Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/KKFJ_6Pnr8D2nwbDiVrhMz6Fa90.roa
File: KKFJ_6Pnr8D2nwbDiVrhMz6Fa90.roa (raw, json)
Hash identifier: p4V2xhgt3lTfNymbw3bmgqxrKioJbphmCkLoLy1s5Mw=
Subject key identifier: 28:A1:49:FF:A3:E7:AF:C0:F6:9F:06:C3:89:5A:E1:33:3E:85:6B:DD
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018CE8E0E1DCF58799E95AEF0BBF17C6ADE4
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/KKFJ_6Pnr8D2nwbDiVrhMz6Fa90.roa
Signing time: Mon 08 Jan 2024 11:41:41 +0000
ROA not before: Mon 08 Jan 2024 11:41:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39521
IP address blocks: 94.156.125.0/24 maxlen: 24
194.31.223.0/24 maxlen: 24
94.156.126.0/24 maxlen: 24
94.156.127.0/24 maxlen: 24
164.40.189.0/24 maxlen: 24
164.40.190.0/24 maxlen: 24
164.40.191.0/24 maxlen: 24
164.40.188.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 08 Mar 2024 14:15:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e8:e0:e1:dc:f5:87:99:e9:5a:ef:0b:bf:17:c6:ad:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 8 11:41:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=28a149ffa3e7afc0f69f06c3895ae1333e856bdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:9b:b7:1d:04:47:8e:db:eb:ee:c6:c4:1f:db:
e4:0a:91:01:b0:94:5b:82:89:68:ed:e0:14:a2:54:
b5:76:5a:7a:db:70:66:3b:e0:5b:09:6a:f7:b6:a3:
d0:37:76:91:cc:b2:93:e0:1a:34:14:af:f4:5c:9c:
85:88:32:3b:be:15:04:53:5a:70:33:1e:6d:06:21:
0b:6b:c2:61:99:db:56:25:67:e5:9d:c8:fd:6b:76:
0a:3b:54:2f:54:17:ed:26:4e:74:b2:f2:b5:f2:d3:
c0:83:a6:8a:fe:26:c7:ae:64:7b:8f:d9:ba:2e:b7:
c3:8c:ff:a0:77:99:53:88:89:15:0f:d4:a8:8d:19:
dd:c4:e2:93:67:9a:aa:f3:5d:99:36:98:58:5e:67:
4c:87:72:58:93:25:e4:99:f9:57:a8:4b:37:a6:91:
63:b0:63:d5:2b:82:54:51:c1:93:f2:dc:c1:f6:1c:
2a:e5:a9:55:2b:2e:53:05:73:2e:6c:7b:12:c6:2e:
18:c2:85:f2:dc:aa:c0:a5:13:61:b1:e7:ed:86:72:
58:41:67:60:98:8e:13:dd:cd:66:8e:0a:24:c9:28:
12:fc:30:30:ec:88:9d:5d:ce:df:d0:a4:c2:5b:70:
ac:cb:17:99:4f:95:d7:0d:ab:b2:64:2f:72:2f:4d:
05:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:A1:49:FF:A3:E7:AF:C0:F6:9F:06:C3:89:5A:E1:33:3E:85:6B:DD
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/KKFJ_6Pnr8D2nwbDiVrhMz6Fa90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.125.0-94.156.127.255
164.40.188.0/22
194.31.223.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:bc:f4:9b:30:0a:eb:b7:8e:b0:82:80:58:19:72:37:15:d3:
6f:92:24:1c:ac:bf:82:a7:5f:51:59:b5:c6:b1:fb:ad:ec:0c:
e2:ef:5c:ed:20:ab:c3:5e:fd:5f:e8:92:4c:03:c4:18:a1:34:
4c:d4:6c:13:0d:dd:e6:9c:47:05:f7:ed:b6:9b:9d:70:04:7b:
df:94:e0:ff:78:a4:f9:8f:49:8c:f6:84:9a:c9:2a:a3:ec:49:
c1:62:18:99:aa:11:cb:57:b1:55:af:2f:c0:ca:00:c5:89:55:
58:82:47:aa:61:2e:bf:34:1b:fa:f8:87:a3:13:51:34:2b:05:
3f:4d:04:81:4e:c0:65:50:7a:6d:78:eb:20:d8:9c:92:d6:fd:
37:ec:53:44:e8:aa:a2:4b:f9:22:a1:74:af:96:25:73:04:0d:
11:16:03:aa:be:68:41:1c:29:4c:15:26:32:e7:03:bd:0c:ce:
b6:a4:76:9e:97:a0:12:f5:39:8f:74:b8:de:20:f8:7e:08:79:
42:eb:94:fe:db:51:8a:dc:69:fb:90:68:81:2f:9b:18:88:90:
2d:f5:97:97:95:3d:3a:69:7b:55:20:05:1f:be:fe:61:19:a6:
21:e0:4c:fe:bb:4d:c3:48:48:d2:e9:1f:fe:c3:84:bf:b0:ee:
d4:c0:e8:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 8 17:09:50 2024 by rpki-client on console-ams.rpki-client.org