Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KvnTWLk8W0Bydt68s_xVgCU2BJU.roa
File: KvnTWLk8W0Bydt68s_xVgCU2BJU.roa (raw, json)
Hash identifier: zsL/ZHK0RnJiZzI4UfXuLQetvRM0fZbfkIvCVNPXeXM=
Subject key identifier: 2A:F9:D3:58:B9:3C:5B:40:72:76:DE:BC:B3:FC:55:80:25:36:04:95
Certificate issuer: /CN=29a9964e0cd35fb36757e5653ffa7626ac5deee8
Certificate serial: 0190BFD5220DAA784E43310422EF10301035
Authority key identifier: 29:A9:96:4E:0C:D3:5F:B3:67:57:E5:65:3F:FA:76:26:AC:5D:EE:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KvnTWLk8W0Bydt68s_xVgCU2BJU.roa
Signing time: Wed 17 Jul 2024 08:35:34 +0000
ROA not before: Wed 17 Jul 2024 08:35:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25244
IP address blocks: 45.131.118.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 01 Jan 2025 19:49:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:bf:d5:22:0d:aa:78:4e:43:31:04:22:ef:10:30:10:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29a9964e0cd35fb36757e5653ffa7626ac5deee8
Validity
Not Before: Jul 17 08:35:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2af9d358b93c5b407276debcb3fc558025360495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:de:91:10:03:6f:ae:f3:49:f5:4c:2e:f9:b8:
2b:16:14:56:8f:7f:33:02:c4:0e:92:91:10:32:57:
e2:86:1b:a0:46:2f:bb:92:49:19:df:0c:a9:ca:90:
06:d5:15:3c:99:27:0e:6d:ee:3f:41:dd:00:48:a0:
60:d9:2c:b5:5c:3d:49:3a:0e:4e:12:19:d8:79:77:
b1:04:d3:9c:1f:d6:14:40:03:95:64:81:40:53:51:
b2:91:f6:1e:ad:23:ce:a4:f5:94:6e:e7:58:86:d3:
6e:30:6c:45:64:17:5e:69:cd:8c:7c:59:7a:a8:cd:
e2:b8:2f:4e:e0:3c:87:b0:69:46:e8:26:c7:3f:e6:
43:39:61:e0:5d:cc:69:b4:0f:95:cb:81:1e:e5:78:
a4:4b:76:ce:e4:d1:02:52:fb:0a:c1:d6:dc:7d:6e:
c1:0c:4e:50:47:89:70:8f:d1:c1:82:df:94:97:bd:
e9:77:31:cc:c3:c4:50:9f:2f:40:ac:f2:27:08:b5:
87:09:4e:fa:cc:e3:1f:3e:3f:da:77:2c:3a:7b:6a:
41:b3:f4:e7:30:55:04:71:b4:bd:97:92:e5:99:05:
85:c1:d5:ef:dc:67:8d:e1:b3:00:c9:bd:73:1e:4f:
be:b7:fe:8d:9a:2b:8a:97:30:29:15:d6:9a:6f:34:
92:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:F9:D3:58:B9:3C:5B:40:72:76:DE:BC:B3:FC:55:80:25:36:04:95
X509v3 Authority Key Identifier:
keyid:29:A9:96:4E:0C:D3:5F:B3:67:57:E5:65:3F:FA:76:26:AC:5D:EE:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KvnTWLk8W0Bydt68s_xVgCU2BJU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.118.0/23
Signature Algorithm: sha256WithRSAEncryption
80:32:3a:9e:bd:d2:06:fa:e1:ba:75:77:48:b3:fc:12:9b:59:
0c:70:ac:77:c4:f6:2c:bc:24:ab:b1:cd:e6:f1:fa:9c:89:6e:
f1:cf:6f:80:fb:a6:f9:b5:ae:d0:11:78:ba:48:a7:57:8a:a6:
ae:76:1d:ba:82:68:6c:57:0b:4d:3a:0f:bb:66:a2:c5:0b:fd:
e0:40:8b:83:1d:46:a7:e7:54:d6:0c:9e:9a:9a:dd:60:d3:66:
47:e7:6f:44:d2:69:f7:16:82:b6:2b:1d:50:42:95:de:9f:9a:
c6:6c:40:08:da:8b:da:1a:87:21:ec:5c:d4:61:ea:2c:7e:5c:
b4:dd:24:2c:4a:f3:f1:09:16:5d:2c:66:67:97:83:34:d0:1b:
71:dc:67:a1:b9:40:52:2d:0f:ed:dd:85:ff:59:6c:13:75:c8:
db:9c:4e:72:bb:23:6e:64:0c:e3:bb:be:f4:f6:2f:db:56:9f:
12:72:00:91:3d:4d:35:18:e2:6a:78:60:4e:d5:b5:4e:d5:1e:
43:8d:26:dd:dc:d5:a4:69:6b:c1:4c:5e:6d:4a:da:2a:16:c6:
60:84:13:02:c8:8e:19:3d:fd:cf:6e:f7:ef:3f:f2:40:95:82:
f9:bd:de:38:98:1c:32:21:ec:31:15:8a:22:c5:f0:8d:aa:2b:
0a:af:b3:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:44:50 2025 by rpki-client