Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/kWLXSpNwVBcc3u8GmHGSZF0JHso.roa
File: kWLXSpNwVBcc3u8GmHGSZF0JHso.roa (raw, json)
Hash identifier: +GS1qfgtDKYNbKhRTExY8NXaTStMtkqNrCIDOL+/320=
Subject key identifier: 91:62:D7:4A:93:70:54:17:1C:DE:EF:06:98:71:92:64:5D:09:1E:CA
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 018DD5EEB92546F2A85B9CFEF5A0DEEB1B2E
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/kWLXSpNwVBcc3u8GmHGSZF0JHso.roa
Signing time: Fri 23 Feb 2024 12:26:48 +0000
ROA not before: Fri 23 Feb 2024 12:26:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60808
IP address blocks: 82.115.13.0/24 maxlen: 24
91.246.49.0/24 maxlen: 24
185.215.246.0/24 maxlen: 24
188.253.12.0/22 maxlen: 22
188.253.96.0/19 maxlen: 24
2a05:ec80::/29 maxlen: 48
Validation: Failed, certificate revoked on Tue 27 Feb 2024 11:03:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:d5:ee:b9:25:46:f2:a8:5b:9c:fe:f5:a0:de:eb:1b:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Feb 23 12:26:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9162d74a937054171cdeef06987192645d091eca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:fa:94:5e:95:18:a1:69:f6:ed:62:06:ab:8c:
21:cf:ae:8b:fb:c4:ef:bb:db:82:e7:46:7d:b9:be:
97:f3:d8:05:2c:36:39:f5:93:09:fb:ba:21:a0:1b:
2a:20:b9:79:29:17:0e:22:99:af:ba:db:7c:90:44:
67:50:78:fc:9c:a3:dc:2c:fd:ff:64:f5:3c:51:ed:
60:8e:26:14:7d:d1:03:4d:d7:19:20:85:be:00:bb:
2e:bd:00:d5:31:74:86:78:5d:0a:49:ca:81:15:a4:
dc:05:38:05:83:10:d3:8a:18:16:9c:d0:84:8c:20:
65:64:79:7a:5f:50:75:76:2e:c6:f9:af:c3:14:bf:
05:f4:e1:17:cf:0e:0e:7d:d6:08:3a:15:12:5d:35:
8c:57:87:77:02:26:f9:0b:a3:67:70:7f:7c:a5:7f:
bf:dd:45:d1:15:b5:0e:33:1d:7a:73:03:86:34:1f:
0f:90:46:ad:98:06:80:a6:81:6c:cc:76:cf:b2:75:
22:73:93:6a:ef:02:c6:4b:e1:81:3b:03:c5:4e:a3:
ae:59:40:85:b1:59:3a:23:9a:45:6a:88:18:c9:7d:
66:77:79:50:7f:12:de:65:21:fc:ea:e7:f3:ab:19:
fa:7c:32:4b:63:89:da:65:6e:35:fc:5d:c7:cd:8b:
4b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:62:D7:4A:93:70:54:17:1C:DE:EF:06:98:71:92:64:5D:09:1E:CA
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/kWLXSpNwVBcc3u8GmHGSZF0JHso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.13.0/24
91.246.49.0/24
185.215.246.0/24
188.253.12.0/22
188.253.96.0/19
IPv6:
2a05:ec80::/29
Signature Algorithm: sha256WithRSAEncryption
53:4a:79:35:42:08:1c:3f:df:d0:ab:7e:d1:f8:8d:57:55:93:
a6:be:3c:f8:dd:d9:ec:bd:4d:e2:5c:d2:d8:ac:6d:a7:9d:62:
b3:b2:cb:05:14:44:a6:fa:e9:d0:00:65:3b:9d:8a:5a:1e:93:
f2:b6:70:49:bf:c0:2b:32:2e:54:00:61:ac:37:3c:cc:28:3d:
c1:1c:b5:a2:07:37:e4:30:8b:a8:ed:ce:00:22:3c:16:88:1d:
5a:00:bc:dc:19:86:4a:30:e6:4a:9f:9b:6c:d9:21:23:e6:22:
1f:2b:72:e4:7c:05:35:8a:9d:e6:db:40:bd:7f:80:ee:26:ff:
7a:bd:8a:d4:31:80:bb:c0:e8:af:0c:38:41:ee:0f:45:ed:5f:
23:31:09:12:43:78:eb:12:1d:79:28:cf:15:13:38:46:dc:50:
f4:b5:5d:25:42:57:e3:51:b4:2f:eb:89:f1:09:c2:be:1a:72:
11:9c:9a:2e:aa:18:d6:16:59:26:ea:33:d7:bc:41:fb:b4:30:
e2:cf:9f:d5:9e:0c:02:e9:71:1c:75:0d:24:09:24:a5:bb:a8:
fc:00:55:36:c6:ab:b4:e5:aa:cd:d4:fc:5f:4c:84:aa:9b:1d:
6f:ec:a8:2c:9d:ca:7d:b0:71:e8:9d:18:68:ab:ad:63:0d:d0:
c0:e4:9f:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 15:32:18 2024 by rpki-client on console-fra.rpki-client.org