Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/5a32bc-0836-47ec-b5b3-2f5b6a83faf3/1/K6FEKx-LTWJzk44dom0ASgsdyPg.roa
File: K6FEKx-LTWJzk44dom0ASgsdyPg.roa (raw, json)
Hash identifier: DaB+l86Rm9N+mE16px9/6VvtVnlZRVZii1yDNHYudyE=
Subject key identifier: 2B:A1:44:2B:1F:8B:4D:62:73:93:8E:1D:A2:6D:00:4A:0B:1D:C8:F8
Certificate issuer: /CN=36900183cf08a6e5bc807846294a46062e190e3b
Certificate serial: 018F42D045DCADE6D09F35F74AB0CBCAEEED
Authority key identifier: 36:90:01:83:CF:08:A6:E5:BC:80:78:46:29:4A:46:06:2E:19:0E:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpABg88IpuW8gHhGKUpGBi4ZDjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/5a32bc-0836-47ec-b5b3-2f5b6a83faf3/1/K6FEKx-LTWJzk44dom0ASgsdyPg.roa
Signing time: Sat 04 May 2024 08:54:56 +0000
ROA not before: Sat 04 May 2024 08:54:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.11.185.0/24 maxlen: 24
80.91.218.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Jun 2024 04:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:42:d0:45:dc:ad:e6:d0:9f:35:f7:4a:b0:cb:ca:ee:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36900183cf08a6e5bc807846294a46062e190e3b
Validity
Not Before: May 4 08:54:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2ba1442b1f8b4d6273938e1da26d004a0b1dc8f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:00:34:35:a7:64:5d:41:93:b2:6a:1b:49:94:
98:cb:2e:1f:fc:ce:82:b9:96:a3:fe:c3:6e:bf:50:
26:a7:e3:73:d1:cf:f8:1f:4a:2c:53:d8:84:97:30:
56:1f:08:f7:42:64:a5:d9:a2:3f:f1:be:04:70:39:
22:42:9b:72:a1:5c:eb:40:87:58:d4:12:29:27:1b:
6d:ef:f5:d5:00:49:bf:11:5c:5e:f9:66:4d:75:51:
ca:12:2c:85:50:46:2e:8a:e8:99:99:1c:ff:7a:77:
aa:73:ff:a9:51:d8:07:33:ed:0d:ac:ba:eb:de:ec:
5d:a4:76:bf:e1:f5:8a:70:ab:84:af:2b:64:11:05:
a9:6b:94:bb:a7:a2:20:e4:dc:38:2e:d4:6d:15:93:
52:21:b4:bc:00:8c:97:9c:04:a8:5a:f6:34:f3:1e:
b4:cd:02:c9:04:41:4a:d1:ca:4b:fc:ea:0b:c0:8c:
90:9e:f6:fc:fa:33:20:47:96:60:9f:47:59:14:9a:
5b:3c:e5:58:8c:a9:5d:ea:22:05:ab:fb:d0:1b:5f:
36:4a:d4:53:a3:10:93:aa:fc:5b:a7:a8:cf:8a:50:
bd:b3:d3:13:e1:ea:c1:fb:0b:27:bd:b0:36:4a:96:
ed:57:42:79:a2:95:3d:fe:4e:54:a7:fe:17:8b:aa:
47:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:A1:44:2B:1F:8B:4D:62:73:93:8E:1D:A2:6D:00:4A:0B:1D:C8:F8
X509v3 Authority Key Identifier:
keyid:36:90:01:83:CF:08:A6:E5:BC:80:78:46:29:4A:46:06:2E:19:0E:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpABg88IpuW8gHhGKUpGBi4ZDjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/5a32bc-0836-47ec-b5b3-2f5b6a83faf3/1/K6FEKx-LTWJzk44dom0ASgsdyPg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/5a32bc-0836-47ec-b5b3-2f5b6a83faf3/1/NpABg88IpuW8gHhGKUpGBi4ZDjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.185.0/24
80.91.218.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:9f:fe:8a:b3:bf:db:37:84:59:19:26:72:18:a0:c1:79:89:
fb:28:ef:9e:71:40:ac:53:8c:38:86:11:3a:4d:2c:a0:c6:ef:
18:1d:21:7a:82:b3:51:05:d2:02:31:c9:6f:eb:c2:2b:bd:33:
e9:a6:4a:fc:fa:bd:8d:c1:35:c5:d1:db:a3:d2:b9:27:68:53:
8e:51:a8:5e:85:c4:0b:20:2f:a4:34:d0:c5:f3:b1:ab:1b:98:
16:05:61:37:2e:a1:c7:0f:96:f1:aa:17:dc:76:b3:bd:b5:1f:
d7:69:c2:d9:99:62:93:bc:ff:e2:44:28:d3:66:7c:25:3b:f4:
29:92:20:06:64:9d:f1:bd:74:3c:cc:fc:1e:ed:3e:18:11:cf:
d9:9f:45:22:40:63:1a:59:b9:d4:0f:7e:3f:f8:1a:93:fe:c5:
3c:04:82:36:f8:a0:43:2a:90:c2:04:a1:69:07:3d:4b:80:49:
86:c5:bd:85:d0:36:94:a3:07:af:c3:52:55:fd:53:5d:eb:9c:
1d:a0:d9:9c:e4:02:99:89:a8:9e:7c:00:77:21:ed:61:16:41:
e6:e0:db:ed:4e:85:e7:92:52:91:b9:86:05:33:95:6f:8b:d6:
b4:cb:19:2a:19:af:80:8a:04:25:ea:fb:d3:b9:01:9f:17:4a:
ec:12:b5:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:52 2024 by rpki-client on console-ams.rpki-client.org