Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/KuZblbvcJDKWkbRtSKfeKdMauDU.roa
File: KuZblbvcJDKWkbRtSKfeKdMauDU.roa (raw, json)
Hash identifier: 2kwDv5MomR6BoKtSzNXdwyR9QJk9p4PEQt5sj0AqF9c=
Subject key identifier: 2A:E6:5B:95:BB:DC:24:32:96:91:B4:6D:48:A7:DE:29:D3:1A:B8:35
Certificate issuer: /CN=80043f23936622824111e8865a50002067d95a62
Certificate serial: 018570CBD742E87F35791E7DDAD59DD9D6AB
Authority key identifier: 80:04:3F:23:93:66:22:82:41:11:E8:86:5A:50:00:20:67:D9:5A:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/KuZblbvcJDKWkbRtSKfeKdMauDU.roa
Signing time: Mon 02 Jan 2023 04:44:45 +0000
ROA not before: Mon 02 Jan 2023 04:44:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42160
IP address blocks: 185.18.148.0/23 maxlen: 23
2a04:b80:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:cb:d7:42:e8:7f:35:79:1e:7d:da:d5:9d:d9:d6:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80043f23936622824111e8865a50002067d95a62
Validity
Not Before: Jan 2 04:44:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2ae65b95bbdc24329691b46d48a7de29d31ab835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fe:bb:17:34:7b:18:e5:f7:9f:02:de:66:cd:
53:c2:f4:3b:69:4a:2c:65:85:10:c2:c9:40:8d:f5:
bd:5f:a6:11:a3:be:75:99:be:9a:5d:22:00:27:7b:
b1:3e:4a:71:47:82:77:e6:dd:f5:89:cb:c2:eb:5f:
05:05:70:bf:94:e8:31:d3:2d:01:0c:c5:74:a1:2a:
e8:a8:b6:5d:93:ba:9c:0d:40:11:91:a8:c1:94:c4:
dd:22:30:17:73:d5:e8:ab:0d:74:a2:69:a4:d4:56:
e0:e8:bc:6b:a0:7c:c9:d6:da:9a:77:9a:56:8b:f5:
1a:fb:3f:d1:29:fd:49:b4:65:57:76:66:17:5c:74:
68:6d:48:d6:c7:f8:d9:72:a6:45:a7:33:18:9c:6b:
3d:dc:92:d0:40:c4:b9:e4:38:99:bf:ce:9c:fc:e4:
63:61:1b:11:65:13:1e:9a:9a:f0:2e:6e:d6:19:88:
32:66:2a:a0:48:ec:a3:eb:1a:8d:d6:49:08:ad:f2:
3d:a8:ff:b9:29:52:0d:43:e1:fc:76:b7:e9:5e:b1:
77:58:ee:16:72:bf:3b:ce:e2:c8:01:b5:c4:5e:ac:
aa:64:3b:63:e6:e6:9a:92:59:6b:05:b3:1f:99:ed:
bb:bb:66:c8:2f:95:ed:5c:af:d4:fa:31:dc:a7:03:
34:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:E6:5B:95:BB:DC:24:32:96:91:B4:6D:48:A7:DE:29:D3:1A:B8:35
X509v3 Authority Key Identifier:
keyid:80:04:3F:23:93:66:22:82:41:11:E8:86:5A:50:00:20:67:D9:5A:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/KuZblbvcJDKWkbRtSKfeKdMauDU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/39f28c-9eb8-4cae-8d98-68cdc692ad09/1/gAQ_I5NmIoJBEeiGWlAAIGfZWmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.18.148.0/23
IPv6:
2a04:b80:1::/48
Signature Algorithm: sha256WithRSAEncryption
b0:01:5d:11:3d:19:48:8a:e7:a6:c5:67:8b:63:b6:a6:ad:73:
0d:dd:41:ba:bc:d8:3f:16:6c:a6:1a:9a:6d:a7:8f:48:95:15:
84:82:d7:af:9e:0a:44:53:f3:ec:f0:ae:55:f5:69:9d:32:7a:
8b:82:71:6f:1a:96:c2:5c:5c:a5:42:a2:a4:bd:8f:99:b2:c8:
02:2c:79:e2:bf:97:39:a8:55:28:c5:54:3c:00:5a:ad:b0:6b:
7e:20:ef:26:12:83:ef:fd:56:06:c0:98:4d:2c:8d:c0:75:4f:
48:9d:33:65:c7:b3:d7:e9:72:9e:63:c3:27:cb:06:24:a8:33:
49:b9:9f:7b:18:c5:28:52:d8:65:4c:a7:b2:ab:2c:25:29:77:
7a:04:55:99:1d:69:73:07:b8:9d:a1:0e:f2:64:66:ee:bc:08:
55:47:5e:14:46:55:91:b8:ea:4d:d3:14:f4:b8:fc:1b:25:11:
7e:9f:05:b4:a0:3f:b2:e7:84:61:1e:b3:49:a6:25:e3:1b:7a:
90:ec:82:0b:2d:6b:a5:12:6a:e8:e5:88:ca:00:39:b5:1f:5f:
7d:76:61:b7:f3:a3:dc:bf:7d:0f:11:cd:62:3d:f9:8e:29:2e:
c0:83:0a:e6:6a:8d:68:a0:fd:f4:68:26:b2:82:d5:0a:4e:f1:
ac:45:88:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:46 2024 by rpki-client on console-ams.rpki-client.org