Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/KAEK_tP1yn6vA1fdAiLOrYGf_Oo.roa
File: KAEK_tP1yn6vA1fdAiLOrYGf_Oo.roa (raw, json)
Hash identifier: 8PtmKeTm73W95R9P1IvhUsPjQqdBR6fwmNOSfv+VKW8=
Subject key identifier: 28:01:0A:FE:D3:F5:CA:7E:AF:03:57:DD:02:22:CE:AD:81:9F:FC:EA
Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Certificate serial: 0191DE509742A4A0400536F4913F5BDD8A72
Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/KAEK_tP1yn6vA1fdAiLOrYGf_Oo.roa
Signing time: Tue 10 Sep 2024 23:41:49 +0000
ROA not before: Tue 10 Sep 2024 23:41:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 62.164.224.0/20 maxlen: 20
62.164.240.0/20 maxlen: 24
66.9.96.0/20 maxlen: 24
66.117.8.0/22 maxlen: 24
77.223.192.0/21 maxlen: 24
77.223.200.0/23 maxlen: 24
79.139.64.0/23 maxlen: 24
83.142.200.0/21 maxlen: 24
88.135.96.0/20 maxlen: 24
89.34.171.0/24 maxlen: 24
93.119.184.0/21 maxlen: 24
94.101.103.0/24 maxlen: 24
95.178.8.0/21 maxlen: 24
116.50.16.0/21 maxlen: 24
121.127.56.0/21 maxlen: 24
176.222.48.0/22 maxlen: 24
192.200.192.0/19 maxlen: 24
195.133.202.0/23 maxlen: 24
198.145.112.0/22 maxlen: 24
212.32.96.0/20 maxlen: 24
212.32.112.0/20 maxlen: 24
Validation: Failed, certificate revoked on Fri 13 Sep 2024 16:41:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:de:50:97:42:a4:a0:40:05:36:f4:91:3f:5b:dd:8a:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Validity
Not Before: Sep 10 23:41:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=28010afed3f5ca7eaf0357dd0222cead819ffcea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5f:53:50:54:c5:9b:73:ee:8d:cd:d6:67:50:
c1:74:3d:f3:f3:9b:30:52:f3:5a:40:fe:9e:16:11:
0b:9a:7e:7f:de:e2:7a:bb:55:c1:5d:c3:08:a4:43:
31:bc:15:07:7a:08:1c:6c:19:0a:eb:73:55:c2:29:
1b:8b:e2:40:57:91:3a:c1:00:fe:c1:de:6b:ae:99:
b9:99:ed:a9:f1:76:fa:63:bd:05:2b:27:97:4b:bf:
7f:2c:6b:d8:8b:fa:83:12:28:60:8b:9c:3b:01:d0:
3a:15:02:ef:70:a5:53:00:c3:e2:66:29:3b:7f:11:
d5:bc:9b:ba:cc:0f:c6:f9:a0:51:82:6e:7d:b2:14:
c0:a2:36:a6:59:2d:cb:8a:50:95:52:3d:b6:0b:35:
a1:4c:99:b7:21:74:78:41:57:9a:8c:9d:42:a9:c8:
1d:1d:27:6d:cf:88:df:8b:32:a1:8e:33:cc:37:e0:
9d:16:3d:17:4f:3d:03:23:90:87:47:7c:14:3a:51:
37:48:d1:1d:83:e9:5b:de:ba:cd:4f:02:0e:2b:52:
11:6d:ee:be:6d:b1:1a:97:e5:98:86:ec:bf:80:e1:
e2:5b:aa:79:00:31:1a:06:bd:11:a9:1b:e5:ce:19:
45:79:12:5f:2c:d9:f4:6a:39:d7:ca:98:1c:51:21:
70:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:01:0A:FE:D3:F5:CA:7E:AF:03:57:DD:02:22:CE:AD:81:9F:FC:EA
X509v3 Authority Key Identifier:
keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/KAEK_tP1yn6vA1fdAiLOrYGf_Oo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.164.224.0/19
66.9.96.0/20
66.117.8.0/22
77.223.192.0-77.223.201.255
79.139.64.0/23
83.142.200.0/21
88.135.96.0/20
89.34.171.0/24
93.119.184.0/21
94.101.103.0/24
95.178.8.0/21
116.50.16.0/21
121.127.56.0/21
176.222.48.0/22
192.200.192.0/19
195.133.202.0/23
198.145.112.0/22
212.32.96.0/19
Signature Algorithm: sha256WithRSAEncryption
1f:e8:72:4c:ef:5c:1f:a9:b2:7d:b7:4f:9c:f7:a3:f4:e9:84:
4c:6f:95:ea:1a:0d:80:d7:f2:2f:32:61:51:02:1a:b6:57:58:
0b:ad:d5:2d:36:01:17:6b:54:aa:90:11:1a:b0:1b:96:75:15:
0f:5f:ca:e7:85:0f:30:6a:e1:6f:a6:b0:e6:e6:10:f6:ed:ec:
ef:7a:4c:0b:32:d3:4d:1b:4f:d1:11:56:86:07:f4:94:e3:79:
17:89:f4:f7:c7:8c:1d:10:89:2a:90:eb:c5:d9:c8:c0:79:7e:
c9:e0:39:11:ea:21:35:c9:57:d5:85:a5:c2:9c:a7:5e:49:04:
4b:6b:a1:57:5c:d2:8c:a1:fb:1e:9c:3e:94:ab:a7:fb:00:2f:
b2:07:e0:4c:0c:27:63:88:7b:ae:77:6a:af:5d:c7:be:ab:2e:
4b:0c:39:1a:6a:dd:f5:ca:19:d7:6c:be:99:ab:f3:7e:50:71:
8f:ed:3e:6d:66:05:c8:07:70:75:65:1c:b7:29:44:1b:ad:f7:
c1:0a:14:21:c0:9a:5a:7d:4e:5e:7c:41:78:0c:97:0b:2b:ab:
0f:74:7d:58:8e:5d:d8:ec:48:bd:39:33:12:f1:ef:f7:cc:11:
27:f7:34:0c:06:e3:0f:84:ee:b2:6d:24:60:0b:54:d8:d5:74:
c8:d5:f6:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:59:59 2025 by rpki-client