Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/KfVi024MFEHCTNWbKhWNFFdePPk.roa
File: KfVi024MFEHCTNWbKhWNFFdePPk.roa (raw, json)
Hash identifier: gC2uD96uMMthGyTXjzTjKl/jh0spqd25c09P65rLLrI=
Subject key identifier: 29:F5:62:D3:6E:0C:14:41:C2:4C:D5:9B:2A:15:8D:14:57:5E:3C:F9
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 018CCA29C75ED99F4F55F8813259E5A40D46
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/KfVi024MFEHCTNWbKhWNFFdePPk.roa
Signing time: Tue 02 Jan 2024 12:33:04 +0000
ROA not before: Tue 02 Jan 2024 12:33:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205220
IP address blocks: 213.176.2.0/23 maxlen: 24
62.60.196.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 Jan 2024 02:35:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:c7:5e:d9:9f:4f:55:f8:81:32:59:e5:a4:0d:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jan 2 12:33:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=29f562d36e0c1441c24cd59b2a158d14575e3cf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6f:00:9b:ea:e8:c4:b7:4c:ee:b8:d0:6f:e1:
9b:0f:26:50:22:42:1e:b3:82:00:1e:f9:91:7d:2f:
85:d9:fb:d5:24:0e:98:55:a6:7d:90:b4:fd:d3:0a:
15:af:a2:96:ed:41:ec:00:a7:bc:d6:da:2d:d9:b6:
78:5f:e8:43:04:4a:d2:69:40:d5:c1:a5:34:34:ed:
b5:52:5d:46:84:77:29:65:82:3a:de:bf:1e:0e:75:
98:c5:76:81:28:80:1f:c3:5d:a1:78:b0:11:3c:30:
65:cb:94:7a:d8:a2:10:83:2b:01:1d:f2:68:70:4a:
a3:68:59:43:a6:dc:8d:9e:3f:de:c3:3d:f8:e8:ec:
67:c4:ed:a1:e5:58:0c:b3:f7:fa:ae:79:2d:25:17:
80:cb:22:5d:ee:8a:ea:cb:b2:3f:42:80:bd:84:e6:
37:79:23:9f:3e:e7:31:c8:62:be:4c:23:66:d0:fe:
6c:dd:7b:ec:83:37:f1:3b:2a:a5:02:49:36:84:65:
f6:ed:a2:4e:76:c3:83:92:2e:cd:fc:06:44:3b:99:
c9:0e:9d:7b:60:97:84:2b:38:44:26:7c:a1:eb:22:
06:c6:5c:08:1a:9d:ab:1b:18:db:c6:6d:2b:33:d3:
b2:35:25:06:a6:a8:4a:0b:46:25:74:6a:86:fd:1a:
63:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:F5:62:D3:6E:0C:14:41:C2:4C:D5:9B:2A:15:8D:14:57:5E:3C:F9
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/KfVi024MFEHCTNWbKhWNFFdePPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.196.0/22
213.176.2.0/23
Signature Algorithm: sha256WithRSAEncryption
51:39:03:ce:06:31:12:40:52:56:c3:c4:af:3a:a5:fa:24:31:
ff:50:d4:8b:6e:d5:78:9d:3c:c2:1c:b0:fb:73:54:80:84:f4:
4f:0c:c4:14:92:bf:5d:a9:f3:f6:96:26:48:f9:8a:78:b0:a2:
83:8b:62:2e:39:9d:65:e7:ee:ec:54:56:5d:14:51:c5:06:97:
f0:44:b5:ec:17:93:c0:85:72:17:cd:e5:2d:8c:fb:62:58:81:
b1:c4:a9:5c:57:9a:26:43:73:51:a1:4d:aa:98:8e:91:3f:c2:
75:af:52:98:b5:7a:c0:24:7d:b0:53:31:ef:35:3f:ba:9e:d7:
26:8d:7f:8e:98:f2:18:62:ad:54:54:73:76:f6:a0:f0:a1:fe:
01:cb:a0:87:70:a1:c7:6c:75:2f:7f:7d:92:2b:21:1f:55:9b:
f3:b6:c2:ac:25:10:bd:0e:3f:d9:2c:8f:db:71:2e:25:92:0a:
fd:0f:3a:81:b5:13:1b:7c:12:34:eb:4a:69:3b:ac:8b:50:f9:
4e:4e:33:24:1c:27:be:56:d2:de:e6:ce:4a:96:fd:ac:ee:63:
be:93:29:36:ef:e0:ab:3a:09:e0:bb:53:b0:74:12:54:37:61:
b3:5a:2e:2b:4c:09:7d:3c:cf:8b:f8:cd:47:55:29:a1:30:6c:
d3:b6:5c:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:29 2024 by rpki-client on console-ams.rpki-client.org