Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/1KLGHPRvALtyECPBbEl4gY4YJxI.roa
File: 1KLGHPRvALtyECPBbEl4gY4YJxI.roa (raw, json)
Hash identifier: xEUfsx0DJw57iMJngxHMrgk5R5JaRBAWUdA0dEy9oN8=
Subject key identifier: D4:A2:C6:1C:F4:6F:00:BB:72:10:23:C1:6C:49:78:81:8E:18:27:12
Certificate issuer: /CN=709eb6eaaa49dd6b483e04b1434e4dac79ed9d31
Certificate serial: 018570829DF212E41D873BEE0B8B921468D6
Authority key identifier: 70:9E:B6:EA:AA:49:DD:6B:48:3E:04:B1:43:4E:4D:AC:79:ED:9D:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJ626qpJ3WtIPgSxQ05NrHntnTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/1KLGHPRvALtyECPBbEl4gY4YJxI.roa
Signing time: Mon 02 Jan 2023 03:24:46 +0000
ROA not before: Mon 02 Jan 2023 03:24:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49825
IP address blocks: 195.211.76.0/23 maxlen: 24
195.211.76.0/22 maxlen: 24
195.211.78.0/23 maxlen: 24
194.165.1.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 29 Mar 2023 10:10:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:82:9d:f2:12:e4:1d:87:3b:ee:0b:8b:92:14:68:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=709eb6eaaa49dd6b483e04b1434e4dac79ed9d31
Validity
Not Before: Jan 2 03:24:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d4a2c61cf46f00bb721023c16c4978818e182712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ca:a1:a7:61:e1:0f:32:27:0b:ca:af:71:74:
54:b7:b3:78:07:a8:b1:9a:3b:8f:04:ae:f7:bd:d9:
a4:9e:49:cb:d5:eb:c9:97:e2:56:60:95:32:a2:63:
e8:24:fd:4b:f0:37:a0:be:b1:46:8e:f5:9d:7a:b6:
1d:9e:8e:11:e4:5b:16:94:52:a4:4b:fe:3f:70:f5:
47:6d:2e:19:32:d3:9b:90:e8:bf:78:6a:e6:4b:1d:
f8:dd:5e:54:fc:c3:3b:f8:c4:74:3e:fc:e6:7b:83:
7c:51:e0:49:a6:d2:9d:40:87:45:42:a2:61:74:b6:
c1:a2:58:64:e0:82:04:e7:e3:64:2c:32:30:7a:84:
86:77:33:de:6c:d9:ef:21:5f:9e:88:3d:14:64:8e:
06:2f:e0:81:76:00:81:79:e8:ae:b2:ba:4c:92:2b:
de:a2:84:37:80:34:e1:63:77:12:06:0c:fb:ae:52:
1f:b2:5a:85:cf:a6:c1:cb:97:03:3e:dc:f0:ff:4c:
68:b5:55:57:8e:fc:e1:36:f9:08:f6:ab:19:ff:4e:
f9:a9:ad:99:1c:99:25:8b:4f:0f:1b:3c:5d:0a:5b:
aa:3b:ec:b0:a7:a8:62:d4:f1:94:c8:e9:e0:48:f5:
e1:7d:1b:6a:dd:42:0b:38:67:d8:77:59:2a:ad:91:
cc:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:A2:C6:1C:F4:6F:00:BB:72:10:23:C1:6C:49:78:81:8E:18:27:12
X509v3 Authority Key Identifier:
keyid:70:9E:B6:EA:AA:49:DD:6B:48:3E:04:B1:43:4E:4D:AC:79:ED:9D:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJ626qpJ3WtIPgSxQ05NrHntnTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/1KLGHPRvALtyECPBbEl4gY4YJxI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/cJ626qpJ3WtIPgSxQ05NrHntnTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.165.1.0/24
195.211.76.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:e4:4c:43:77:b0:c3:48:f9:1e:ed:de:21:6e:ca:06:cd:c0:
7c:1c:61:fa:4f:56:b5:1b:bf:ee:35:03:60:41:73:4d:e9:3d:
8b:5f:a4:ae:ef:4f:05:61:54:c1:8f:8b:4f:b7:df:26:b8:ad:
c6:77:64:e7:ae:1f:a7:c7:6e:a4:f6:38:f8:46:9a:42:6d:17:
ca:8f:5d:27:9d:4d:2e:c7:b4:a1:e3:62:0f:d1:a4:5b:2f:09:
5b:75:0d:cb:15:f8:36:80:90:c9:90:80:24:27:91:d0:e5:fd:
f5:fc:08:d3:f0:4a:57:f5:bf:9d:38:52:1c:a7:70:d5:9f:01:
57:19:59:06:0a:32:d1:d2:0f:0a:67:30:05:e4:16:63:af:6c:
4c:26:ee:c7:91:07:15:fe:ee:71:63:2c:3a:4c:99:64:b3:23:
15:95:74:d0:72:86:54:fb:96:87:ca:a4:ad:84:8b:21:2b:2c:
9e:44:82:db:15:47:aa:48:41:1d:7e:d8:8c:f1:39:77:7a:01:
42:ee:ba:6c:36:7d:bd:eb:3c:a3:4b:b4:3c:1e:3d:b3:21:32:
7b:eb:a8:05:d0:24:27:7d:83:b6:2e:3a:f2:03:fc:bf:ae:f4:
4b:79:d2:28:63:e7:d0:cc:9d:70:ae:e1:e3:ce:ac:61:97:2d:
e0:8f:8c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:03 2024 by rpki-client on console-ams.rpki-client.org