Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/K2sx1qLGx_4EBKskBAWil7D6_js.roa
File: K2sx1qLGx_4EBKskBAWil7D6_js.roa (raw, json)
Hash identifier: R4XtK0+8v4+2LybybCIpolHUkrWKNXsKcGGJmaWjQs4=
Subject key identifier: 2B:6B:31:D6:A2:C6:C7:FE:04:04:AB:24:04:05:A2:97:B0:FA:FE:3B
Certificate issuer: /CN=52bf21eeb36414b3280e6c33b0b57296b8f6b675
Certificate serial: 018570707C72074A04C2DA7718094E257501
Authority key identifier: 52:BF:21:EE:B3:64:14:B3:28:0E:6C:33:B0:B5:72:96:B8:F6:B6:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ur8h7rNkFLMoDmwzsLVylrj2tnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/K2sx1qLGx_4EBKskBAWil7D6_js.roa
Signing time: Mon 02 Jan 2023 03:04:58 +0000
ROA not before: Mon 02 Jan 2023 03:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57954
IP address blocks: 194.1.159.0/24 maxlen: 24
192.162.19.0/24 maxlen: 24
193.105.210.0/24 maxlen: 24
2001:67c:13a0::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:70:7c:72:07:4a:04:c2:da:77:18:09:4e:25:75:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52bf21eeb36414b3280e6c33b0b57296b8f6b675
Validity
Not Before: Jan 2 03:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2b6b31d6a2c6c7fe0404ab240405a297b0fafe3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4d:cc:4a:5c:f3:2f:37:57:63:20:e3:5d:24:
f2:7f:ea:31:6d:80:43:18:e3:7a:59:16:24:1b:0c:
8b:5f:7a:fe:9a:c9:f9:ed:19:5f:56:c5:a4:25:84:
74:aa:69:7e:6e:50:01:28:64:c5:40:b7:96:31:a5:
54:1f:0a:c1:bd:4f:cb:b4:30:c2:ef:aa:b0:52:65:
d0:42:15:fe:c5:08:3c:b1:ac:b1:7f:5b:6f:32:75:
f1:a6:ec:d8:50:c0:ca:11:15:13:ae:96:dc:e9:f3:
95:0e:f3:da:ec:f2:96:c6:51:0a:fe:da:45:0c:55:
bc:43:df:8e:ba:65:94:e7:8b:81:de:08:82:47:35:
d8:f5:59:52:56:b4:ea:0d:a9:13:7f:9c:6d:3e:ee:
41:ef:91:b8:18:2a:b0:72:c1:18:41:38:64:95:d3:
7e:e0:57:95:78:e4:d6:82:54:8a:ef:49:48:53:26:
46:ca:09:42:3d:1c:4f:a3:c8:b0:96:e5:32:4f:2b:
40:3b:cf:a2:fb:e2:c1:ca:24:03:62:87:ca:04:b0:
43:98:bd:df:0b:cb:71:f8:4c:20:04:b7:a2:9e:95:
47:e8:88:ff:f2:90:13:48:45:43:8f:9e:ab:a7:70:
86:15:94:6f:60:07:fa:48:43:40:1b:a6:7e:5c:31:
f6:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:6B:31:D6:A2:C6:C7:FE:04:04:AB:24:04:05:A2:97:B0:FA:FE:3B
X509v3 Authority Key Identifier:
keyid:52:BF:21:EE:B3:64:14:B3:28:0E:6C:33:B0:B5:72:96:B8:F6:B6:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ur8h7rNkFLMoDmwzsLVylrj2tnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/K2sx1qLGx_4EBKskBAWil7D6_js.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/Ur8h7rNkFLMoDmwzsLVylrj2tnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.162.19.0/24
193.105.210.0/24
194.1.159.0/24
IPv6:
2001:67c:13a0::/48
Signature Algorithm: sha256WithRSAEncryption
90:81:9c:a8:0f:89:ea:08:a9:81:ce:37:dc:71:42:58:e2:5f:
ae:16:2b:e2:b7:98:76:44:7e:a0:33:21:31:d8:96:d4:02:c1:
2d:4d:4f:b9:c0:bc:ef:18:17:61:15:5c:d0:96:23:15:b8:45:
04:74:d3:a6:f7:cf:b2:de:8d:30:59:c8:9c:29:d8:44:41:1d:
9f:bc:ef:fa:73:25:c3:7f:c0:c6:0f:6b:94:83:3a:ac:b9:de:
99:ea:19:09:0c:82:34:1d:e4:50:93:9c:b0:c0:40:3e:28:b8:
3f:87:24:cb:32:43:f9:23:4b:96:10:90:67:75:7a:97:b4:d5:
c2:ea:3e:75:c8:bf:0a:55:5c:7d:c9:3e:a7:01:b9:d5:f1:aa:
c1:b6:7f:f7:e9:56:4c:ec:53:d4:43:ed:8c:b3:be:de:fd:bd:
17:29:3b:af:86:11:71:cb:27:63:02:6b:de:32:b9:4a:ab:9f:
39:82:3e:a1:b0:a6:aa:10:5e:ee:c2:20:64:29:0c:ad:19:61:
86:c4:3b:3c:84:da:aa:30:de:48:da:3c:b9:2a:5e:a1:64:b6:
c1:a9:06:45:3a:84:eb:83:ab:eb:c6:2e:cc:c8:05:1e:f8:63:
db:df:a6:27:87:11:00:94:fe:ff:b2:57:c3:66:6b:5a:ae:26:
2a:96:38:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:58 2024 by rpki-client on console-fra.rpki-client.org