Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/kfrlRe9Rrp9cdkMDZccWkEKgRhg.roa
File: kfrlRe9Rrp9cdkMDZccWkEKgRhg.roa (raw, json)
Hash identifier: zoPPGxz23BCoSXhq8ZSqQb5vmhvW504kF2JYD32OA/E=
Subject key identifier: 91:FA:E5:45:EF:51:AE:9F:5C:76:43:03:65:C7:16:90:42:A0:46:18
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 018D84C45513695D078A4890ED5875E7C103
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/kfrlRe9Rrp9cdkMDZccWkEKgRhg.roa
Signing time: Wed 07 Feb 2024 18:11:15 +0000
ROA not before: Wed 07 Feb 2024 18:11:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12722
IP address blocks: 2.59.48.0/24 maxlen: 24
37.221.80.0/24 maxlen: 24
45.11.22.0/24 maxlen: 24
45.14.220.0/24 maxlen: 24
45.14.221.0/24 maxlen: 24
45.80.120.0/22 maxlen: 22
94.158.188.0/24 maxlen: 24
194.32.240.0/24 maxlen: 24
195.69.148.0/24 maxlen: 24
195.69.150.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 15 Feb 2024 17:09:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:84:c4:55:13:69:5d:07:8a:48:90:ed:58:75:e7:c1:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Feb 7 18:11:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=91fae545ef51ae9f5c76430365c7169042a04618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:62:ff:07:d0:29:a7:36:52:44:73:19:6c:20:
f8:39:07:0b:cf:8a:c5:06:08:27:8a:15:5a:df:68:
5d:0c:ae:2b:c6:f8:7e:1b:67:51:5b:18:e1:0e:77:
1c:2f:d1:e8:e1:5f:c8:75:ba:d1:58:69:f2:0a:a5:
d9:67:d4:e8:15:0b:ad:a5:09:aa:c6:bd:c5:5d:3d:
8d:fb:47:ab:ac:bd:8f:d4:13:9e:b2:40:47:bd:38:
01:43:ae:ec:03:0e:f2:4e:fa:58:93:db:46:5e:93:
9a:86:6f:a9:f4:52:1c:d1:e6:41:61:cc:fe:8f:15:
f1:b0:58:18:93:b2:f6:70:4c:63:69:4c:99:9f:15:
e5:3b:55:cb:f5:1e:9d:27:52:db:3a:a9:f4:48:e9:
dd:ec:ad:c4:0e:63:37:20:c2:a4:6f:a3:a8:7e:f4:
7c:d6:b2:a7:d0:42:f6:c3:cc:f3:9c:9b:94:af:ef:
5b:8e:02:5c:ab:2d:bb:18:56:17:e1:0f:99:77:42:
00:94:40:91:fa:5e:a7:56:5f:af:d7:56:5c:cc:73:
cb:6c:f7:94:c4:c9:85:eb:e4:ce:7d:1e:ba:be:90:
ad:25:17:02:cd:bd:d1:1c:42:c0:c4:f9:7d:e6:c1:
ce:4a:bd:01:3d:d9:de:d9:90:08:6f:a3:65:9c:bd:
6f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:FA:E5:45:EF:51:AE:9F:5C:76:43:03:65:C7:16:90:42:A0:46:18
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/kfrlRe9Rrp9cdkMDZccWkEKgRhg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.48.0/24
37.221.80.0/24
45.11.22.0/24
45.14.220.0/23
45.80.120.0/22
94.158.188.0/24
194.32.240.0/24
195.69.148.0/24
195.69.150.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:ec:cb:1b:e8:57:17:9d:05:bf:9e:bc:ee:21:4f:59:56:a8:
ec:ad:e9:76:65:61:2d:56:f9:30:3b:8c:9d:f7:13:70:5f:2b:
cc:8b:71:cd:e6:7d:3f:4a:d1:a9:96:ef:74:a5:23:ab:25:5a:
15:be:7f:34:c6:42:77:6f:66:1d:d7:46:e6:cf:df:19:e0:75:
92:80:7d:c8:46:89:e3:17:62:cc:49:59:51:f5:6b:2e:1b:8b:
ae:04:1c:87:2f:85:ae:b9:40:d2:2e:82:c4:10:48:b0:a5:4d:
88:69:7f:cb:c3:98:b8:63:39:9c:3e:53:51:2d:36:a5:e3:01:
99:4d:9a:03:6b:b5:59:7e:26:d4:a9:cb:59:22:87:fe:cb:75:
81:5f:72:ac:05:5a:d4:63:71:51:66:af:c5:7b:06:38:d0:5a:
49:ea:16:36:2b:b1:b5:90:57:71:d2:c8:a6:81:e8:f0:57:db:
8a:c3:db:95:1f:83:cb:7b:36:bd:07:cc:b0:ee:e3:5e:67:88:
0b:e0:de:9a:31:3c:f4:1f:e1:01:07:c3:a4:ee:56:49:2d:a6:
ba:bb:41:dc:d4:e2:91:52:7c:82:5c:fc:db:44:5e:19:25:71:
d4:4c:fb:a1:b0:f1:bd:d6:48:09:6d:c3:62:28:4d:c3:41:2e:
15:4b:cc:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:49 2024 by rpki-client on console-ams.rpki-client.org