Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/kN4qSqA_qa90DTDmcEuLBE7NPUw.roa
File: kN4qSqA_qa90DTDmcEuLBE7NPUw.roa (raw, json)
Hash identifier: KAVhoxdnEaabRCYkLFmctOwFcbHY3uuow6mPMcBElgA=
Subject key identifier: 90:DE:2A:4A:A0:3F:A9:AF:74:0D:30:E6:70:4B:8B:04:4E:CD:3D:4C
Certificate issuer: /CN=060c9ec5d40586ed3255f0fc4fcb3157714dda15
Certificate serial: 01856BEED261A286BC791DC988E845E9EFE7
Authority key identifier: 06:0C:9E:C5:D4:05:86:ED:32:55:F0:FC:4F:CB:31:57:71:4D:DA:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BgyexdQFhu0yVfD8T8sxV3FN2hU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/kN4qSqA_qa90DTDmcEuLBE7NPUw.roa
Signing time: Sun 01 Jan 2023 06:04:51 +0000
ROA not before: Sun 01 Jan 2023 06:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202316
IP address blocks: 195.69.231.0/24 maxlen: 24
195.69.228.0/24 maxlen: 24
195.69.229.0/24 maxlen: 24
195.69.230.0/24 maxlen: 24
2a09:2883::/48 maxlen: 48
2a09:2881::/48 maxlen: 48
2a09:2885::/48 maxlen: 48
2a09:2884::/48 maxlen: 48
2a09:2882::/48 maxlen: 48
2a09:2880::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 14:32:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ee:d2:61:a2:86:bc:79:1d:c9:88:e8:45:e9:ef:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=060c9ec5d40586ed3255f0fc4fcb3157714dda15
Validity
Not Before: Jan 1 06:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=90de2a4aa03fa9af740d30e6704b8b044ecd3d4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d2:0f:94:5e:e4:3e:57:3f:9e:bb:ef:f5:0a:
dc:9c:a5:6b:c3:c1:da:d0:44:e5:fc:de:79:d6:88:
8a:fc:e7:25:51:8c:5a:a2:c1:44:20:b0:81:ba:50:
a4:d9:32:08:27:e0:cc:ba:cb:1d:6a:b6:4c:3c:7d:
e2:b5:17:0e:f1:64:a8:ff:86:71:4f:21:b6:0f:2d:
07:42:97:d8:15:9b:14:02:1c:cc:51:73:84:86:14:
e0:34:1a:1b:77:0f:88:51:f8:41:5d:1a:11:9b:29:
eb:17:4a:a9:b0:8c:c5:b6:8c:f3:ac:af:eb:4c:fd:
4f:ce:86:86:72:33:8f:b3:8f:aa:f6:d2:87:e3:01:
f5:bd:49:08:c1:23:48:23:5e:ff:76:8f:62:a3:b7:
a7:55:e5:2d:a9:42:ad:c6:d9:4d:be:de:b6:68:9a:
29:34:ff:59:9e:5d:68:d6:fe:d6:46:4f:2e:91:5f:
b6:bf:31:80:62:68:9e:18:b2:8b:12:d5:5c:69:d1:
b1:be:28:87:e8:c3:a7:b9:f2:b3:c6:6d:ac:84:de:
1e:c5:73:70:b3:65:fb:77:f2:48:5f:db:ea:8d:2b:
be:65:08:47:c3:03:bc:80:e5:a0:57:63:55:42:6a:
76:01:92:2c:93:7c:b1:81:57:fa:73:90:3b:39:ee:
40:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:DE:2A:4A:A0:3F:A9:AF:74:0D:30:E6:70:4B:8B:04:4E:CD:3D:4C
X509v3 Authority Key Identifier:
keyid:06:0C:9E:C5:D4:05:86:ED:32:55:F0:FC:4F:CB:31:57:71:4D:DA:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BgyexdQFhu0yVfD8T8sxV3FN2hU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/kN4qSqA_qa90DTDmcEuLBE7NPUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/BgyexdQFhu0yVfD8T8sxV3FN2hU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.69.228.0/22
IPv6:
2a09:2880::/48
2a09:2881::/48
2a09:2882::/48
2a09:2883::/48
2a09:2884::/48
2a09:2885::/48
Signature Algorithm: sha256WithRSAEncryption
83:a1:13:e9:62:f6:5d:c6:33:0f:30:83:95:bb:11:dd:bf:17:
a8:60:d2:f5:2b:ef:35:43:b6:1a:ba:80:b1:4d:5b:2e:b3:f9:
44:a6:4d:31:53:b6:98:31:41:ee:c5:0e:9f:a6:2d:23:45:5f:
a8:3a:68:61:e0:77:22:4f:4e:92:e8:d6:81:1f:88:7e:28:2d:
5c:e4:9d:b0:1a:65:c5:1b:b6:01:24:a0:44:f3:4e:91:7c:8a:
fa:ad:69:40:96:ae:18:3e:a8:1d:2f:8b:33:2c:e8:3a:ec:cd:
f5:5f:aa:d8:51:20:b0:84:13:79:5a:76:45:d8:c5:54:b6:64:
78:40:6f:d8:b0:f6:2d:50:b5:ea:03:00:2b:06:3c:e4:50:f0:
0a:d9:13:37:47:3f:4d:ab:e0:34:9b:e7:9c:5e:14:87:a8:63:
0c:90:df:a3:b1:9b:bd:be:42:d6:d6:92:a4:de:4c:4f:52:5a:
8e:15:28:ba:56:44:62:6c:11:cf:c3:b7:c0:1d:a6:b4:8a:1a:
78:e1:ab:45:4a:d4:c7:3c:ea:1d:05:db:aa:a1:77:e3:37:0f:
4d:38:27:db:46:7b:ce:6f:02:66:f5:32:f5:7e:04:c4:f7:30:
99:0e:90:3a:60:73:96:fb:cc:f1:fa:5c:13:7c:ec:0d:ac:b5:
64:fd:7e:e7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:52 2024 by rpki-client on console-fra.rpki-client.org