Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/KqwQ3g2OPa1VVqSGH_X-NyGzUGs.roa
File: KqwQ3g2OPa1VVqSGH_X-NyGzUGs.roa (raw, json)
Hash identifier: F8MHxiukjjuDorMxGqGOgdmXWe8xXHSua+0rZcQF95w=
Subject key identifier: 2A:AC:10:DE:0D:8E:3D:AD:55:56:A4:86:1F:F5:FE:37:21:B3:50:6B
Certificate issuer: /CN=ce9135dfed0bb6335d19ddd6d7e99f48afbe3c01
Certificate serial: 018570C2C02FEF6BAF2DF79474A27D5F01DC
Authority key identifier: CE:91:35:DF:ED:0B:B6:33:5D:19:DD:D6:D7:E9:9F:48:AF:BE:3C:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zpE13-0LtjNdGd3W1-mfSK--PAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/KqwQ3g2OPa1VVqSGH_X-NyGzUGs.roa
Signing time: Mon 02 Jan 2023 04:34:49 +0000
ROA not before: Mon 02 Jan 2023 04:34:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13005
IP address blocks: 213.170.132.0/24 maxlen: 32
213.170.128.0/22 maxlen: 32
213.170.136.0/22 maxlen: 32
213.170.134.0/24 maxlen: 32
85.113.68.0/23 maxlen: 32
213.170.144.0/24 maxlen: 32
213.170.140.0/24 maxlen: 32
213.170.150.0/24 maxlen: 32
213.170.152.0/23 maxlen: 32
213.170.148.0/23 maxlen: 32
213.170.147.0/24 maxlen: 32
213.170.154.0/24 maxlen: 32
2001:be0::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:c2:c0:2f:ef:6b:af:2d:f7:94:74:a2:7d:5f:01:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce9135dfed0bb6335d19ddd6d7e99f48afbe3c01
Validity
Not Before: Jan 2 04:34:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2aac10de0d8e3dad5556a4861ff5fe3721b3506b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:14:12:0c:5f:5c:f1:6c:2a:39:34:04:b8:c1:
ba:a0:52:a4:c0:f5:b2:87:26:0d:8e:79:1c:46:cd:
73:41:65:57:dd:78:e0:d7:49:8d:21:ea:8c:4d:3d:
e8:e3:6a:f9:66:d1:4a:bc:cb:41:b6:a0:bc:bf:0c:
6f:65:6a:1b:ce:af:26:86:6a:44:d6:8e:8c:24:73:
82:97:7d:ad:20:af:39:d8:ea:bb:30:e5:a1:d2:44:
ae:ed:f4:71:a7:ec:f4:40:b4:f3:86:62:21:d2:8f:
28:68:43:24:f7:f8:70:79:ca:cb:16:ea:44:be:9c:
fe:01:30:1f:fc:67:1b:33:2a:c4:fc:11:eb:43:93:
de:fa:ae:a6:8a:ec:27:d8:89:21:27:f1:0a:9f:ca:
aa:5e:dc:79:a1:76:2b:d2:42:58:39:de:c9:10:52:
06:4d:54:24:c4:33:23:32:d5:e5:5a:76:a9:d5:b6:
c7:4f:b0:52:14:77:a4:af:89:3a:47:03:94:4f:5b:
db:30:68:3e:52:d4:fe:37:0e:16:3b:3c:03:b4:78:
8e:02:a5:da:2d:75:b7:e9:0a:8f:cd:4e:8d:2c:26:
62:89:a4:14:5a:3c:7a:4b:5b:b9:7d:49:a9:43:a4:
d0:86:1a:65:74:23:3d:8a:66:b6:91:58:e4:17:95:
7e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:AC:10:DE:0D:8E:3D:AD:55:56:A4:86:1F:F5:FE:37:21:B3:50:6B
X509v3 Authority Key Identifier:
keyid:CE:91:35:DF:ED:0B:B6:33:5D:19:DD:D6:D7:E9:9F:48:AF:BE:3C:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zpE13-0LtjNdGd3W1-mfSK--PAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/KqwQ3g2OPa1VVqSGH_X-NyGzUGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/zpE13-0LtjNdGd3W1-mfSK--PAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.113.68.0/23
213.170.128.0-213.170.132.255
213.170.134.0/24
213.170.136.0-213.170.140.255
213.170.144.0/24
213.170.147.0-213.170.150.255
213.170.152.0-213.170.154.255
IPv6:
2001:be0::/32
Signature Algorithm: sha256WithRSAEncryption
8a:30:36:9b:5e:74:f1:76:7e:f3:ab:85:c5:f3:16:0f:c5:5c:
d4:77:64:40:e0:3a:f4:72:9f:e1:83:2c:32:8a:69:c7:e9:3b:
01:0b:a3:2f:d0:0a:e9:ca:96:19:e6:8b:1d:52:3e:10:8c:12:
d3:14:2a:1b:e4:2b:a6:16:68:8b:aa:59:41:e0:09:62:78:dd:
de:c4:7a:6c:83:12:1f:8c:98:d9:d2:af:6a:72:88:b5:cf:12:
30:0b:d7:05:a1:17:a1:b3:67:97:15:e4:a2:d4:97:9f:69:4c:
dd:ed:88:0b:a7:e1:07:25:c3:a7:46:c2:36:2b:2a:5b:8d:9c:
62:00:95:6e:ca:75:4c:89:88:b9:92:7b:02:6b:64:95:08:eb:
9b:56:af:0b:77:c6:ff:7f:ee:c1:67:c0:de:ea:4b:57:5e:87:
48:81:f4:bb:76:b2:02:5a:17:97:02:06:56:43:69:37:dc:dc:
1b:39:fe:68:6f:af:31:67:31:bd:50:02:0f:81:5e:3f:52:84:
19:ac:ab:78:8a:d3:72:4a:28:72:da:ca:b8:f0:a9:09:a4:cf:
90:17:dc:3d:4d:71:76:45:d6:d1:6c:46:22:91:e9:47:30:9f:
60:86:16:bb:a3:15:3c:d7:3a:a9:f8:22:62:4f:82:d8:9d:3b:
98:ee:69:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:23 2024 by rpki-client on console-ams.rpki-client.org