Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/kgsDPf1l7HwVeFMCWWskCA1aqg0.roa
File: kgsDPf1l7HwVeFMCWWskCA1aqg0.roa (raw, json)
Hash identifier: Viz3gjKFl3YNNEH7hV+6ypqQo/D+tEt1/NClGu+SfiI=
Subject key identifier: 92:0B:03:3D:FD:65:EC:7C:15:78:53:02:59:6B:24:08:0D:5A:AA:0D
Certificate issuer: /CN=d695cb86586cbfd2462afa052c96a25c162830a8
Certificate serial: 0185704BB3AAA515E5D1E878DEEE1E4F4A98
Authority key identifier: D6:95:CB:86:58:6C:BF:D2:46:2A:FA:05:2C:96:A2:5C:16:28:30:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1pXLhlhsv9JGKvoFLJaiXBYoMKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/kgsDPf1l7HwVeFMCWWskCA1aqg0.roa
Signing time: Mon 02 Jan 2023 02:24:47 +0000
ROA not before: Mon 02 Jan 2023 02:24:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210834
IP address blocks: 188.93.173.0/24 maxlen: 24
188.93.174.0/24 maxlen: 24
188.93.175.0/24 maxlen: 24
185.215.68.0/22 maxlen: 24
188.93.172.0/24 maxlen: 24
188.93.168.0/21 maxlen: 21
188.93.168.0/24 maxlen: 24
2a0b:880:4::/48 maxlen: 48
2a0b:880:5::/48 maxlen: 48
2a0b:880::/32 maxlen: 32
2a0b:880::/36 maxlen: 36
2a0b:880:6::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:30:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:4b:b3:aa:a5:15:e5:d1:e8:78:de:ee:1e:4f:4a:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d695cb86586cbfd2462afa052c96a25c162830a8
Validity
Not Before: Jan 2 02:24:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=920b033dfd65ec7c15785302596b24080d5aaa0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:26:82:b2:08:76:a0:65:19:ce:11:5b:04:ee:
d1:7b:28:56:59:43:5d:a0:5b:57:63:a1:a4:d1:b3:
dd:a2:91:22:dc:19:ac:ab:24:04:c4:79:05:11:fb:
46:40:68:e7:81:b3:34:ad:73:22:e6:15:2a:61:bf:
86:96:f7:9f:61:36:7f:f4:19:e9:85:b7:cc:d8:b1:
20:84:f1:66:eb:c8:13:31:69:0a:38:3b:a4:e2:99:
9a:07:6a:f8:cd:4d:c6:ae:1d:06:2c:b2:f8:dd:d8:
94:1f:e8:a9:a6:01:f5:bb:7a:d3:04:79:61:3f:e2:
24:f9:f9:64:17:b0:61:d0:49:5e:7a:8f:7a:c5:e4:
98:0a:e7:52:ce:0a:70:7e:0a:7c:91:1a:58:12:19:
2e:ed:b6:7f:7f:17:61:fd:e8:4d:b0:e9:b0:c0:c4:
52:2f:9a:ba:2a:a7:e0:05:40:23:f4:9d:e4:8f:a2:
57:29:50:31:8a:a4:a2:81:0b:9d:4a:c0:18:0b:45:
c0:b5:25:c5:29:b1:00:bd:49:bc:95:7b:29:d8:32:
0f:6b:e0:da:d9:29:1a:e1:af:eb:ba:2b:98:6b:ef:
b9:a1:e9:b4:74:2f:3c:3a:1e:0a:83:7c:92:24:4e:
c0:7d:56:c8:63:9e:ec:31:5a:3d:b9:0b:4f:c5:14:
6f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:0B:03:3D:FD:65:EC:7C:15:78:53:02:59:6B:24:08:0D:5A:AA:0D
X509v3 Authority Key Identifier:
keyid:D6:95:CB:86:58:6C:BF:D2:46:2A:FA:05:2C:96:A2:5C:16:28:30:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1pXLhlhsv9JGKvoFLJaiXBYoMKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/kgsDPf1l7HwVeFMCWWskCA1aqg0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.215.68.0/22
188.93.168.0/21
IPv6:
2a0b:880::/32
Signature Algorithm: sha256WithRSAEncryption
c4:68:b1:80:e9:bc:c2:70:a8:be:a2:83:ca:fd:06:b3:ab:0c:
ea:51:4f:d6:8b:fa:c3:0c:15:7a:8a:63:6d:30:70:71:c4:76:
8c:6e:b8:55:f7:ad:24:58:80:51:93:e6:e5:4f:3a:3b:6e:78:
21:79:33:ec:6d:a0:d4:f7:9a:48:0d:3d:7e:4d:e7:a3:10:3b:
1e:5b:a9:9b:42:8d:5c:5d:a5:ee:8d:6a:3a:c1:cc:e1:11:a9:
78:42:52:d8:6c:c4:44:b9:20:dc:b5:69:25:f3:8d:46:60:06:
b5:0d:39:0b:f5:f8:85:77:e6:d7:ba:b0:46:d9:97:28:5d:68:
e8:34:0b:b0:47:a5:c7:da:4b:09:38:01:5a:e3:d7:0d:9f:95:
8f:cb:a0:8f:21:63:d9:74:41:e6:64:07:10:1e:72:29:5c:e7:
29:f7:0c:b8:3d:7c:4d:b8:32:af:cf:1e:62:18:78:eb:9a:30:
bf:4a:c2:34:56:28:b9:86:c2:c1:a7:de:54:f0:85:86:79:da:
8f:01:6d:8a:cb:ad:5f:30:04:54:13:84:3e:cc:40:16:b1:52:
94:51:18:84:8d:e7:ea:c5:40:f4:95:3d:51:ac:73:8d:0e:f1:
bb:0d:0f:cd:95:9e:73:1c:f8:c2:1f:a4:17:f2:8b:cd:0e:50:
a4:45:a9:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:40 2024 by rpki-client on console-ams.rpki-client.org