Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/ku-EiaWBpr7X84sHbmsJ24Olk5o.roa
File: ku-EiaWBpr7X84sHbmsJ24Olk5o.roa (raw, json)
Hash identifier: 8kUlGRT57xEoJihpM970nhgW0mLJ4vv3FL2GMI7zatM=
Subject key identifier: 92:EF:84:89:A5:81:A6:BE:D7:F3:8B:07:6E:6B:09:DB:83:A5:93:9A
Certificate issuer: /CN=f815e02bda7a9071487837d31558b5e0221d3cf9
Certificate serial: 018E52B68E770CDBB7EE5C6159974B860251
Authority key identifier: F8:15:E0:2B:DA:7A:90:71:48:78:37:D3:15:58:B5:E0:22:1D:3C:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BXgK9p6kHFIeDfTFVi14CIdPPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/ku-EiaWBpr7X84sHbmsJ24Olk5o.roa
Signing time: Mon 18 Mar 2024 17:57:59 +0000
ROA not before: Mon 18 Mar 2024 17:57:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31246
IP address blocks: 2a14:2040::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 04 Apr 2024 05:58:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:52:b6:8e:77:0c:db:b7:ee:5c:61:59:97:4b:86:02:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f815e02bda7a9071487837d31558b5e0221d3cf9
Validity
Not Before: Mar 18 17:57:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=92ef8489a581a6bed7f38b076e6b09db83a5939a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:5c:b7:a2:86:00:c4:ab:bd:7d:37:4c:b5:99:
78:6c:b1:0d:9a:c5:33:2e:5d:74:02:cb:cc:23:8e:
dd:7e:8c:b7:b3:d8:be:df:34:7a:e7:26:4a:c2:f4:
9b:ec:d1:ca:d8:0e:88:b4:ac:2c:4c:92:7d:ec:9d:
ee:9b:2d:11:4f:8c:d7:ee:71:fc:c7:ee:13:15:a3:
bd:b0:5a:f4:c9:68:f1:60:e6:8f:c1:20:81:98:f3:
31:72:d4:c9:5e:bd:e1:7b:e8:01:55:d9:40:05:d3:
5e:9d:71:0f:70:75:88:88:ec:fb:6d:30:94:21:d6:
d4:78:97:cb:76:8e:84:4d:a3:2f:9e:19:c6:71:2c:
7c:64:49:9c:43:ab:8f:6e:ad:30:8a:c4:de:45:d6:
29:7d:e8:7f:6f:56:91:03:f4:12:26:d5:21:5a:43:
1d:c1:46:60:b0:2d:6b:9b:78:8a:93:ff:9f:3d:38:
51:41:66:15:5e:8f:2e:97:c9:b5:75:35:4e:ad:49:
b7:8d:ec:26:df:9e:d2:68:69:bd:3c:b1:e7:f5:2b:
2d:d9:22:18:66:d5:ec:83:13:f4:45:0d:05:39:e5:
ad:a3:02:b0:35:de:52:5d:e6:43:ab:ff:b7:f2:60:
b5:6b:6e:46:0b:7b:62:41:ca:5c:6a:78:de:b7:68:
e0:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:EF:84:89:A5:81:A6:BE:D7:F3:8B:07:6E:6B:09:DB:83:A5:93:9A
X509v3 Authority Key Identifier:
keyid:F8:15:E0:2B:DA:7A:90:71:48:78:37:D3:15:58:B5:E0:22:1D:3C:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BXgK9p6kHFIeDfTFVi14CIdPPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/ku-EiaWBpr7X84sHbmsJ24Olk5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:2040::/29
Signature Algorithm: sha256WithRSAEncryption
69:57:46:20:4f:76:ce:8b:50:bf:50:fc:6c:db:03:6e:5f:20:
ac:e7:9e:95:cd:98:00:9f:18:c3:69:46:d4:01:ef:40:56:b8:
1d:d5:e1:e7:f9:b7:64:38:b6:34:c2:df:21:b7:75:6c:bc:50:
62:5c:55:c4:bf:87:a9:e3:5a:34:cb:5b:c9:a4:3a:36:84:55:
0c:23:0e:2f:1d:f2:b2:10:14:f7:97:de:83:cf:77:86:f7:39:
01:be:52:c8:01:22:6c:ce:7c:98:71:ae:d3:e8:a0:90:7a:29:
6d:a7:c7:97:b4:79:1e:c9:74:6f:dd:03:f2:ca:60:d9:f6:ff:
cb:ed:8d:58:dc:d2:cf:52:02:ce:30:1d:f3:7c:a6:fa:64:34:
41:3b:ad:ea:08:67:fd:7d:a3:ea:54:23:c0:91:c8:f5:52:6f:
65:0a:20:f6:8d:07:dd:f1:9a:42:50:6c:74:06:29:79:68:db:
be:7e:75:a2:0e:88:77:35:13:1c:42:9b:94:07:e2:71:cd:5e:
b6:3b:e3:58:61:0f:a8:fd:8d:ef:c6:b5:9a:f4:2b:8c:e1:60:
3b:df:e4:9f:20:8f:1a:db:dd:44:36:fe:e4:9b:9b:23:de:73:
4c:d2:7d:8b:2a:34:14:2e:6b:69:3e:99:92:48:68:f7:27:07:
81:7d:f7:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:34 2024 by rpki-client on console-ams.rpki-client.org