Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/Kuxqep4gADp8WflwcqzmmYsfYUg.roa
File: Kuxqep4gADp8WflwcqzmmYsfYUg.roa (raw, json)
Hash identifier: lkrQEimExPKodwas7QrSi0uHXQ7WvcuaoZ/cFTqsWbI=
Subject key identifier: 2A:EC:6A:7A:9E:20:00:3A:7C:59:F9:70:72:AC:E6:99:8B:1F:61:48
Certificate issuer: /CN=9bbc4239c9cb981f19a495e633d3bec889fcbe89
Certificate serial: 018FC97DAD14C4C003AB33B45CE7A32B62A9
Authority key identifier: 9B:BC:42:39:C9:CB:98:1F:19:A4:95:E6:33:D3:BE:C8:89:FC:BE:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7xCOcnLmB8ZpJXmM9O-yIn8vok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/Kuxqep4gADp8WflwcqzmmYsfYUg.roa
Signing time: Thu 30 May 2024 12:33:27 +0000
ROA not before: Thu 30 May 2024 12:33:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43940
IP address blocks: 62.4.32.0/19 maxlen: 19
109.72.96.0/20 maxlen: 20
185.64.0.0/22 maxlen: 22
185.179.92.0/22 maxlen: 22
213.133.0.0/19 maxlen: 19
213.196.64.0/19 maxlen: 19
2a03:7a0::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 30 May 2024 13:40:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:c9:7d:ad:14:c4:c0:03:ab:33:b4:5c:e7:a3:2b:62:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bbc4239c9cb981f19a495e633d3bec889fcbe89
Validity
Not Before: May 30 12:33:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2aec6a7a9e20003a7c59f97072ace6998b1f6148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:5b:1d:c4:a6:01:61:2f:2a:16:ae:eb:0d:10:
2b:15:a1:6f:90:ab:2f:8e:35:15:0c:05:16:ab:2c:
d4:79:8f:d7:2e:ce:17:aa:6b:25:cd:f9:3b:d7:c2:
e3:65:fa:e9:2a:1b:9a:85:89:5b:61:be:cc:b0:b7:
a5:54:27:f5:90:73:03:c8:b0:2e:ff:4e:7f:a5:65:
52:b6:0e:ea:71:97:8a:08:a8:84:93:b2:97:8b:38:
81:7d:bc:e3:46:d9:cc:7e:f9:dc:68:bb:45:54:e0:
c6:7e:e6:85:d1:40:a1:81:ea:5e:43:11:89:6d:8f:
cd:6d:0a:ea:e4:0e:6c:17:bd:b1:3c:97:3c:bb:d2:
a8:17:f4:c9:d1:2a:f9:e7:89:73:41:5e:8f:8e:b4:
48:ea:e3:46:4e:19:79:a6:c8:4f:7f:1c:e8:5a:3c:
08:7c:76:90:d2:11:46:12:76:6b:fb:ef:08:b6:b7:
9c:c1:b3:05:81:6b:4e:8f:10:2e:97:47:4c:ad:b4:
09:e9:3a:57:5a:6b:e2:7f:b1:57:2e:a0:52:4f:51:
c1:b9:41:21:42:82:ec:fb:19:c7:a5:55:3e:e1:1f:
cd:77:b5:3d:27:5a:1b:6d:20:a9:7f:7e:70:c1:cd:
0a:ec:b8:e5:95:a7:5f:5f:e5:4f:c1:1f:79:25:a6:
63:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:EC:6A:7A:9E:20:00:3A:7C:59:F9:70:72:AC:E6:99:8B:1F:61:48
X509v3 Authority Key Identifier:
keyid:9B:BC:42:39:C9:CB:98:1F:19:A4:95:E6:33:D3:BE:C8:89:FC:BE:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7xCOcnLmB8ZpJXmM9O-yIn8vok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/Kuxqep4gADp8WflwcqzmmYsfYUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.4.32.0/19
109.72.96.0/20
185.64.0.0/22
185.179.92.0/22
213.133.0.0/19
213.196.64.0/19
IPv6:
2a03:7a0::/29
Signature Algorithm: sha256WithRSAEncryption
0f:03:8b:45:3d:de:89:f4:96:d7:44:cd:f7:44:fa:aa:97:3b:
39:38:b7:d5:83:d0:2f:29:43:c0:7d:ba:e5:fa:65:90:48:82:
49:ea:8c:03:b7:fe:e1:1e:2b:7e:84:d6:10:57:aa:17:de:1d:
18:64:9d:a7:55:fb:44:98:ed:8b:4f:d7:2a:97:30:7b:66:39:
f1:6b:fc:0c:7e:c3:89:2a:fa:b1:f6:5b:b8:d5:3c:b7:93:5d:
b0:bf:97:a4:dd:c6:9c:4d:14:7b:5a:93:c2:9f:98:48:f4:09:
9b:02:94:b2:c7:3d:91:2c:ae:6e:58:c5:29:a8:c0:68:34:3a:
c0:34:90:13:ac:76:42:a4:59:17:d9:d5:18:9e:f7:d1:cd:51:
67:5e:bb:57:38:e8:72:43:6e:21:16:6b:73:8a:04:d6:87:7d:
9b:1f:74:ef:de:e2:95:f4:9c:01:18:9a:4e:9f:b4:b8:38:4d:
a4:17:02:24:08:fe:23:61:0f:a2:c3:07:bc:15:19:b7:ee:df:
43:66:83:6d:3f:e4:16:77:ae:6f:ff:83:e8:ce:f5:c0:b3:76:
80:23:76:f3:5c:fa:02:d9:72:ae:e5:b6:e9:96:22:18:fc:4d:
16:21:9b:7d:00:63:e7:d8:6f:13:c4:62:9e:1a:3f:cd:90:76:
ff:cb:ea:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:10 2024 by rpki-client on console-fra.rpki-client.org