Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/ktWINbCLiBTDHy52jZLW-YhI6Y8.roa
File: ktWINbCLiBTDHy52jZLW-YhI6Y8.roa (raw, json)
Hash identifier: yPJhNycy5ZGZH43js1aXnmRvMHjyEBrkFhP1LtSx4IQ=
Subject key identifier: 92:D5:88:35:B0:8B:88:14:C3:1F:2E:76:8D:92:D6:F9:88:48:E9:8F
Certificate issuer: /CN=b409168fdb52e9b7d1a7a5e8f518edfbc2c3f9af
Certificate serial: 01906EB5FBF21BD8F1C9813C20562F105955
Authority key identifier: B4:09:16:8F:DB:52:E9:B7:D1:A7:A5:E8:F5:18:ED:FB:C2:C3:F9:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/ktWINbCLiBTDHy52jZLW-YhI6Y8.roa
Signing time: Mon 01 Jul 2024 14:32:18 +0000
ROA not before: Mon 01 Jul 2024 14:32:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41421
IP address blocks: 31.214.137.0/24 maxlen: 24
31.214.138.0/24 maxlen: 24
31.214.140.0/24 maxlen: 24
31.214.145.0/24 maxlen: 24
37.157.200.0/21 maxlen: 21
86.106.22.0/24 maxlen: 24
89.35.60.0/23 maxlen: 23
89.250.192.0/20 maxlen: 20
91.132.112.0/23 maxlen: 23
93.115.39.0/24 maxlen: 24
103.248.24.0/24 maxlen: 24
159.253.240.0/21 maxlen: 21
185.53.132.0/22 maxlen: 24
185.104.154.0/23 maxlen: 24
185.128.156.0/22 maxlen: 22
185.170.65.0/24 maxlen: 24
185.194.212.0/22 maxlen: 24
188.65.40.0/21 maxlen: 21
193.91.4.0/24 maxlen: 24
193.91.12.0/23 maxlen: 23
194.5.180.0/24 maxlen: 24
2a01:b8e0::/32 maxlen: 32
2a02:4c80::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:52:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:6e:b5:fb:f2:1b:d8:f1:c9:81:3c:20:56:2f:10:59:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b409168fdb52e9b7d1a7a5e8f518edfbc2c3f9af
Validity
Not Before: Jul 1 14:32:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=92d58835b08b8814c31f2e768d92d6f98848e98f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d0:4d:6b:02:6d:8a:a5:4c:1b:68:af:ef:66:
80:5e:6d:92:fd:f2:ee:3d:f5:a1:89:b0:7c:b6:c0:
fa:1c:d1:33:3b:9e:aa:cc:94:e1:27:5d:21:3b:98:
30:1a:09:3f:49:84:b9:a8:10:82:9e:db:01:48:a0:
77:ea:8c:c8:f3:22:f4:da:3f:04:50:14:0c:a0:3b:
e2:a1:51:8b:bd:dc:89:70:c7:6a:c0:6c:64:88:b4:
50:0b:b9:aa:f1:d6:90:9d:0c:07:52:ee:cf:cf:59:
b6:28:9a:00:21:e3:7d:94:e4:ce:1d:a4:ac:40:ed:
f0:27:0e:bb:4b:1a:38:4d:5f:94:b7:3b:52:d3:f3:
33:a8:89:e9:bb:02:40:14:c5:f4:e2:0c:51:fc:72:
a0:10:fd:54:5a:8a:27:ee:7d:b3:d1:6b:ee:3f:e3:
11:8a:5b:93:6b:2c:c7:cc:d7:45:fd:bd:4f:33:ab:
41:4e:44:c2:43:ff:8c:9b:80:92:4e:e4:8a:b8:86:
08:33:63:37:b5:b1:a2:5d:d8:67:eb:cf:1f:8c:1c:
4d:97:3f:78:a5:9d:82:21:05:f2:d7:a4:41:d8:d2:
9a:9f:d5:44:9e:10:02:cc:c4:5e:c5:a6:2d:62:08:
7f:77:d6:6f:b2:81:ca:d2:93:ae:2f:85:dd:93:62:
30:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:D5:88:35:B0:8B:88:14:C3:1F:2E:76:8D:92:D6:F9:88:48:E9:8F
X509v3 Authority Key Identifier:
keyid:B4:09:16:8F:DB:52:E9:B7:D1:A7:A5:E8:F5:18:ED:FB:C2:C3:F9:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/ktWINbCLiBTDHy52jZLW-YhI6Y8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.214.137.0-31.214.138.255
31.214.140.0/24
31.214.145.0/24
37.157.200.0/21
86.106.22.0/24
89.35.60.0/23
89.250.192.0/20
91.132.112.0/23
93.115.39.0/24
103.248.24.0/24
159.253.240.0/21
185.53.132.0/22
185.104.154.0/23
185.128.156.0/22
185.170.65.0/24
185.194.212.0/22
188.65.40.0/21
193.91.4.0/24
193.91.12.0/23
194.5.180.0/24
IPv6:
2a01:b8e0::/32
2a02:4c80::/32
Signature Algorithm: sha256WithRSAEncryption
21:4d:33:60:4f:7d:99:15:26:ad:4c:71:43:30:9f:36:4b:a3:
9d:ed:4c:1a:9e:91:02:5d:bc:4b:5f:f0:21:2c:c6:e3:7e:23:
34:07:54:b0:c8:ca:cf:6e:b2:2f:50:26:cb:da:4a:5f:77:f6:
ce:46:8e:e2:1c:67:80:54:2a:e4:fe:49:ba:5a:88:75:6e:de:
17:85:5e:85:19:40:ef:58:4f:5c:63:6c:0c:59:df:1b:fb:e1:
64:7d:02:4b:39:b6:e2:cf:5d:8a:77:37:8f:b5:49:31:c1:6e:
f0:7c:ee:d7:5c:06:3d:48:98:5f:95:9b:65:16:26:43:d4:51:
a5:20:91:74:c0:af:a5:68:4d:0b:66:a1:ea:de:0a:92:0b:b5:
d0:c8:28:57:b5:e4:44:f7:0a:c7:27:5c:af:59:98:44:b1:7f:
11:23:49:3c:4a:60:a9:dd:f4:e0:f0:2a:27:8d:fa:e4:eb:ab:
b9:ec:c2:56:12:59:6e:a6:7e:a0:c1:fe:62:ff:ba:29:bf:7d:
39:ef:22:f9:e3:e6:4c:e3:9a:dc:03:f1:64:e9:d2:87:03:39:
d3:e9:38:87:46:de:f2:d1:51:63:20:46:c3:ae:73:27:1c:bf:
a6:69:64:1b:ee:9d:2f:82:f3:71:ad:4d:dd:62:9e:6f:87:93:
9b:5d:48:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:14:36 2025 by rpki-client