Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/KUKqb3fRqdTAdCHq7Sk3MtNtzK8.roa
File: KUKqb3fRqdTAdCHq7Sk3MtNtzK8.roa (raw, json)
Hash identifier: RsC1rYJx/RaKqDrJIysbrCrt1YIkVFAcfCT+3P5V14U=
Subject key identifier: 29:42:AA:6F:77:D1:A9:D4:C0:74:21:EA:ED:29:37:32:D3:6D:CC:AF
Certificate issuer: /CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Certificate serial: 018CFA6C74F28C6347B91100B207A30D2EF0
Authority key identifier: DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/KUKqb3fRqdTAdCHq7Sk3MtNtzK8.roa
Signing time: Thu 11 Jan 2024 21:27:41 +0000
ROA not before: Thu 11 Jan 2024 21:27:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62206
IP address blocks: 94.154.40.0/22 maxlen: 24
94.154.44.0/24 maxlen: 24
94.154.42.0/24 maxlen: 24
94.154.45.0/24 maxlen: 24
94.154.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 16 Jan 2024 11:30:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:fa:6c:74:f2:8c:63:47:b9:11:00:b2:07:a3:0d:2e:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Validity
Not Before: Jan 11 21:27:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2942aa6f77d1a9d4c07421eaed293732d36dccaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e3:7d:24:11:aa:ff:87:f1:f5:c5:21:56:99:
dd:30:7d:55:eb:5a:14:cf:ef:5d:1c:04:40:8e:08:
78:72:30:8c:41:18:38:a8:0a:19:9e:9b:22:15:f6:
1d:6d:22:73:72:a5:89:0f:44:a3:68:5b:28:ce:3d:
3c:b5:af:6a:af:8a:b5:c2:fe:e8:d5:ac:b2:dc:3d:
bb:8d:25:9d:e1:a1:b7:2b:c2:25:dd:0a:08:9d:79:
df:c8:6b:d0:52:b6:3a:49:54:3e:7c:f5:99:a3:4f:
d4:46:a6:ca:27:c3:f4:b4:fe:96:c6:1c:ee:00:bd:
d6:e4:16:80:25:f1:bc:6a:0a:50:d0:e9:5f:52:55:
cb:26:ce:05:55:a6:d7:7c:b4:ff:42:58:4d:b4:f8:
fb:27:3a:2b:3c:ce:a2:94:14:67:dd:ae:cd:93:dc:
1d:75:aa:38:b5:cd:b0:87:f2:a0:86:81:5a:9f:54:
85:98:35:83:43:9a:4b:d7:d6:ed:b8:cb:94:c0:6a:
12:83:53:61:9d:89:48:85:cd:28:74:fe:3d:69:98:
71:cc:ab:09:bd:2a:d9:a0:ec:e2:d7:f8:49:aa:4a:
9c:3b:6b:e8:cf:a8:58:9a:88:de:28:80:9b:27:b9:
b5:df:08:97:45:b0:1b:d2:b8:64:a4:79:c3:eb:5d:
4c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:42:AA:6F:77:D1:A9:D4:C0:74:21:EA:ED:29:37:32:D3:6D:CC:AF
X509v3 Authority Key Identifier:
keyid:DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/KUKqb3fRqdTAdCHq7Sk3MtNtzK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.40.0-94.154.46.255
Signature Algorithm: sha256WithRSAEncryption
74:2d:7c:d4:b5:24:97:87:d9:ac:df:11:c3:c7:41:9b:26:08:
79:9d:5f:a5:e3:28:71:ea:d7:4e:0c:41:3d:51:a2:c8:75:5f:
81:3a:ce:50:bd:ef:99:46:41:cf:39:a1:4b:9d:86:d0:3d:34:
4d:a4:6f:24:fd:c9:6a:2a:5a:86:a1:72:58:3f:32:13:77:9d:
a2:29:a1:5b:1d:fe:bf:a9:1c:1c:a0:15:0a:03:51:b4:27:4a:
ec:3e:2d:b1:de:d2:c4:6e:2a:7b:c3:e6:81:11:c2:09:5e:00:
24:58:0d:61:8a:55:6b:f2:a3:c2:c8:4d:dc:d8:a1:85:37:c7:
22:86:77:c2:ec:03:6d:31:84:5b:12:ca:91:b4:c8:da:3f:7e:
2c:b4:29:fc:82:d2:8b:13:d2:3b:56:52:f6:9f:13:c3:cc:62:
bd:03:e3:62:17:8c:61:3e:d9:12:6c:fb:82:91:5d:59:3b:04:
c0:6f:8e:f6:76:48:8e:54:a2:b6:11:06:08:e5:71:ca:1c:75:
df:97:c7:05:e8:25:14:71:58:b7:6d:8c:e5:84:34:25:5d:ab:
cf:df:4d:f7:da:d9:38:ad:c6:02:03:69:5d:eb:21:dd:b0:0b:
22:66:a3:b3:b1:21:16:84:8f:c1:63:46:b0:b4:27:88:d3:de:
20:35:e7:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:55 2024 by rpki-client on console-ams.rpki-client.org