Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/KLvM8Wq5JQgkUSkj7ERhc12HzNY.roa
File: KLvM8Wq5JQgkUSkj7ERhc12HzNY.roa (raw, json)
Hash identifier: Kxv/zvuECPKzxbA/fy+blJxL+0QNOrDU6HiSefgKEDA=
Subject key identifier: 28:BB:CC:F1:6A:B9:25:08:24:51:29:23:EC:44:61:73:5D:87:CC:D6
Certificate issuer: /CN=4dd1b2587490ad061cb207176bdeec81a531588c
Certificate serial: 01856E0B0E8CCEE13801150024EAD8DAB030
Authority key identifier: 4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/KLvM8Wq5JQgkUSkj7ERhc12HzNY.roa
Signing time: Sun 01 Jan 2023 15:54:56 +0000
ROA not before: Sun 01 Jan 2023 15:54:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6453
IP address blocks: 80.231.202.0/24 maxlen: 24
5.23.0.0/19 maxlen: 19
80.231.216.0/24 maxlen: 24
80.231.235.0/24 maxlen: 24
195.219.204.0/24 maxlen: 24
80.231.176.0/21 maxlen: 21
195.219.232.0/24 maxlen: 24
195.219.235.0/24 maxlen: 24
195.219.238.0/24 maxlen: 24
195.219.240.0/24 maxlen: 24
195.219.246.0/24 maxlen: 24
80.231.187.0/24 maxlen: 24
195.219.248.0/21 maxlen: 21
195.219.253.0/24 maxlen: 24
195.219.40.0/24 maxlen: 24
80.231.0.0/16 maxlen: 16
80.231.8.0/21 maxlen: 21
80.231.11.0/24 maxlen: 24
80.231.22.0/24 maxlen: 24
195.219.0.0/16 maxlen: 16
195.219.22.0/24 maxlen: 24
80.231.93.0/24 maxlen: 24
80.231.94.0/24 maxlen: 24
80.231.96.0/21 maxlen: 21
195.219.168.0/23 maxlen: 23
80.231.112.0/21 maxlen: 21
80.231.56.0/24 maxlen: 24
80.231.71.0/24 maxlen: 24
2a01:3e0::/32 maxlen: 32
2a01:3e0::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:0b:0e:8c:ce:e1:38:01:15:00:24:ea:d8:da:b0:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd1b2587490ad061cb207176bdeec81a531588c
Validity
Not Before: Jan 1 15:54:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=28bbccf16ab9250824512923ec4461735d87ccd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6e:72:46:a3:e6:be:1e:34:8d:3c:e0:0f:94:
31:6f:b4:5b:b1:39:6f:ed:bc:50:20:76:29:a3:83:
d5:d3:22:b8:ea:5a:ca:6d:b2:55:e7:39:f1:05:22:
38:aa:3b:75:5b:13:98:8f:82:a9:f3:1d:7b:b3:ed:
cb:fc:aa:f1:ac:ff:bc:e0:42:70:f8:b3:a7:03:a4:
17:21:c3:c5:c5:65:a5:29:b2:14:98:6d:a0:c9:74:
fd:79:18:cd:a4:f7:ee:23:b0:2b:86:ca:f0:b5:3f:
14:92:98:af:6b:23:a5:92:50:9d:a5:76:d7:98:5c:
8d:46:f4:8c:7e:6e:24:39:51:74:5d:3a:f7:8a:b0:
35:39:5f:c0:1c:30:4b:21:e2:9a:70:ff:6e:eb:01:
cb:7a:d3:74:13:4a:a8:3d:50:21:6d:b6:5c:5a:88:
98:8a:8f:be:c4:d5:e0:47:e0:2c:64:b4:60:f5:bf:
7a:94:4b:c2:bf:06:45:5b:4d:64:dd:01:d8:b8:1d:
ae:19:87:64:5d:c6:1a:7d:ba:c2:36:87:f7:a1:13:
44:33:70:95:60:73:c7:67:b1:9f:ff:37:ff:cc:ba:
bb:18:e7:d8:2e:f6:61:b0:2f:3d:8a:7a:20:9b:23:
d2:0e:52:96:b1:ec:52:95:35:58:fc:d6:80:dd:c6:
3b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:BB:CC:F1:6A:B9:25:08:24:51:29:23:EC:44:61:73:5D:87:CC:D6
X509v3 Authority Key Identifier:
keyid:4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/KLvM8Wq5JQgkUSkj7ERhc12HzNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.23.0.0/19
80.231.0.0/16
195.219.0.0/16
IPv6:
2a01:3e0::/29
Signature Algorithm: sha256WithRSAEncryption
6e:be:96:d0:da:75:28:63:4e:07:05:36:32:4c:15:de:c3:da:
ab:7c:d0:55:cc:a7:55:a5:b9:67:b8:28:9f:71:03:88:58:78:
93:a4:88:6e:63:c6:0a:f4:2f:0a:c2:ad:e1:f3:93:d7:bf:1c:
b0:49:4f:50:51:2e:8d:57:22:12:3c:13:f8:03:a4:77:2f:a5:
31:f3:34:e0:4b:ee:09:89:c0:a7:be:ce:e3:6d:16:12:c2:ff:
dd:30:c8:e0:43:12:74:40:89:4b:45:fa:9b:6c:e5:3a:4a:50:
43:67:05:5d:3e:66:a1:81:51:d5:8a:5e:63:28:c5:85:b5:b6:
f1:b7:7c:fe:d7:70:02:71:c7:70:53:38:57:73:41:0c:10:2c:
e4:ae:79:5f:9f:bb:8e:20:ef:c2:15:50:10:8f:50:ea:80:bb:
0c:25:5c:ae:7b:eb:49:06:c4:cf:71:1c:b3:f8:24:98:96:af:
8d:09:e9:05:8c:f2:da:08:f6:ed:5f:0c:ed:53:4d:38:6b:a2:
be:0e:a8:be:0a:13:94:e2:d8:8e:5c:02:22:1c:a7:c1:64:06:
49:d6:07:fd:e2:03:ef:d9:da:8b:e6:0b:1b:9f:69:81:2a:48:
96:a0:cc:21:5b:ef:69:4c:55:d6:af:6a:a9:a9:8d:cc:e1:bf:
8e:cf:7b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:30 2024 by rpki-client on console-fra.rpki-client.org