Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/KHYg_MFyrbjVd0GtNqVbGhipI7w.roa
File: KHYg_MFyrbjVd0GtNqVbGhipI7w.roa (raw, json)
Hash identifier: UV7Rz/YKEpFVfhrop/9s42PJ6KnvDMhXHblWc7EaBvw=
Subject key identifier: 28:76:20:FC:C1:72:AD:B8:D5:77:41:AD:36:A5:5B:1A:18:A9:23:BC
Certificate issuer: /CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec
Certificate serial: 018CCA2968725ECD2F5F4AEBE1B57B22D7DB
Authority key identifier: A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/KHYg_MFyrbjVd0GtNqVbGhipI7w.roa
Signing time: Tue 02 Jan 2024 12:32:40 +0000
ROA not before: Tue 02 Jan 2024 12:32:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13285
IP address blocks: 78.144.0.0/13 maxlen: 24
2.96.0.0/13 maxlen: 24
217.68.128.0/20 maxlen: 24
62.3.192.0/18 maxlen: 24
185.173.120.0/22 maxlen: 24
92.0.0.0/11 maxlen: 24
62.24.128.0/17 maxlen: 24
89.240.0.0/14 maxlen: 24
212.139.24.0/24 maxlen: 24
212.139.148.0/22 maxlen: 22
91.146.112.0/21 maxlen: 24
62.241.160.0/19 maxlen: 24
185.173.116.0/22 maxlen: 24
185.112.212.0/22 maxlen: 24
217.8.0.0/19 maxlen: 24
212.139.133.0/24 maxlen: 24
2001:4a00::/27 maxlen: 27
2a00:4340::/32 maxlen: 32
2001:7e0::/32 maxlen: 32
2a0b:e900::/29 maxlen: 29
2a0b:db00::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 13 Feb 2024 14:53:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:68:72:5e:cd:2f:5f:4a:eb:e1:b5:7b:22:d7:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec
Validity
Not Before: Jan 2 12:32:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=287620fcc172adb8d57741ad36a55b1a18a923bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:6a:06:7d:f4:51:22:c5:87:85:22:52:e8:67:
7b:fe:71:d8:c8:3f:54:9f:ab:3d:8e:26:19:70:20:
a9:72:74:9b:ac:91:38:41:73:97:7e:0d:76:a5:7d:
e5:e7:d1:96:9e:ae:38:2c:d5:cb:6e:01:23:b5:a7:
0d:fe:85:a3:f2:44:84:19:a6:34:52:10:66:9b:52:
65:65:7f:60:ed:12:b4:d7:53:8d:bf:08:6d:14:72:
03:b6:01:9b:4c:33:d1:d9:70:35:34:48:a8:50:12:
d8:53:ef:f1:f1:b7:2b:82:c6:28:2f:d2:67:7d:d6:
91:73:55:61:14:44:17:b9:70:2a:90:65:59:77:93:
02:7c:b9:26:40:56:ff:a3:75:ea:5d:ed:23:36:16:
ab:a5:7f:04:f0:48:81:a4:21:1a:d3:75:56:fc:c3:
18:b5:65:2a:c8:c2:1a:4f:fe:70:56:ea:1d:fd:97:
48:a4:ae:3a:3b:18:02:79:35:bb:5a:bd:9e:07:20:
c4:67:b0:8a:81:f7:b6:3b:f2:df:b0:1f:7d:c8:a3:
6a:19:d0:a1:56:45:46:53:37:b3:6e:65:a5:08:5c:
66:76:6f:a3:b1:92:bd:58:50:58:ec:b9:a5:59:41:
4c:69:e9:03:21:a8:9c:24:80:4d:ed:64:55:69:83:
a1:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:76:20:FC:C1:72:AD:B8:D5:77:41:AD:36:A5:5B:1A:18:A9:23:BC
X509v3 Authority Key Identifier:
keyid:A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/KHYg_MFyrbjVd0GtNqVbGhipI7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.96.0.0/13
62.3.192.0/18
62.24.128.0/17
62.241.160.0/19
78.144.0.0/13
89.240.0.0/14
91.146.112.0/21
92.0.0.0/11
185.112.212.0/22
185.173.116.0-185.173.123.255
212.139.24.0/24
212.139.133.0/24
212.139.148.0/22
217.8.0.0/19
217.68.128.0/20
IPv6:
2001:7e0::/32
2001:4a00::/27
2a00:4340::/32
2a0b:db00::/29
2a0b:e900::/29
Signature Algorithm: sha256WithRSAEncryption
83:6f:35:54:19:87:81:5b:ba:2d:b9:c2:01:8b:82:9f:86:25:
09:80:11:eb:72:5a:e0:17:be:ea:25:dd:22:3d:93:af:89:9f:
fd:df:f9:47:cf:35:a4:ad:fd:50:de:00:52:c2:6a:79:9c:c4:
13:34:f9:a7:ea:6f:04:6a:d3:f8:8f:d1:86:48:26:59:57:8d:
96:f2:d2:82:19:f2:a2:8d:36:0e:55:9f:b3:58:a4:60:3a:31:
80:bf:f5:f1:a3:ad:44:fc:9a:d9:5e:e3:2c:89:df:bf:c0:76:
7e:e6:83:5d:ba:6a:11:e7:12:0f:a7:82:77:6c:97:e8:cd:e5:
d6:11:94:9a:f4:86:2c:10:26:26:6f:63:75:18:09:9c:77:ce:
45:00:17:13:f6:fe:62:ad:0c:1c:32:f4:58:25:ae:61:1d:79:
ce:da:58:14:94:26:1e:b6:86:d0:0f:f2:3f:a1:88:f5:b7:b7:
6d:b0:40:68:b3:cf:90:6d:1f:43:e5:44:18:26:54:0a:cb:d6:
e7:2d:08:b4:39:27:d7:a3:29:30:95:25:6b:3f:24:06:fd:c3:
5b:df:39:72:0d:6a:2c:0d:32:c7:47:79:f5:50:07:83:4f:86:
8b:fb:3b:bf:79:0a:42:5d:3b:57:59:2e:a1:c1:01:de:23:26:
f2:bb:c2:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 13 20:23:45 2024 by rpki-client on console-ams.rpki-client.org