Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/KDEUYF_lTI6Gs9OgjeBBwNHqtIQ.roa
File: KDEUYF_lTI6Gs9OgjeBBwNHqtIQ.roa (raw, json)
Hash identifier: Pfz40fyQVDkc4WGOFrDOoeR/TpO+ZVzlt2147ug7JDA=
Subject key identifier: 28:31:14:60:5F:E5:4C:8E:86:B3:D3:A0:8D:E0:41:C0:D1:EA:B4:84
Certificate issuer: /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Certificate serial: 0185BB366386E04D1C0AF6A446DAFD7DBBB1
Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/KDEUYF_lTI6Gs9OgjeBBwNHqtIQ.roa
Signing time: Mon 16 Jan 2023 15:33:01 +0000
ROA not before: Mon 16 Jan 2023 15:33:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212271
IP address blocks: 2a05:4140::/29 maxlen: 48
2a05:4143::/32 maxlen: 48
2a05:4140:187::/48 maxlen: 48
2a05:4140:400::/40 maxlen: 48
2a05:4140:100::/40 maxlen: 48
2a05:4140:300::/40 maxlen: 40
2a05:4140:10::/48 maxlen: 48
2a05:4140:190::/48 maxlen: 48
2a05:4140:16::/48 maxlen: 48
2a05:4140:4::/48 maxlen: 48
2a05:4144::/32 maxlen: 32
2a05:4140:5::/48 maxlen: 48
2a05:4140:15::/48 maxlen: 48
2a05:4140:8::/48 maxlen: 48
2a05:4140:3::/48 maxlen: 48
2a05:4140:9::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 22 Aug 2023 15:54:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:bb:36:63:86:e0:4d:1c:0a:f6:a4:46:da:fd:7d:bb:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Validity
Not Before: Jan 16 15:33:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=283114605fe54c8e86b3d3a08de041c0d1eab484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:75:89:54:d4:3c:5e:f6:29:5e:86:d5:68:69:
15:27:57:b3:87:6f:9e:30:d4:ad:66:fc:3d:eb:7a:
93:90:b7:27:ae:3d:b3:14:30:13:4c:72:f7:3b:b9:
13:c2:3b:52:17:cd:dd:7d:4a:7e:39:5d:9b:d2:3d:
a8:57:1e:57:25:4d:01:f0:27:83:c5:76:94:8a:3b:
d5:2d:1c:9e:a4:ab:70:80:00:33:4f:97:4f:a3:55:
1f:32:8d:a2:b5:a7:43:55:7f:13:f1:a0:06:85:aa:
64:a6:60:16:a6:cb:bc:95:10:82:c9:14:0d:04:95:
e6:8a:ee:74:bd:9a:74:2e:0d:ce:91:93:1d:72:ee:
52:44:8a:e1:db:2d:83:20:f6:21:60:4b:f6:1f:aa:
0f:1a:d2:d4:0a:98:c2:b4:fc:1a:e4:00:3c:ba:38:
c6:51:cd:9d:82:14:0c:27:01:6b:a1:df:74:4c:c8:
8b:3b:be:7e:12:48:0b:4c:40:42:a3:a5:81:5e:62:
e0:2a:ed:eb:54:07:bb:41:2a:eb:65:9d:c9:d3:3d:
fd:30:6c:e5:1d:b6:db:58:48:ac:55:c8:5e:90:f1:
bb:e8:55:13:f5:7c:e8:08:3b:70:c0:99:c4:6c:b3:
b4:70:43:4a:08:02:90:a4:fc:a6:dc:8c:bd:f0:f9:
c0:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:31:14:60:5F:E5:4C:8E:86:B3:D3:A0:8D:E0:41:C0:D1:EA:B4:84
X509v3 Authority Key Identifier:
keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/KDEUYF_lTI6Gs9OgjeBBwNHqtIQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:4140::/29
Signature Algorithm: sha256WithRSAEncryption
05:ec:98:c4:8a:5d:0b:d2:de:26:18:02:97:10:4e:82:0a:3b:
e8:34:63:df:2e:3b:a7:f6:8d:f4:0a:16:fb:96:f0:08:27:d4:
bc:22:6d:9e:2f:46:7d:4c:7b:6d:e5:74:fd:e1:c4:a3:cd:09:
47:da:76:15:4c:0b:5f:df:04:85:97:d2:af:11:39:15:ab:cf:
2b:db:cc:ef:0f:80:6a:97:9a:3a:cd:c5:c0:13:bf:c5:00:fa:
37:c2:00:65:b0:c5:ca:b4:90:11:8a:71:76:6f:68:16:07:4c:
20:25:71:4d:35:89:5d:51:d8:92:09:1c:5c:ac:ea:23:ff:35:
17:fb:ac:e1:04:c4:9b:8b:e9:22:e4:63:6a:1e:0e:ca:dc:c1:
1a:6e:57:88:77:f5:38:59:d9:5c:6e:6f:7b:ea:91:d2:98:90:
9b:e7:53:85:f5:0d:11:36:06:89:97:c5:4e:59:0a:a2:3b:73:
79:5c:ef:7c:c1:7c:fa:28:18:65:90:96:7a:e1:29:38:17:03:
cf:b4:3c:4e:11:6f:5f:5d:f5:52:d5:2a:80:7e:7d:53:6d:d2:
58:5a:56:64:9d:c9:48:3f:82:61:20:1c:7e:9d:c3:09:61:e9:
48:9a:21:f5:6c:fc:53:61:16:54:a4:ad:82:d9:27:aa:30:e4:
67:70:7d:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:30 2024 by rpki-client on console-ams.rpki-client.org