Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/KjykHXnsNnfep5KDDOvuOnnvZ4A.roa
File: KjykHXnsNnfep5KDDOvuOnnvZ4A.roa (raw, json)
Hash identifier: 1VABOgG0IEBmxA2POS7Z6WwgkwhJH5BFvo9l/181baw=
Subject key identifier: 2A:3C:A4:1D:79:EC:36:77:DE:A7:92:83:0C:EB:EE:3A:79:EF:67:80
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018EE0794223BA5D8D905C3912F70CD4953F
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/KjykHXnsNnfep5KDDOvuOnnvZ4A.roa
Signing time: Mon 15 Apr 2024 06:37:06 +0000
ROA not before: Mon 15 Apr 2024 06:37:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.135.182.0/24 maxlen: 24
45.135.183.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
185.198.234.0/24 maxlen: 24
217.19.4.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 15 Apr 2024 11:16:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e0:79:42:23:ba:5d:8d:90:5c:39:12:f7:0c:d4:95:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Apr 15 06:37:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2a3ca41d79ec3677dea792830cebee3a79ef6780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:7b:ce:56:c4:94:c8:a5:68:27:f6:69:92:9c:
7e:e8:a5:65:b6:b3:3d:39:37:37:f7:3d:70:a6:2b:
4e:db:19:18:9e:e7:32:0d:f0:94:4e:8e:d0:30:9c:
89:6d:46:62:a5:cf:77:9a:20:f5:0a:05:10:15:2b:
8e:19:52:7c:52:6e:c5:2e:79:29:8b:ca:bf:e8:52:
ea:29:a3:93:d0:75:90:f2:c8:4f:bc:49:ec:5d:c6:
d0:e6:8d:6b:b0:1a:e9:bf:1b:29:fa:05:b3:60:c3:
a0:92:0f:bd:c4:23:9e:85:8b:d0:55:73:87:17:0f:
e7:c7:44:e7:a0:e1:6c:a8:2e:bb:4d:7e:2c:2f:80:
b0:a8:b2:99:b6:25:c1:02:4c:d6:6d:30:bd:24:e0:
c4:62:07:22:31:bb:a4:fa:6c:48:22:ba:7a:f0:57:
72:3e:3d:7d:43:6f:e0:7f:7e:8f:e3:61:1d:b5:f5:
ab:cb:13:e2:00:2e:02:5c:39:3a:c4:45:de:de:31:
bb:a3:25:94:8b:28:df:f8:80:e4:d0:91:2e:81:da:
08:ae:f4:52:1a:22:bf:fc:fc:fa:ca:7b:2c:ed:32:
29:b7:4d:9d:ce:95:45:74:a8:b4:55:11:3e:22:41:
18:3e:4c:e2:e4:20:d6:70:e6:40:37:02:e4:35:c2:
ee:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:3C:A4:1D:79:EC:36:77:DE:A7:92:83:0C:EB:EE:3A:79:EF:67:80
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/KjykHXnsNnfep5KDDOvuOnnvZ4A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.182.0/23
89.34.106.0/24
93.114.183.0/24
185.198.234.0/24
217.19.4.0/24
Signature Algorithm: sha256WithRSAEncryption
31:5c:60:48:a7:47:9d:a1:d8:5d:64:db:06:99:97:b4:cb:5d:
c4:3c:dd:db:d7:df:0a:98:66:c9:72:49:04:8b:1b:4b:a4:21:
53:e5:4d:51:f7:f1:65:2f:b0:38:34:8f:11:24:11:25:f8:2b:
3c:03:49:29:80:8c:66:b4:43:ff:8a:a4:0b:16:f2:d0:fa:48:
34:04:01:17:20:c9:6d:cf:13:2e:1e:b9:3c:e3:01:db:c7:0c:
78:d9:b9:d5:59:fb:94:dc:1a:9e:ec:92:df:8e:45:e2:79:76:
73:6d:0f:f9:0c:74:d7:62:86:a9:66:d6:2c:04:95:e7:f2:d4:
b8:a8:64:06:41:15:9d:87:fb:af:45:f3:03:9d:39:7c:98:a5:
36:a0:83:c3:a7:46:a2:4f:8d:ea:7c:70:82:7a:31:5e:24:08:
4a:65:cc:d5:86:1e:cf:9e:88:55:99:64:cf:c9:5e:c9:be:52:
54:25:48:56:8c:21:3a:1e:5d:69:79:ca:69:b8:0a:cd:de:29:
a8:67:ec:87:fb:3b:f4:35:1b:0f:bb:58:a6:f4:43:d2:be:5e:
8e:93:2b:be:4b:27:a5:8e:89:8e:03:48:41:85:7e:d1:3c:66:
63:44:df:79:0e:3b:0c:f6:5d:ba:0e:d0:90:8a:ff:01:b2:83:
08:f0:fe:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:12 2024 by rpki-client on console-ams.rpki-client.org