Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/KkiLKmaMV0aCBX2jec63Atm9tOg.roa
File: KkiLKmaMV0aCBX2jec63Atm9tOg.roa (raw, json)
Hash identifier: ognqwEjY1s5SMk9xApMNquI8Abrt0GOd6px3u7/H6Ew=
Subject key identifier: 2A:48:8B:2A:66:8C:57:46:82:05:7D:A3:79:CE:B7:02:D9:BD:B4:E8
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018BAF58D9952FA3CB48478BA16049DC3681
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/KkiLKmaMV0aCBX2jec63Atm9tOg.roa
Signing time: Wed 08 Nov 2023 14:31:57 +0000
ROA not before: Wed 08 Nov 2023 14:31:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207459
IP address blocks: 84.54.49.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
193.149.29.0/24 maxlen: 24
193.149.30.0/24 maxlen: 24
94.156.176.0/24 maxlen: 24
193.149.28.0/22 maxlen: 22
193.149.31.0/24 maxlen: 24
193.149.28.0/24 maxlen: 24
45.84.90.0/24 maxlen: 24
87.121.105.0/24 maxlen: 24
185.226.175.0/24 maxlen: 24
212.115.41.0/24 maxlen: 24
79.110.50.0/24 maxlen: 24
79.110.51.0/24 maxlen: 24
45.8.93.0/24 maxlen: 24
82.115.211.0/24 maxlen: 24
194.49.86.0/24 maxlen: 24
45.151.90.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:af:58:d9:95:2f:a3:cb:48:47:8b:a1:60:49:dc:36:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Nov 8 14:31:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2a488b2a668c574682057da379ceb702d9bdb4e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2c:55:6b:eb:f4:12:42:42:f1:56:e8:b2:e5:
e2:24:10:36:51:02:96:58:6a:29:f6:cd:25:fd:16:
75:d3:a8:8b:0f:57:49:ab:09:70:ec:7d:51:e1:03:
05:1e:33:00:22:ae:59:94:25:99:02:73:36:19:33:
f8:9f:fa:f0:69:13:bb:3e:08:65:c8:15:17:90:fd:
41:0c:95:99:44:fa:7f:1e:84:8e:23:d7:1f:aa:70:
43:fc:71:7b:92:1d:c9:72:ae:89:f7:21:8f:3a:18:
ad:46:ef:1c:2a:21:e1:ed:1c:0a:d3:4f:b7:54:07:
e3:a7:a1:d0:38:84:3c:f5:46:84:49:80:72:61:0d:
50:2a:6c:ec:70:58:5d:88:06:c2:08:c4:ef:1a:7b:
cb:70:d8:b3:3b:8c:d5:90:bf:a5:2f:59:39:81:4a:
f6:cb:5f:4d:b5:7d:fe:f9:78:1f:d3:a1:f8:1d:84:
b7:58:8a:c0:a0:fa:c1:e6:47:ee:9b:5d:8a:d7:75:
48:ad:88:e7:9c:ee:b2:2c:3e:c5:fb:10:21:06:8a:
2c:fb:b9:26:0e:6a:01:36:09:1e:90:87:73:02:fe:
3b:8c:c3:07:7e:29:21:e0:0e:fb:8a:2c:da:c9:1c:
52:25:50:62:1e:88:ea:a2:1e:2f:0f:33:59:40:bf:
7e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:48:8B:2A:66:8C:57:46:82:05:7D:A3:79:CE:B7:02:D9:BD:B4:E8
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/KkiLKmaMV0aCBX2jec63Atm9tOg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.93.0/24
45.66.228.0/24
45.84.90.0/24
45.151.90.0/24
79.110.50.0/23
82.115.211.0/24
84.54.49.0/24
87.121.105.0/24
94.156.176.0/24
185.226.175.0/24
193.149.28.0/22
194.49.86.0/24
212.115.41.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:dc:ae:01:dc:bf:32:72:07:be:bc:39:b6:aa:22:bb:ce:a6:
58:a8:23:f2:25:a1:cc:ca:f6:c3:0d:5f:e4:40:88:ed:b2:6b:
5b:12:1e:4d:d1:ce:c7:19:54:ad:80:2e:98:7b:df:11:87:8a:
48:7d:0b:f7:02:e2:13:2b:89:4f:6c:e7:99:5c:39:86:ca:4c:
96:0b:19:0a:a5:43:c1:67:8e:26:de:38:b0:96:3a:0c:e2:67:
db:b9:9f:3b:f8:fe:a1:04:0e:1b:fe:43:1f:48:29:60:7b:33:
fc:93:11:79:63:0d:82:30:ac:13:fe:98:f5:fd:fb:de:39:a2:
af:f8:0a:3a:dc:17:72:53:42:73:c1:08:7b:bb:8b:70:0d:29:
6f:ac:85:00:da:4c:74:17:02:4e:6e:8d:b8:ff:14:0e:26:c6:
67:c3:f5:77:93:0a:88:56:35:4e:52:59:77:42:cd:b2:02:50:
2c:64:04:9a:b8:e6:97:30:26:88:73:9a:56:74:bc:82:79:25:
c3:69:79:96:30:5d:81:ce:f3:19:49:d9:5d:46:a8:2c:be:86:
e8:ee:94:40:c9:2a:1a:39:4c:aa:a7:f9:72:8d:24:6b:7b:50:
81:69:f2:33:25:60:d5:d0:ad:01:a1:7d:32:05:2a:c0:83:71:
5a:4d:ed:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 10 12:13:00 2023 by rpki-client on console-ams.rpki-client.org