Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/KlKzos8AwinjJL_e1LQ34tE7JRc.roa
File: KlKzos8AwinjJL_e1LQ34tE7JRc.roa (raw, json)
Hash identifier: zBZDJmwZHQtdCH66wt18gJB9IvtxXOA6F88HXLIicR4=
Subject key identifier: 2A:52:B3:A2:CF:00:C2:29:E3:24:BF:DE:D4:B4:37:E2:D1:3B:25:17
Certificate issuer: /CN=e2e8f56bc1f5010291681bc2d8c02f9acbf714a0
Certificate serial: 019102DF2889EC4FBC082126875406E946BB
Authority key identifier: E2:E8:F5:6B:C1:F5:01:02:91:68:1B:C2:D8:C0:2F:9A:CB:F7:14:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4uj1a8H1AQKRaBvC2MAvmsv3FKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/KlKzos8AwinjJL_e1LQ34tE7JRc.roa
Signing time: Tue 30 Jul 2024 09:01:04 +0000
ROA not before: Tue 30 Jul 2024 09:01:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12618
IP address blocks: 46.238.192.0/19 maxlen: 24
46.238.224.0/22 maxlen: 22
46.238.228.0/22 maxlen: 22
46.238.232.0/24 maxlen: 24
46.238.234.0/23 maxlen: 23
46.238.239.0/24 maxlen: 24
46.238.248.0/21 maxlen: 21
46.239.144.0/20 maxlen: 20
46.239.160.0/19 maxlen: 20
89.191.144.0/20 maxlen: 24
94.141.128.0/19 maxlen: 19
212.122.216.0/22 maxlen: 22
212.122.220.0/22 maxlen: 22
2001:90c::/31 maxlen: 31
2001:90e::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 19 Nov 2024 11:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:02:df:28:89:ec:4f:bc:08:21:26:87:54:06:e9:46:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2e8f56bc1f5010291681bc2d8c02f9acbf714a0
Validity
Not Before: Jul 30 09:01:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2a52b3a2cf00c229e324bfded4b437e2d13b2517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:fd:bf:14:b0:06:a8:8c:17:ca:bb:00:b4:d6:
7e:7a:73:aa:15:aa:8e:14:91:8f:c8:c4:06:85:9b:
63:56:dc:3c:85:17:89:ea:bf:98:d7:cd:fa:07:2d:
64:fe:df:0e:17:06:24:fb:61:0a:60:4d:ee:e3:d4:
28:0b:5c:e6:03:db:41:2e:20:23:1f:d7:ad:bb:76:
11:f2:f9:27:11:69:95:5d:13:fe:c0:48:e2:6a:95:
e6:22:d2:25:f2:8c:97:89:68:20:d3:47:62:d4:58:
fb:1b:89:da:32:53:9e:e0:ad:e9:40:0d:cd:78:56:
84:8c:b5:c7:f9:6d:04:ae:06:7c:80:48:08:51:87:
3f:3b:80:62:b1:84:82:e8:b2:1a:ea:8d:a2:c4:b2:
ed:63:16:a8:0f:ed:33:d8:ef:bc:91:c4:c0:af:e8:
e6:68:4c:55:e4:07:da:e8:a7:db:90:45:31:d3:0f:
94:34:2b:f0:13:21:09:6e:bd:27:63:50:06:d0:2b:
e8:b7:f7:8a:8c:a3:63:a3:05:51:f3:99:0a:57:86:
77:3d:1e:66:7a:04:b5:51:b7:8c:49:47:4a:f0:72:
b9:be:50:a3:c1:2f:ac:08:d4:19:0a:92:0c:ee:e4:
30:25:4f:bd:95:0e:e8:22:8a:b5:b1:0f:cb:35:5d:
bf:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:52:B3:A2:CF:00:C2:29:E3:24:BF:DE:D4:B4:37:E2:D1:3B:25:17
X509v3 Authority Key Identifier:
keyid:E2:E8:F5:6B:C1:F5:01:02:91:68:1B:C2:D8:C0:2F:9A:CB:F7:14:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uj1a8H1AQKRaBvC2MAvmsv3FKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/KlKzos8AwinjJL_e1LQ34tE7JRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/4uj1a8H1AQKRaBvC2MAvmsv3FKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.238.192.0-46.238.232.255
46.238.234.0/23
46.238.239.0/24
46.238.248.0/21
46.239.144.0-46.239.191.255
89.191.144.0/20
94.141.128.0/19
212.122.216.0/21
IPv6:
2001:90c::-2001:90e:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
57:64:ce:a0:c4:68:0c:1a:e6:f8:09:ca:83:6a:14:0f:a9:63:
e1:23:9b:52:d2:00:ea:69:a1:f0:9d:98:64:9f:bd:8a:bd:f4:
24:ab:51:81:eb:f6:88:57:4a:79:3f:37:96:39:d7:f2:ee:d0:
60:5c:2e:f8:5b:aa:28:a0:24:30:30:be:3b:9b:42:59:13:8c:
f8:ce:ed:e3:8a:0a:45:82:d2:bc:f7:e4:83:15:1e:2c:1a:5a:
1e:ec:e4:05:d4:56:0f:46:94:24:a0:a2:ce:8d:5d:40:2d:66:
11:49:e2:c8:3e:14:e4:ef:2b:4f:5a:cd:a6:2d:7f:3d:5e:0f:
c3:ed:55:05:4a:12:0d:1f:2f:b6:bf:a5:c5:e1:20:39:e3:61:
75:5a:68:8f:73:d9:04:5d:52:06:bb:3f:4b:48:00:de:71:b4:
99:d4:c0:b4:77:f1:fb:f2:1f:1b:12:5a:0c:b2:fc:a6:2a:62:
b6:d5:45:e7:38:86:eb:df:8a:29:36:ca:72:0c:bd:ea:fe:36:
0e:f9:f9:b8:14:46:98:6d:43:f8:33:80:3a:43:f3:58:9b:f5:
d0:d8:bf:ff:0a:9e:51:9f:e9:78:14:f3:35:5a:b0:13:b9:08:
e3:52:4c:0a:ac:8f:e6:a4:fc:59:fe:0a:e8:61:f5:85:52:a0:
59:b3:ab:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 13:48:22 2024 by rpki-client on console-ams.rpki-client.org