Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/Kmp6Ig7NVTdzoR9_tZpjUyqnyi8.roa
File: Kmp6Ig7NVTdzoR9_tZpjUyqnyi8.roa (raw, json)
Hash identifier: Du9ELnGKPvRcwUKE7pz+krxNi6ZnqWLRDG1erbhdvA4=
Subject key identifier: 2A:6A:7A:22:0E:CD:55:37:73:A1:1F:7F:B5:9A:63:53:2A:A7:CA:2F
Certificate issuer: /CN=a647893fb5b348e68a66d55a28f278cbf3931df4
Certificate serial: 018C3A52337FE31406B01A9BAB34D26E44C0
Authority key identifier: A6:47:89:3F:B5:B3:48:E6:8A:66:D5:5A:28:F2:78:CB:F3:93:1D:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/Kmp6Ig7NVTdzoR9_tZpjUyqnyi8.roa
Signing time: Tue 05 Dec 2023 14:11:54 +0000
ROA not before: Tue 05 Dec 2023 14:11:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31727
IP address blocks: 185.207.132.0/23 maxlen: 23
185.207.135.0/24 maxlen: 24
185.170.152.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 06 Dec 2023 11:44:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:3a:52:33:7f:e3:14:06:b0:1a:9b:ab:34:d2:6e:44:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a647893fb5b348e68a66d55a28f278cbf3931df4
Validity
Not Before: Dec 5 14:11:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2a6a7a220ecd553773a11f7fb59a63532aa7ca2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1e:01:76:e1:46:9b:85:48:02:b1:55:57:48:
c7:73:8c:fd:5c:47:1a:8f:e3:6b:c0:f9:a1:5e:db:
cc:6a:ce:6b:f8:41:0e:b7:ec:21:c6:f2:65:a7:9c:
4a:dc:63:64:b7:3f:67:05:17:f1:9e:41:57:0e:49:
61:f7:99:42:64:a1:57:d6:03:1b:ec:60:a1:4f:02:
62:c3:23:80:dc:82:dd:03:49:28:15:86:d7:de:06:
0c:24:14:7d:e3:3f:15:b7:23:47:68:f3:33:88:51:
26:8a:23:1a:58:e3:fa:0f:54:f0:ee:95:73:a9:e3:
6d:f0:9c:fc:ff:ec:a5:1f:5a:65:c3:f7:e1:f6:33:
78:96:6e:ed:09:eb:42:b0:31:91:3e:8e:59:d8:87:
ce:f9:50:0a:9d:57:c1:79:81:72:fa:3c:4e:0e:72:
9d:18:45:fa:12:69:44:6f:2e:59:36:e4:af:27:3e:
7f:c2:a3:73:ea:34:37:8d:cc:f1:ce:3a:0b:66:50:
1f:a8:6a:9d:6b:06:d4:49:59:01:cd:47:4c:32:49:
01:11:a5:d8:bd:ad:23:ba:97:e0:2a:c0:8a:1e:b8:
7b:43:69:2b:cc:12:9d:f8:ce:10:a3:e0:be:3b:7b:
f8:09:d9:ea:73:bd:c1:4f:71:26:c0:bf:57:fa:09:
00:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:6A:7A:22:0E:CD:55:37:73:A1:1F:7F:B5:9A:63:53:2A:A7:CA:2F
X509v3 Authority Key Identifier:
keyid:A6:47:89:3F:B5:B3:48:E6:8A:66:D5:5A:28:F2:78:CB:F3:93:1D:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/Kmp6Ig7NVTdzoR9_tZpjUyqnyi8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.170.152.0/22
185.207.132.0/23
185.207.135.0/24
Signature Algorithm: sha256WithRSAEncryption
46:01:42:09:94:e1:1d:13:d7:1e:e1:fd:99:2b:62:7f:eb:ca:
d3:78:da:a5:d9:cc:9f:dc:67:e2:da:59:96:38:26:36:f0:f8:
61:a5:b1:04:6e:ac:fa:c0:92:ee:b8:42:69:60:6b:fd:16:27:
c5:5c:77:e8:94:3f:8f:52:a9:78:c7:0d:68:24:54:18:95:5b:
4b:31:b2:b2:31:21:ed:5b:e1:0a:a1:d2:73:19:83:ea:e6:59:
57:c0:bc:d1:bb:73:d6:66:a1:92:ae:3a:f4:80:e7:89:29:6b:
c0:a6:50:51:53:75:78:44:7c:39:7c:27:84:27:51:45:b1:7f:
21:cd:6b:dc:7b:8f:86:02:71:40:67:a5:2e:36:3e:4c:7c:c1:
9d:31:29:44:91:e6:bc:9c:e6:a3:ee:1b:23:ed:49:28:15:a8:
60:74:90:fa:3e:04:4f:ee:bb:6c:db:85:21:19:82:60:69:9b:
b6:8c:41:b4:06:a4:dd:24:4e:c6:87:e0:29:e8:bf:85:fd:7f:
d5:26:f5:51:88:27:97:b5:87:be:54:83:93:9a:88:51:32:6f:
61:43:4e:b8:aa:4d:35:3b:4f:af:7f:30:98:a6:05:06:67:9d:
a2:36:57:78:c0:c1:3e:b1:8b:2e:15:dd:d1:5c:5d:19:69:31:
8c:68:e4:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:43 2024 by rpki-client on console-fra.rpki-client.org