Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/KXU_eIKflUxUYMkSBCulrEXCSXs.roa
File: KXU_eIKflUxUYMkSBCulrEXCSXs.roa (raw, json)
Hash identifier: n1tih3ipaHWM2wLa/PuBCZBIVTiWRxb0pL9mByaNsNQ=
Subject key identifier: 29:75:3F:78:82:9F:95:4C:54:60:C9:12:04:2B:A5:AC:45:C2:49:7B
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 018CCB3E2B9DEDFC3502403B424A2D74BAE0
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/KXU_eIKflUxUYMkSBCulrEXCSXs.roa
Signing time: Tue 02 Jan 2024 17:34:58 +0000
ROA not before: Tue 02 Jan 2024 17:34:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 213.209.143.0/24 maxlen: 24
213.209.159.0/24 maxlen: 24
77.90.135.0/24 maxlen: 24
77.90.138.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 18 Jan 2024 17:34:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:cb:3e:2b:9d:ed:fc:35:02:40:3b:42:4a:2d:74:ba:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Jan 2 17:34:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=29753f78829f954c5460c912042ba5ac45c2497b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:bf:33:4c:31:51:67:5e:45:8d:c6:e6:ea:05:
6c:9a:01:3b:65:7b:19:2b:24:72:ed:e8:da:ec:00:
61:e8:4c:1b:b4:59:2e:f1:6c:da:41:c3:35:09:dc:
bd:3e:c1:e9:10:03:01:a1:67:e6:da:61:f2:c5:32:
30:66:bc:c5:de:58:21:77:68:c4:67:de:9f:c5:12:
53:88:d9:a6:57:05:32:77:f2:46:56:f6:7e:47:1e:
f1:24:58:a5:37:47:1d:11:4c:57:4e:ca:b1:cc:ca:
df:0c:38:91:36:77:09:11:88:86:d0:b7:ac:87:82:
6c:b9:72:89:07:29:2a:1e:81:fb:d2:a5:58:60:e2:
08:2a:0d:a8:f5:1d:cb:8f:28:03:a0:04:bf:ff:57:
c9:b5:1c:ec:ec:04:10:3d:8c:f3:db:2e:33:55:d8:
ce:c3:8e:ed:b5:20:5a:9a:f4:20:38:01:f1:c7:f6:
fd:1c:eb:ef:b8:4c:ce:14:a8:e1:a7:b7:ed:30:6a:
b1:c2:6e:db:5b:b9:e3:8c:5e:ff:78:bd:d4:ff:e6:
f1:cc:17:39:49:e4:20:c8:07:c1:d1:88:65:d5:5a:
9e:58:06:9d:04:0c:71:b6:41:09:cc:96:e3:7e:9a:
b6:97:92:2f:c4:b2:ac:17:b6:7d:23:34:24:1f:79:
9f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:75:3F:78:82:9F:95:4C:54:60:C9:12:04:2B:A5:AC:45:C2:49:7B
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/KXU_eIKflUxUYMkSBCulrEXCSXs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.135.0/24
77.90.138.0/24
213.209.143.0/24
213.209.159.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:90:de:80:2a:0f:27:f4:f4:c5:52:34:7f:27:b3:97:d6:bf:
75:d8:5a:5e:5f:19:20:48:79:ec:21:8d:83:be:6d:93:60:a1:
8e:60:81:7c:49:e1:bf:5c:92:4b:14:9c:f8:ee:9b:55:0e:b6:
a9:cc:26:cf:54:fd:a8:23:ff:12:db:7f:eb:c6:56:60:dd:fe:
a2:18:13:b5:0a:3d:b6:70:b1:11:aa:7e:d1:ba:9f:2c:16:11:
1b:2b:87:2d:28:52:8e:43:e9:ad:d3:3a:65:57:6f:56:29:db:
cd:04:41:a5:df:ab:9f:a3:0e:69:71:b3:5b:92:4a:cd:b4:e3:
05:99:dd:d9:b7:cd:73:8c:ab:55:de:33:6b:48:8c:97:72:f3:
84:b2:e4:8e:5a:ae:45:1e:18:6c:f3:a2:54:fe:5b:2e:42:3e:
fb:dd:99:33:6f:53:b5:45:38:3b:7d:8e:de:f6:86:0a:9a:e1:
5c:6a:d7:46:cb:22:86:47:31:09:ab:14:f2:a1:19:3c:dd:2c:
d2:cc:07:1b:dc:b5:71:35:70:bd:5d:2e:f9:4e:07:bb:3c:e4:
42:f4:5f:83:3f:40:26:34:22:a8:b0:42:bb:be:c3:ad:67:5d:
13:a2:5b:0f:3a:09:df:47:8e:92:2b:b0:00:80:44:79:42:e2:
8f:f5:fe:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 18 22:04:39 2024 by rpki-client on console-fra.rpki-client.org