Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/KlvK9mZvf9Ctb1FuQFrzABnji0o.roa
File: KlvK9mZvf9Ctb1FuQFrzABnji0o.roa (raw, json)
Hash identifier: sSpO5uCpz7aR44bBr+kJWOo6fbJe0QdDs39LZE1CQ7w=
Subject key identifier: 2A:5B:CA:F6:66:6F:7F:D0:AD:6F:51:6E:40:5A:F3:00:19:E3:8B:4A
Certificate issuer: /CN=115dbc00433e29f2adeb038fea2fbd7048fb632f
Certificate serial: 019126A182974A67739F9267A3149575F8E9
Authority key identifier: 11:5D:BC:00:43:3E:29:F2:AD:EB:03:8F:EA:2F:BD:70:48:FB:63:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/KlvK9mZvf9Ctb1FuQFrzABnji0o.roa
Signing time: Tue 06 Aug 2024 07:40:04 +0000
ROA not before: Tue 06 Aug 2024 07:40:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6730
IP address blocks: 31.164.0.0/15 maxlen: 16
62.167.0.0/16 maxlen: 16
62.167.0.0/17 maxlen: 17
62.167.128.0/17 maxlen: 17
84.226.0.0/15 maxlen: 16
89.217.0.0/16 maxlen: 16
178.38.0.0/15 maxlen: 16
188.154.0.0/15 maxlen: 16
193.192.224.0/19 maxlen: 19
194.158.224.0/19 maxlen: 19
194.230.0.0/16 maxlen: 16
194.230.0.0/17 maxlen: 17
194.230.128.0/17 maxlen: 17
195.112.64.0/19 maxlen: 19
195.141.0.0/16 maxlen: 16
212.35.32.0/19 maxlen: 19
212.98.32.0/19 maxlen: 19
212.161.128.0/17 maxlen: 17
2001:1700::/27 maxlen: 27
2001:1700::/28 maxlen: 28
2001:1710::/28 maxlen: 28
Validation: Failed, certificate revoked on Wed 13 Nov 2024 23:39:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:26:a1:82:97:4a:67:73:9f:92:67:a3:14:95:75:f8:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=115dbc00433e29f2adeb038fea2fbd7048fb632f
Validity
Not Before: Aug 6 07:40:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2a5bcaf6666f7fd0ad6f516e405af30019e38b4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:27:1a:32:bd:c6:98:da:6e:ee:a8:ef:44:68:
14:3e:72:6b:3b:0f:fb:2c:71:8d:e8:1b:d1:59:91:
97:ab:fb:14:fe:aa:34:7e:42:14:c3:9d:cb:16:4b:
c9:03:7d:53:43:f0:00:84:7c:e7:5d:04:90:f2:00:
49:55:aa:71:20:e9:fc:69:11:a1:3f:68:f8:10:9b:
f1:2f:26:ea:00:dd:4b:65:4a:fd:8a:e7:ab:60:9e:
00:ff:9f:ea:6e:0a:65:fd:1e:fd:9a:d8:b2:15:c3:
b8:5b:1e:eb:11:cb:30:c1:d4:15:57:c5:7f:61:76:
f1:25:f7:be:2e:94:78:39:03:fc:3d:27:15:ed:d3:
f8:4e:36:5e:9e:b6:26:1d:01:ff:1e:5f:a7:7a:6d:
34:14:ca:3a:3e:18:6c:11:d4:89:71:aa:3e:5c:63:
bd:97:aa:55:3e:08:a4:23:9c:85:03:5d:86:b2:85:
86:1a:7b:12:f0:c0:a9:73:19:0d:5d:dd:33:08:56:
17:d9:f1:c8:a0:59:46:f7:a2:ad:01:e8:08:14:67:
07:16:da:46:52:18:2d:d9:3a:ae:1b:58:68:c2:32:
2d:c5:c1:ac:36:7f:4d:cd:19:a1:54:23:a7:d2:39:
43:3a:87:58:19:cf:a1:19:21:14:2a:26:95:01:46:
5d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:5B:CA:F6:66:6F:7F:D0:AD:6F:51:6E:40:5A:F3:00:19:E3:8B:4A
X509v3 Authority Key Identifier:
keyid:11:5D:BC:00:43:3E:29:F2:AD:EB:03:8F:EA:2F:BD:70:48:FB:63:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/KlvK9mZvf9Ctb1FuQFrzABnji0o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.164.0.0/15
62.167.0.0/16
84.226.0.0/15
89.217.0.0/16
178.38.0.0/15
188.154.0.0/15
193.192.224.0/19
194.158.224.0/19
194.230.0.0/16
195.112.64.0/19
195.141.0.0/16
212.35.32.0/19
212.98.32.0/19
212.161.128.0/17
IPv6:
2001:1700::/27
Signature Algorithm: sha256WithRSAEncryption
c0:42:78:a8:4b:40:e6:51:87:ef:64:aa:85:39:8c:b4:67:48:
93:97:f0:c5:06:c9:51:31:f8:72:92:f1:a5:7d:23:68:51:17:
01:41:72:55:40:ee:8c:df:74:d4:84:b5:84:d8:ea:a5:ee:f4:
0c:f8:4f:d0:0c:c4:a3:04:04:09:2e:5d:b7:86:09:ba:79:fc:
5d:2e:5f:ae:9f:66:6a:d4:68:ec:45:03:b6:29:d8:26:36:b9:
84:81:c8:07:ac:6d:0e:b0:e4:76:b7:3f:ab:79:f0:d8:e3:41:
09:96:b1:1b:7d:b0:d6:54:6e:26:40:99:5f:6f:d3:b0:d5:33:
03:a3:5b:0a:3d:88:d9:a3:5c:6d:89:67:52:7e:3f:a0:d7:9a:
ad:a8:fb:b4:da:50:71:73:99:d6:7c:9a:97:a8:0c:c3:17:23:
e3:22:98:14:b1:53:7e:8f:a7:74:42:bb:98:b7:61:09:6f:85:
53:7d:01:c1:2f:cd:7d:65:ce:9f:83:c0:be:5b:b5:07:84:4e:
09:5b:77:c7:6b:e0:39:b5:d6:85:97:ae:c4:3b:c5:f2:11:8b:
76:d7:d0:cd:84:7e:91:b0:99:d2:71:98:20:05:fe:fe:54:b7:
69:3e:e5:eb:f0:d9:4c:0d:c7:af:01:fc:13:46:bc:cc:be:a0:
e3:a7:e8:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 14 01:58:08 2024 by rpki-client on console-fra.rpki-client.org