Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/9d960f-a59a-435c-ae92-1ca739bb00cc/1/kvgW_6u0l3X530bE-69kDJxAleQ.roa
File: kvgW_6u0l3X530bE-69kDJxAleQ.roa (raw, json)
Hash identifier: aobWg4Ft2/Gx45YqjpF7vpMi/lppLge8s35pG2AKj+o=
Subject key identifier: 92:F8:16:FF:AB:B4:97:75:F9:DF:46:C4:FB:AF:64:0C:9C:40:95:E4
Certificate issuer: /CN=e208ecb9f34c1fbc3f3589710ab3e349fc6295cc
Certificate serial: 018CC6B77EB95D85612BAB1BAFE9B7D8C321
Authority key identifier: E2:08:EC:B9:F3:4C:1F:BC:3F:35:89:71:0A:B3:E3:49:FC:62:95:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4gjsufNMH7w_NYlxCrPjSfxilcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/9d960f-a59a-435c-ae92-1ca739bb00cc/1/kvgW_6u0l3X530bE-69kDJxAleQ.roa
Signing time: Mon 01 Jan 2024 20:29:23 +0000
ROA not before: Mon 01 Jan 2024 20:29:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9009
IP address blocks: 146.70.182.0/24 maxlen: 24
146.70.181.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 06 Mar 2024 13:02:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:7e:b9:5d:85:61:2b:ab:1b:af:e9:b7:d8:c3:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e208ecb9f34c1fbc3f3589710ab3e349fc6295cc
Validity
Not Before: Jan 1 20:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=92f816ffabb49775f9df46c4fbaf640c9c4095e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e4:67:8b:ca:40:7b:86:a3:b7:5b:7c:a9:b8:
d3:39:75:bf:d2:52:f1:c0:f5:00:27:f2:d1:ba:ad:
51:b3:94:a1:67:79:00:34:ff:45:62:8a:ab:08:93:
b3:9f:96:fb:ff:ee:1d:8b:a3:5e:5b:53:7d:3d:be:
d5:8a:a0:ae:45:79:d2:cf:bd:b1:11:f6:03:e9:26:
ac:c9:52:da:72:2e:28:f2:04:92:96:f1:c0:00:6a:
13:ad:3b:28:1c:f3:54:a8:ab:a9:c5:88:45:8f:ac:
ba:d2:5d:2c:7e:29:35:4d:89:53:01:90:9d:85:81:
5c:f8:65:be:5b:95:c7:f0:ba:36:df:3f:38:b7:41:
cf:54:1e:bf:af:1f:58:ef:59:5a:3e:44:0c:5f:2e:
3b:48:57:6e:1a:17:6b:c4:c8:2f:7c:a7:54:4a:6b:
ad:45:1d:ac:5b:7a:bb:8f:05:a4:78:4c:72:18:8b:
5d:8f:e7:cb:69:5d:40:3a:a2:10:54:80:c3:5a:77:
23:f1:57:08:9c:d5:25:c9:69:15:2e:db:9d:20:1b:
98:75:f0:26:d8:c7:1e:59:a3:3c:e5:18:8b:19:70:
78:a9:5e:9c:94:40:6a:5f:2d:c8:fc:6b:63:5f:6e:
7c:94:b3:c9:ff:68:1e:9d:cc:e3:b7:da:b0:cc:57:
9e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:F8:16:FF:AB:B4:97:75:F9:DF:46:C4:FB:AF:64:0C:9C:40:95:E4
X509v3 Authority Key Identifier:
keyid:E2:08:EC:B9:F3:4C:1F:BC:3F:35:89:71:0A:B3:E3:49:FC:62:95:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gjsufNMH7w_NYlxCrPjSfxilcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/9d960f-a59a-435c-ae92-1ca739bb00cc/1/kvgW_6u0l3X530bE-69kDJxAleQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/9d960f-a59a-435c-ae92-1ca739bb00cc/1/4gjsufNMH7w_NYlxCrPjSfxilcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.70.181.0-146.70.182.255
Signature Algorithm: sha256WithRSAEncryption
4d:68:d7:1d:ee:84:7f:33:2d:f5:2a:ec:54:6c:6b:5f:cf:2b:
5d:1b:9b:3c:d9:65:29:a0:7a:b2:92:a9:5e:d6:12:b8:e7:c2:
4b:c0:8c:25:b2:23:9d:09:56:7e:ba:f6:52:f3:18:9a:cb:15:
94:d2:86:16:71:68:1c:95:8d:e2:94:c2:80:de:79:fd:da:dc:
b1:e8:ba:04:ac:62:c0:c7:1c:51:6e:68:05:79:33:07:6a:91:
ee:dd:95:f0:f5:c6:9c:27:c4:5b:3b:85:e8:fa:79:cf:c2:e0:
79:80:e3:8d:20:d9:00:1d:83:b7:dc:04:1e:4d:8c:07:62:e5:
e6:f3:50:83:64:a2:9c:2e:59:c5:5d:68:23:d7:f2:49:a6:2d:
76:05:b3:d6:eb:41:1e:b5:e5:13:ac:09:21:dc:12:8e:ee:bf:
82:40:14:a1:1f:9d:a7:01:8e:01:03:7f:31:a7:aa:2c:cb:e6:
b5:17:ca:5a:b5:2a:61:68:90:8d:1d:a4:8f:f9:1a:30:46:63:
06:9f:0e:29:1b:10:7e:d9:d1:98:b3:19:26:9b:36:57:54:e2:
af:33:1f:a0:e6:1a:9f:cf:25:c2:3a:82:ee:0c:16:23:ad:ae:
43:b9:dd:10:fa:6d:de:26:51:b4:5e:2b:d8:7a:17:26:7f:bc:
66:3d:0b:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:30 2024 by rpki-client on console-ams.rpki-client.org