Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/KJQfS2TEKvJ39KDgZc8iYkCYVIY.roa
File: KJQfS2TEKvJ39KDgZc8iYkCYVIY.roa (raw, json)
Hash identifier: Kv163SQGkkPXoO5xNmBKef7q/AAgVUwwGG4kIv7cjv0=
Subject key identifier: 28:94:1F:4B:64:C4:2A:F2:77:F4:A0:E0:65:CF:22:62:40:98:54:86
Certificate issuer: /CN=0b1870c96ef09723811fb89250eea6eba963c0df
Certificate serial: 01902F9F68169E514C16EC47AE7B7B4462F5
Authority key identifier: 0B:18:70:C9:6E:F0:97:23:81:1F:B8:92:50:EE:A6:EB:A9:63:C0:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CxhwyW7wlyOBH7iSUO6m66ljwN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/KJQfS2TEKvJ39KDgZc8iYkCYVIY.roa
Signing time: Wed 19 Jun 2024 08:31:34 +0000
ROA not before: Wed 19 Jun 2024 08:31:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 132.64.1.0/24 maxlen: 24
132.64.2.0/24 maxlen: 24
132.64.5.0/24 maxlen: 24
132.64.16.0/24 maxlen: 24
132.64.40.0/24 maxlen: 24
132.64.43.0/24 maxlen: 24
132.64.44.0/24 maxlen: 24
132.64.254.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 11 Aug 2024 11:55:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:2f:9f:68:16:9e:51:4c:16:ec:47:ae:7b:7b:44:62:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1870c96ef09723811fb89250eea6eba963c0df
Validity
Not Before: Jun 19 08:31:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=28941f4b64c42af277f4a0e065cf226240985486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1e:6f:4d:14:06:41:20:11:1e:79:00:d9:85:
a3:b4:ad:7d:1d:c5:ae:d0:cb:d3:95:21:98:36:c4:
c2:f6:42:c9:30:73:3d:73:54:9e:53:66:4a:25:8a:
79:53:c8:3b:aa:de:59:98:7f:c9:d8:48:25:ef:fa:
3b:93:b1:97:cf:40:38:c7:d4:e4:38:40:ad:bf:20:
e5:0f:af:4e:f8:38:05:fc:4c:eb:8c:e8:9e:e7:13:
6c:10:82:ec:7b:33:36:6c:24:29:7a:13:09:23:98:
69:43:e8:8f:aa:a6:80:9d:9f:ab:35:34:67:8a:c1:
f8:2d:22:65:43:59:19:be:b8:14:17:50:0a:c5:e2:
bd:a5:8f:b9:80:f9:e9:c3:aa:9d:8d:62:93:69:5a:
d0:dc:96:cd:1d:4d:f6:ae:bf:f5:f2:fc:15:9d:b3:
cc:ec:c3:0f:3e:13:79:2d:8f:6a:1d:b1:11:ac:31:
f0:4a:5f:a6:18:b9:34:7e:04:a6:1b:45:d3:73:50:
64:3a:3f:0a:da:b5:89:2c:35:24:b8:0e:02:83:9d:
90:ad:c6:13:06:4a:c5:7b:a6:df:75:6f:65:9d:f7:
ae:e6:55:7b:1c:fa:7e:07:d1:e2:de:5a:a8:ff:a5:
26:e7:63:82:be:73:54:61:bd:88:0f:93:2d:98:7d:
38:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:94:1F:4B:64:C4:2A:F2:77:F4:A0:E0:65:CF:22:62:40:98:54:86
X509v3 Authority Key Identifier:
keyid:0B:18:70:C9:6E:F0:97:23:81:1F:B8:92:50:EE:A6:EB:A9:63:C0:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxhwyW7wlyOBH7iSUO6m66ljwN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/KJQfS2TEKvJ39KDgZc8iYkCYVIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.64.1.0-132.64.2.255
132.64.5.0/24
132.64.16.0/24
132.64.40.0/24
132.64.43.0-132.64.44.255
132.64.254.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:f1:1a:99:0d:ab:c1:75:59:93:da:4b:98:f9:7a:6e:da:a9:
fd:5c:38:bd:24:d9:b8:00:fb:8a:22:d4:a5:9e:a7:2b:c4:33:
29:94:0a:e5:5d:b3:b0:f3:67:c2:b2:60:46:8b:d7:93:22:20:
32:f7:f6:ca:c4:cd:08:97:16:1e:e0:1e:eb:2b:88:3d:5a:cb:
fe:0c:4b:55:c3:52:d0:66:f1:1c:20:39:a1:3d:f9:ab:dc:a9:
92:e4:46:ea:9d:17:32:dc:cc:be:26:a6:47:f3:92:ef:e6:35:
d9:cb:10:23:cd:53:0f:40:15:25:b4:6b:fb:b0:20:cf:c5:d9:
74:2e:66:2f:e5:07:60:b3:4d:55:d6:9f:d8:50:26:c4:6f:5e:
bb:ab:3c:43:40:df:3b:02:8c:1b:e3:65:c5:bd:80:35:c6:16:
59:f5:1a:01:59:1e:6f:47:c4:ce:83:19:47:02:5c:ca:13:01:
c0:36:5a:8c:ea:90:a9:b1:99:c0:fb:e9:a6:2c:f1:89:fb:42:
26:eb:a4:d3:4b:f7:26:13:9a:97:73:22:2f:be:49:f7:05:54:
12:1f:94:1e:9b:50:36:e5:de:7f:e6:29:5f:ba:6d:8e:d7:a1:
aa:d7:3e:4a:89:36:48:56:0e:ca:a8:c9:b0:e1:f4:31:78:35:
35:2a:99:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 11 13:09:05 2024 by rpki-client on console-fra.rpki-client.org