Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/RkKS8xZhYnTAMLLex8d72eF10gU.roa
File: RkKS8xZhYnTAMLLex8d72eF10gU.roa (raw, json)
Hash identifier: 93WdsaZMcguDe5Qwf5B3c+huIqmueRRn1TspjYhbxws=
Subject key identifier: 46:42:92:F3:16:61:62:74:C0:30:B2:DE:C7:C7:7B:D9:E1:75:D2:05
Certificate issuer: /CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20
Certificate serial: 018C8B5ED9E9ABFD3B341BED30E8F3B05637
Authority key identifier: EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/RkKS8xZhYnTAMLLex8d72eF10gU.roa
Signing time: Thu 21 Dec 2023 07:54:58 +0000
ROA not before: Thu 21 Dec 2023 07:54:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39519
IP address blocks: 195.191.98.0/24 maxlen: 24
194.107.165.0/24 maxlen: 24
86.105.223.0/24 maxlen: 24
2001:4ba2::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:33:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:8b:5e:d9:e9:ab:fd:3b:34:1b:ed:30:e8:f3:b0:56:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20
Validity
Not Before: Dec 21 07:54:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=464292f316616274c030b2dec7c77bd9e175d205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:43:cc:7c:9e:d5:49:97:ca:51:13:4b:7f:ac:
4f:66:81:0b:59:30:03:19:55:aa:c4:57:7b:0d:12:
92:a3:29:56:48:14:70:1d:b6:95:9a:b6:45:ac:0d:
7e:e9:35:22:3c:c3:8a:ce:d0:2c:f1:7e:90:84:1f:
18:e5:9c:03:3e:4d:b8:f2:59:32:ab:ac:26:f9:61:
5e:cc:a1:54:2d:fb:67:8f:cb:9e:70:c6:ea:2d:8d:
09:98:d2:59:cf:aa:84:26:1d:ec:ed:3c:6c:b5:af:
e2:8d:0b:fa:48:7f:d1:33:b4:63:39:db:6c:02:e2:
e8:b9:fe:5d:a3:1f:7e:5b:45:7e:28:ef:45:77:73:
dc:55:f9:38:c0:1a:0a:77:f0:8d:0c:7c:63:e1:1f:
7f:96:4e:a8:52:b9:81:74:20:ae:50:71:59:b6:7a:
74:de:bb:a0:ed:e5:49:5d:9d:51:c4:98:17:66:c3:
62:be:39:a8:43:a6:0c:f4:17:2b:91:22:61:00:9d:
a2:f7:d7:2b:b7:36:53:52:d6:5b:be:b0:78:90:dd:
ed:b7:75:c1:eb:a8:95:1b:04:b8:65:6b:69:cc:d0:
b9:2f:a8:21:0f:06:d5:a1:38:c7:e7:0f:bd:be:cc:
26:14:ac:58:9d:d2:85:43:b3:66:d8:9b:62:37:de:
8b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:42:92:F3:16:61:62:74:C0:30:B2:DE:C7:C7:7B:D9:E1:75:D2:05
X509v3 Authority Key Identifier:
keyid:EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/RkKS8xZhYnTAMLLex8d72eF10gU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.105.223.0/24
194.107.165.0/24
195.191.98.0/24
IPv6:
2001:4ba2::/32
Signature Algorithm: sha256WithRSAEncryption
01:a5:5c:11:75:33:08:36:ea:90:34:7f:0c:80:81:ac:0a:32:
14:dd:6c:d9:98:6c:86:6e:92:52:2d:bc:a0:11:be:22:97:b3:
cc:98:43:05:35:d2:74:58:41:6d:c0:0b:00:bd:4f:db:fc:b9:
23:2d:7e:d9:97:23:f1:2a:aa:4e:00:5d:9e:6f:78:22:f6:9b:
7b:fc:f6:0c:77:fa:7e:2a:4b:4b:7c:e7:b3:c2:ab:5c:53:c5:
ce:16:29:61:c7:f0:32:7a:51:3a:35:df:03:cf:e3:cd:e6:48:
71:9d:9f:c4:97:5e:f4:ad:3a:59:fc:70:e8:82:63:5c:a1:8c:
ea:74:28:1a:12:26:66:83:8f:47:2d:59:92:b4:38:36:a3:c6:
93:bd:4f:da:67:b7:85:1f:67:e4:47:57:98:a9:a1:0b:21:f2:
79:eb:31:70:41:8b:24:c0:d8:b5:31:1b:14:cd:78:15:94:d2:
f9:94:07:73:f5:90:00:3a:34:44:10:11:18:f1:5a:52:4b:7d:
8d:c4:f7:09:9e:18:4d:a6:52:35:25:d7:2c:f2:aa:fa:97:88:
bf:21:8f:b7:40:e0:5b:08:80:d4:38:92:de:8b:1d:b7:0b:ec:
3e:14:44:2a:02:10:20:e3:10:ee:1c:2f:1a:a2:a3:5a:4d:84:
4c:f8:4a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:26 2024 by rpki-client on console-fra.rpki-client.org