Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/KkvhB5wjALLhTRLO0zrfXc-jpb4.roa
File: KkvhB5wjALLhTRLO0zrfXc-jpb4.roa (raw, json)
Hash identifier: 4Uj3dywjCIEmKtprvmg8ZuED63alsF5oWnr54Nt+5NA=
Subject key identifier: 2A:4B:E1:07:9C:23:00:B2:E1:4D:12:CE:D3:3A:DF:5D:CF:A3:A5:BE
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01947932E77A5F12A20D877B8BB29849F2CE
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/KkvhB5wjALLhTRLO0zrfXc-jpb4.roa
Signing time: Sat 18 Jan 2025 11:36:06 +0000
ROA not before: Sat 18 Jan 2025 11:36:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 26383
IP address blocks: 45.144.172.0/24 maxlen: 24
45.144.174.0/24 maxlen: 24
86.107.100.0/24 maxlen: 24
92.114.54.0/24 maxlen: 24
93.113.171.0/24 maxlen: 24
185.141.219.0/24 maxlen: 24
185.198.235.0/24 maxlen: 24
212.192.12.0/24 maxlen: 24
212.192.13.0/24 maxlen: 24
212.192.15.0/24 maxlen: 24
212.192.20.0/24 maxlen: 24
212.192.23.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 28 Jan 2025 12:23:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:79:32:e7:7a:5f:12:a2:0d:87:7b:8b:b2:98:49:f2:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 18 11:36:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2a4be1079c2300b2e14d12ced33adf5dcfa3a5be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:98:53:12:f6:e3:af:65:83:8a:8d:4a:a3:6b:
df:3e:4e:09:73:27:bd:88:25:aa:b2:9e:a7:f9:d7:
ee:c0:07:a4:a4:37:53:50:b5:73:6b:33:68:94:fb:
00:98:8d:90:cd:e2:e4:77:00:ff:25:ff:16:96:dc:
35:1b:03:dc:93:11:e7:50:2b:4a:de:55:3f:43:e5:
16:6a:a6:7b:1e:db:e4:1c:8d:dc:93:03:ff:b6:19:
4b:8d:e7:88:56:71:0d:bd:45:13:1a:b5:bd:15:5f:
10:33:ec:91:13:74:fd:68:d7:df:6f:6e:be:92:60:
e1:d3:70:72:98:f7:53:87:74:67:50:1e:10:6b:74:
9c:0d:e6:6b:7d:e9:a4:04:5a:c1:dc:be:dc:45:f0:
9b:ae:ba:2e:f3:aa:27:d0:ff:a6:f1:02:28:c4:c9:
9a:98:8e:ee:e5:60:0c:40:63:ae:52:79:4d:ef:e2:
de:29:31:0f:79:85:a0:ea:72:77:38:81:1e:a7:06:
e0:0b:8f:ab:ef:6d:1e:d2:a4:a9:a5:d5:3a:7e:a3:
c4:99:ae:8a:f1:cf:3b:4c:7d:24:15:09:be:24:3c:
6b:46:a4:3e:e5:6a:03:04:9c:31:c3:a5:15:94:5b:
c1:52:ac:83:c6:38:b4:4b:3e:fb:bd:5f:44:6d:aa:
11:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:4B:E1:07:9C:23:00:B2:E1:4D:12:CE:D3:3A:DF:5D:CF:A3:A5:BE
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/KkvhB5wjALLhTRLO0zrfXc-jpb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.172.0/24
45.144.174.0/24
86.107.100.0/24
92.114.54.0/24
93.113.171.0/24
185.141.219.0/24
185.198.235.0/24
212.192.12.0/23
212.192.15.0/24
212.192.20.0/24
212.192.23.0/24
Signature Algorithm: sha256WithRSAEncryption
12:0d:19:8f:dc:3a:95:f0:f3:2f:ec:8e:e0:d3:3f:57:61:84:
21:bd:99:64:ed:7a:fb:4a:72:e2:b6:f1:54:6d:4f:3e:4a:ca:
da:bd:05:cc:4b:c0:76:0c:72:05:3e:c7:eb:24:15:a5:26:4f:
f7:d6:ad:8c:29:02:e8:c0:26:d1:bb:29:3a:29:1e:a9:57:b2:
2b:46:53:ec:87:3a:09:59:29:ec:ab:00:85:96:d4:dd:11:d5:
b7:b4:b5:36:2a:bc:57:93:d0:aa:e6:95:99:5e:f3:6a:62:2a:
7c:7c:34:3c:90:1d:d0:a3:8e:44:0b:33:59:e4:ab:0c:13:c1:
d4:12:fa:2c:47:c2:a6:ce:a7:d6:ed:08:f2:b1:4c:b8:15:8c:
af:48:10:e7:5f:ae:6f:5d:af:af:8b:3d:8c:78:0a:92:fe:e7:
bc:6b:09:f5:d6:cd:14:cc:72:31:7c:d2:49:8f:9b:b1:f6:1d:
84:c8:bc:99:4f:16:9b:21:fb:34:7c:37:18:09:13:fe:fc:a1:
8d:41:82:cb:32:ce:5b:c7:4c:4d:bf:e9:f2:6c:87:70:13:75:
66:4a:95:10:ae:9f:aa:c6:f9:4e:38:60:b8:f2:2c:5f:ab:2e:
b9:be:05:3d:b8:3d:27:2d:ab:7f:0e:f2:f2:08:86:43:d3:03:
64:a9:e4:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 13:00:53 2025 by rpki-client