Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/KxVRWpCh4uuIescdPLQmmZlqrlM.roa
File: KxVRWpCh4uuIescdPLQmmZlqrlM.roa (raw, json)
Hash identifier: BKFbq2awHXcDQkb2OQsYdR9keOS9h/YT4f3dhqI4xwc=
Subject key identifier: 2B:15:51:5A:90:A1:E2:EB:88:7A:C7:1D:3C:B4:26:99:99:6A:AE:53
Certificate issuer: /CN=a539afebace899a8ee0bb4f8bb4475fe247a1528
Certificate serial: 018CF334EB4D9F5AD8987B2ED045DEEA916B
Authority key identifier: A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/KxVRWpCh4uuIescdPLQmmZlqrlM.roa
Signing time: Wed 10 Jan 2024 11:49:40 +0000
ROA not before: Wed 10 Jan 2024 11:49:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21245
IP address blocks: 217.146.6.0/24 maxlen: 24
144.208.206.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Jan 2024 17:20:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f3:34:eb:4d:9f:5a:d8:98:7b:2e:d0:45:de:ea:91:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a539afebace899a8ee0bb4f8bb4475fe247a1528
Validity
Not Before: Jan 10 11:49:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2b15515a90a1e2eb887ac71d3cb42699996aae53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:d4:de:b6:42:d9:d2:70:39:e3:f2:b2:05:a3:
b8:d1:91:2e:11:82:37:fa:7b:8b:72:09:32:e5:dd:
d7:8b:9b:d2:de:6b:05:f5:b4:24:9d:8b:e1:ff:76:
90:30:14:8f:b0:f0:9b:35:ff:89:f7:50:cd:47:dd:
17:2a:c2:e5:3c:f3:3c:2b:a8:05:fe:b9:0f:0d:c7:
b4:00:f2:fa:39:22:1d:79:22:0c:9e:9c:0c:59:07:
c5:13:1b:4d:3e:bb:34:69:e5:99:31:97:de:19:75:
69:bf:97:d0:95:c5:f1:de:15:0b:62:39:c2:a5:5f:
cd:be:7f:35:04:58:cf:46:54:28:ef:83:1a:a2:5e:
2f:14:67:b4:eb:23:9f:0d:06:9b:e4:f7:cd:da:a5:
a8:23:de:94:03:78:58:a3:8f:31:bc:5f:c4:17:ec:
ef:b9:1d:5b:36:12:6a:63:2d:c5:de:91:5f:b9:09:
7e:eb:a7:c3:0f:59:4a:8a:ba:72:4f:dd:84:43:c0:
80:2f:45:fd:de:30:41:eb:17:3a:c7:36:bb:ab:60:
31:cb:87:35:d9:e9:1a:33:d7:f0:d3:15:3e:e1:bf:
39:86:de:76:97:75:ac:7f:40:23:57:eb:32:76:02:
63:41:8a:4a:54:b9:68:aa:ae:f9:56:6d:fc:c4:77:
66:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:15:51:5A:90:A1:E2:EB:88:7A:C7:1D:3C:B4:26:99:99:6A:AE:53
X509v3 Authority Key Identifier:
keyid:A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/KxVRWpCh4uuIescdPLQmmZlqrlM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.208.206.0/24
217.146.6.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:d8:e4:03:b5:8a:ea:f5:23:e6:0f:12:87:7f:a0:c5:7e:f9:
b4:d7:96:77:db:a4:bf:8c:b3:88:bf:9d:f7:60:45:84:67:5e:
5a:05:74:f0:06:b6:5b:05:b4:10:04:aa:0d:e0:df:3c:6f:04:
16:6b:60:90:7d:b3:03:dd:1f:0d:08:72:1c:6e:d0:65:99:d3:
aa:48:f1:fc:41:14:40:2b:be:d1:29:89:e8:90:ac:52:00:39:
98:af:6f:37:57:65:c4:2e:93:81:53:18:b6:84:3b:2c:32:b8:
09:fd:ad:a3:85:34:91:b0:e1:d7:17:36:45:f1:56:96:be:df:
d9:6a:ec:cf:70:ef:8f:7d:b7:c1:ef:41:30:36:16:0a:04:b0:
e2:2c:f1:99:7c:cd:ee:ce:ec:2a:36:91:42:2f:e1:c3:93:79:
a3:1e:e9:df:a4:d4:17:da:63:75:ce:43:e2:45:77:4f:0b:8d:
fc:61:e8:5a:2a:77:bb:26:b5:26:ba:45:da:17:71:6d:57:7c:
ef:76:e1:e5:78:35:1a:3c:fb:2d:ae:bc:ce:dc:1e:4e:63:82:
04:46:74:e5:df:d8:a0:3f:62:f5:24:7a:ef:f4:db:7c:28:4e:
d7:44:3c:5a:93:5c:1c:e5:ad:e0:9b:35:0e:6e:bd:b4:83:8d:
8e:58:de:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:50 2024 by rpki-client on console-ams.rpki-client.org