Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/KajNO1-P4__06bkgaujSjVmAj98.roa
File: KajNO1-P4__06bkgaujSjVmAj98.roa (raw, json)
Hash identifier: 5QqpvqLt+YlD+yTib7o4Fd93iFX9G+1gdVnf3rBSDpA=
Subject key identifier: 29:A8:CD:3B:5F:8F:E3:FF:F4:E9:B9:20:6A:E8:D2:8D:59:80:8F:DF
Certificate issuer: /CN=eaa5abe9f7304383198ba1ffa592790ecf2c3ceb
Certificate serial: 018571154279D3AD3907207BFF9D9CC5189F
Authority key identifier: EA:A5:AB:E9:F7:30:43:83:19:8B:A1:FF:A5:92:79:0E:CF:2C:3C:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/KajNO1-P4__06bkgaujSjVmAj98.roa
Signing time: Mon 02 Jan 2023 06:04:56 +0000
ROA not before: Mon 02 Jan 2023 06:04:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60475
IP address blocks: 45.90.242.0/24 maxlen: 24
45.90.242.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 20 Mar 2023 09:08:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:15:42:79:d3:ad:39:07:20:7b:ff:9d:9c:c5:18:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaa5abe9f7304383198ba1ffa592790ecf2c3ceb
Validity
Not Before: Jan 2 06:04:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=29a8cd3b5f8fe3fff4e9b9206ae8d28d59808fdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8a:7f:a4:d0:54:ed:c7:f8:62:55:45:bd:3d:
83:1d:cd:46:2e:63:50:0d:fe:74:c0:14:8c:84:3b:
f7:57:ce:4b:7b:25:5b:6b:06:31:c5:64:c3:4f:88:
40:9d:d1:37:6d:de:c5:72:6a:af:91:a2:c5:b5:9e:
0f:1f:d3:82:49:5b:98:10:da:db:f6:be:af:ca:64:
b4:f9:cb:f4:5f:0c:14:a2:fb:5c:6b:53:b0:1b:96:
96:06:ae:98:05:6f:9c:87:be:f0:37:47:52:df:2b:
72:d5:8d:3f:77:75:4d:e9:21:f8:cd:55:e8:7d:6e:
b5:f9:db:eb:bc:a1:bd:88:a0:f6:e2:bf:dd:67:dd:
39:85:c8:f6:ce:5d:ea:dc:79:0d:54:7e:f5:64:f0:
c3:60:5e:ce:f7:1d:d8:1f:83:58:a0:14:14:53:4a:
d4:d7:c7:b0:17:2c:a6:75:37:3e:57:94:6c:3f:ec:
5b:48:d9:6b:19:4a:aa:b4:b6:51:bb:d5:9f:60:f9:
d3:27:86:ab:fe:e7:97:3b:71:33:45:16:04:3a:a4:
5a:d5:2c:bb:67:a5:0d:45:e7:76:c2:1f:11:49:b0:
16:b6:57:2a:eb:8a:27:89:19:aa:73:dc:6f:7f:d9:
31:8e:8a:33:53:bc:3e:f8:3e:b2:d4:ac:03:d3:33:
36:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:A8:CD:3B:5F:8F:E3:FF:F4:E9:B9:20:6A:E8:D2:8D:59:80:8F:DF
X509v3 Authority Key Identifier:
keyid:EA:A5:AB:E9:F7:30:43:83:19:8B:A1:FF:A5:92:79:0E:CF:2C:3C:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/KajNO1-P4__06bkgaujSjVmAj98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.242.0/23
Signature Algorithm: sha256WithRSAEncryption
21:4a:bc:0a:35:5f:a4:c2:ae:df:fb:da:e0:ef:d1:85:e6:17:
83:86:3e:d9:49:14:c9:6e:cd:27:89:be:67:77:4e:e4:3d:a8:
f4:1c:46:fa:25:36:83:fa:eb:7c:81:d3:29:50:fd:c8:d5:13:
f0:d2:75:87:f7:43:ba:b6:2b:f3:c9:a5:65:36:55:26:e7:4b:
d6:c5:9b:30:8d:65:fb:ed:44:3a:4e:a0:01:65:c7:b1:75:04:
4d:c1:f7:b8:2a:4d:60:54:14:63:f3:11:92:ba:a5:67:a2:bd:
dd:6b:a8:3f:7d:2d:03:4e:a5:43:2c:5d:ee:1c:21:74:48:69:
20:9f:7e:81:5c:30:f2:68:fb:86:e5:c8:d7:be:f8:42:82:9e:
ae:ad:3d:43:ea:f6:84:c6:77:ea:e7:43:8a:8c:99:7c:b4:7b:
12:40:5e:b9:3c:f3:a9:96:68:e8:10:d3:3f:74:b3:8a:da:a9:
9a:71:67:6a:ac:d5:31:a7:0e:a9:b2:86:a2:89:29:fb:33:f9:
ce:99:73:06:6c:5f:a8:52:26:08:8f:7d:bc:21:3b:a9:e9:29:
b3:c3:5f:70:6e:4e:34:3d:c1:62:da:91:39:26:7b:83:34:0f:
bf:ba:0e:38:89:9d:3e:77:20:38:f0:db:31:b8:cf:7e:49:6d:
f5:86:3b:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:55 2024 by rpki-client on console-fra.rpki-client.org