maxlen: 24
77.83.37.0/24 maxlen: 24
194.15.52.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 29 Apr 2024 12:54:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:ee:2b:1a:ab:30:d5:76:08:6e:cf:c9:ff:8c:1d:c2:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Apr 17 22:26:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=91ef828ed2cb057e17327db9fe9a7cdbf14bb098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:cb:90:8e:23:2c:8a:0f:b5:7f:d0:e3:97:ef:
16:00:b4:9a:9b:51:d7:b4:81:d6:ea:ad:a1:da:b6:
48:7d:c6:af:ae:9b:c6:8b:ce:c1:c2:d2:46:56:a5:
ea:ad:9b:62:b1:87:9c:1a:d1:02:05:4c:b5:32:57:
13:e1:c3:6e:02:4f:ff:c8:f0:f2:44:f2:eb:8f:16:
71:ac:ca:b5:57:55:54:de:4c:f8:51:66:22:d5:06:
00:1b:ea:c4:e8:b0:0a:02:12:25:f7:32:9d:29:6d:
70:09:58:b6:81:61:b4:9d:95:39:96:91:a0:2d:9f:
8c:9c:6c:f0:a0:7f:b8:4b:9d:d9:66:65:1c:48:2e:
b9:86:af:1f:f7:7b:7f:02:b7:52:8b:ed:07:a5:1d:
b7:24:75:fd:c8:93:40:15:29:8a:ec:2f:a0:bd:18:
26:c7:ae:e5:b4:83:4f:35:83:e5:24:db:33:93:b5:
2b:b4:3d:52:1a:aa:5b:38:cd:58:54:6e:ac:86:f6:
40:18:6a:f6:01:67:fa:54:fd:a5:f8:a0:4a:d2:b1:
85:dd:57:0c:e8:7f:5a:d5:6a:85:7a:9b:19:67:33:
4d:d9:99:fe:3c:78:92:5a:29:3e:34:43:59:25:e5:
aa:42:ba:07:49:0d:9e:3c:2d:b6:a9:85:99:2b:34:
6b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:EF:82:8E:D2:CB:05:7E:17:32:7D:B9:FE:9A:7C:DB:F1:4B:B0:98
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/ke-CjtLLBX4XMn25_pp82_FLsJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.28.0/24
45.88.138.0/23
45.94.171.0/24
45.151.2.0/24
77.83.37.0/24
194.15.52.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:b4:e6:2f:c5:69:96:5d:06:64:91:38:08:31:e2:18:e7:51:
bb:5f:16:9c:ba:3c:00:93:9a:2a:b0:d6:49:1c:35:f5:7b:b6:
b3:2e:fc:16:0f:7c:bc:fa:d5:58:88:a4:57:b4:e7:5f:18:6b:
36:27:ba:d9:d6:26:bd:a4:1e:45:77:40:03:ad:96:3e:57:68:
83:f7:3f:bd:77:bf:a8:0d:da:01:49:c9:38:31:df:c2:c3:ad:
ca:c4:6c:4e:7b:db:51:31:b9:00:0f:8c:74:27:38:c6:3d:0b:
a2:16:4e:49:c8:1e:bc:08:3b:d9:dc:9f:6e:77:a0:4a:3c:1d:
bf:20:30:84:d4:2c:ea:e3:30:16:48:01:85:6a:bb:8e:c6:b7:
71:3c:07:9a:fb:b9:f1:d7:c3:19:48:f0:28:4b:be:2f:99:20:
a3:83:87:25:0b:ba:91:ca:f2:cb:86:4d:49:8a:ed:63:b9:3d:
0a:0e:4e:97:1f:c5:b5:31:f5:bc:34:b8:4d:f8:50:b4:d8:ad:
32:62:0c:bf:f9:b7:af:af:d0:d1:56:d9:7a:b6:4a:24:45:e2:
fd:59:9f:ee:65:6b:2a:95:5d:f8:66:62:4e:96:50:db:de:6c:
83:bb:d3:4b:90:41:d3:99:7d:53:39:7f:c7:ff:f1:57:97:67:
7b:1a:32:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:32 2024 by rpki-client on console-fra.rpki-client.org