Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/K6SmS0RizSC6TYMkNksiCtRLjtc.roa
File: K6SmS0RizSC6TYMkNksiCtRLjtc.roa (raw, json)
Hash identifier: H+foIYGqLx7sjNGlS3s+7Kgpf0qkhIaIHvj89tprVIo=
Subject key identifier: 2B:A4:A6:4B:44:62:CD:20:BA:4D:83:24:36:4B:22:0A:D4:4B:8E:D7
Certificate issuer: /CN=c59bd1e8c58f641bd944305f11c54efe5f3a0ce2
Certificate serial: 018BA491BC5C1E0BC74441D31D0730D5C065
Authority key identifier: C5:9B:D1:E8:C5:8F:64:1B:D9:44:30:5F:11:C5:4E:FE:5F:3A:0C:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/K6SmS0RizSC6TYMkNksiCtRLjtc.roa
Signing time: Mon 06 Nov 2023 12:18:16 +0000
ROA not before: Mon 06 Nov 2023 12:18:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57497
IP address blocks: 45.89.236.0/22 maxlen: 24
212.18.108.0/24 maxlen: 24
103.130.144.0/24 maxlen: 24
103.130.146.0/24 maxlen: 24
45.93.168.0/24 maxlen: 24
45.93.171.0/24 maxlen: 24
45.93.169.0/24 maxlen: 24
45.93.170.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:30:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a4:91:bc:5c:1e:0b:c7:44:41:d3:1d:07:30:d5:c0:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c59bd1e8c58f641bd944305f11c54efe5f3a0ce2
Validity
Not Before: Nov 6 12:18:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2ba4a64b4462cd20ba4d8324364b220ad44b8ed7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cf:f1:89:20:85:a9:52:22:16:b8:42:f6:3b:
ee:34:08:8e:16:1d:09:5a:68:35:0b:dd:42:f0:f0:
b1:aa:b0:4c:57:20:08:c2:43:9b:1b:bc:e1:07:16:
3c:c5:7f:2e:98:ab:a5:44:c4:28:86:03:b8:32:32:
6c:2e:eb:ab:39:3d:13:f0:58:5e:24:62:b2:b5:81:
9d:bf:39:89:13:d8:84:96:ed:1e:6a:4f:35:f2:53:
92:84:7c:15:e2:9e:7a:dd:64:2e:52:0f:9a:75:dc:
c3:b3:10:a6:49:8c:4d:7b:f5:11:04:7c:a2:52:9d:
d5:d3:65:ea:17:4e:44:66:74:46:f5:b2:18:b4:a3:
da:fe:39:dc:90:58:b6:8e:d9:f6:e7:8b:3b:ff:cd:
17:79:a6:eb:97:7c:6f:cb:aa:dc:1c:a2:ab:52:2f:
4c:f2:6a:67:48:47:98:85:ee:b8:d1:b5:2a:90:38:
14:d3:c0:5c:bd:fc:af:4b:c8:df:c1:a5:38:80:bf:
18:4b:d2:ca:4a:05:aa:f6:e7:3a:e7:c6:f6:ed:60:
aa:c9:a5:82:02:ce:a9:32:64:3e:83:88:63:71:9a:
b1:48:f3:b5:c6:a0:72:f4:ef:44:bd:b8:b3:64:00:
29:76:16:41:43:10:94:e7:66:b4:7f:51:82:9f:b8:
18:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:A4:A6:4B:44:62:CD:20:BA:4D:83:24:36:4B:22:0A:D4:4B:8E:D7
X509v3 Authority Key Identifier:
keyid:C5:9B:D1:E8:C5:8F:64:1B:D9:44:30:5F:11:C5:4E:FE:5F:3A:0C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/K6SmS0RizSC6TYMkNksiCtRLjtc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.236.0/22
45.93.168.0/22
103.130.144.0/24
103.130.146.0/24
212.18.108.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:15:05:44:1b:96:09:81:2a:94:c6:e5:e6:71:6d:54:62:30:
c8:e0:eb:f2:9d:41:03:12:b6:c0:55:5b:fb:be:b3:97:90:1e:
53:84:ee:aa:0e:71:1c:97:85:f9:c5:1f:c1:5d:39:84:d0:42:
fd:7b:69:97:c6:73:e6:69:9e:32:88:43:9e:14:47:74:fe:30:
40:04:12:84:a4:68:b4:dd:0c:b2:c7:b9:ad:3a:be:b6:01:80:
30:3c:9b:30:8d:1d:92:82:6e:86:bb:fb:22:06:21:10:2c:43:
59:22:f8:84:a4:7b:99:85:90:af:4f:89:70:15:76:b3:ee:85:
91:d1:43:09:a5:91:6b:e1:f4:7e:b2:a4:4a:72:0b:c3:4c:76:
d1:41:25:05:2c:a4:43:e7:28:96:5f:ba:1b:fa:32:9a:a8:ae:
3e:de:0f:9b:c2:a2:1d:31:a3:1f:a2:4d:bd:31:38:e1:3a:94:
32:c4:4d:16:df:dc:c1:c9:9b:42:fb:cc:34:9f:36:d5:e5:3d:
9e:f1:5b:0d:6d:fe:e8:28:a6:6b:df:3c:16:f2:a3:af:60:f9:
64:0f:87:8f:77:67:81:76:80:7a:65:49:29:03:de:90:8a:6c:
99:d3:ed:24:f7:bc:1c:3f:8a:ac:4f:a4:10:dc:e6:95:01:1c:
10:19:79:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:16 2024 by rpki-client on console-fra.rpki-client.org