Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/KtJk9QaPrdI2KMV6Di8aCuH17NQ.roa
File: KtJk9QaPrdI2KMV6Di8aCuH17NQ.roa (raw, json)
Hash identifier: mzdL982RWpn1lOwZnBgywvRq7Ve/XETne9RbNNUpqxc=
Subject key identifier: 2A:D2:64:F5:06:8F:AD:D2:36:28:C5:7A:0E:2F:1A:0A:E1:F5:EC:D4
Certificate issuer: /CN=31a185d0eb0ca7811c586425de0e960e1cfeb61b
Certificate serial: 0191319305FFA6A3000914A0D3CED97EFD8C
Authority key identifier: 31:A1:85:D0:EB:0C:A7:81:1C:58:64:25:DE:0E:96:0E:1C:FE:B6:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/KtJk9QaPrdI2KMV6Di8aCuH17NQ.roa
Signing time: Thu 08 Aug 2024 10:40:04 +0000
ROA not before: Thu 08 Aug 2024 10:40:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15596
IP address blocks: 85.153.16.0/22 maxlen: 22
85.153.20.0/22 maxlen: 22
85.153.48.0/22 maxlen: 22
85.153.76.0/22 maxlen: 22
85.153.96.0/22 maxlen: 22
85.153.100.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 23 Sep 2024 08:15:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:31:93:05:ff:a6:a3:00:09:14:a0:d3:ce:d9:7e:fd:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31a185d0eb0ca7811c586425de0e960e1cfeb61b
Validity
Not Before: Aug 8 10:40:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2ad264f5068fadd23628c57a0e2f1a0ae1f5ecd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:40:d8:21:17:ea:17:02:5e:68:7e:d1:e6:59:
39:f4:36:17:55:14:ed:de:75:38:2f:e1:34:b1:89:
55:ec:c4:24:23:b8:2c:06:80:08:e6:d3:98:70:98:
4c:f5:7f:4f:2b:9c:f5:be:49:77:06:bf:5a:cd:52:
cc:8d:65:d0:6e:57:f8:1d:ab:a8:67:bf:7d:cd:e4:
93:72:83:d5:b3:0b:a4:fe:8d:1f:03:b2:12:95:37:
75:74:30:72:b4:90:d9:a9:6a:cd:3e:26:1f:76:a1:
99:71:76:bc:6a:db:66:58:c9:fa:e5:39:cd:9d:58:
da:95:85:7d:11:fc:58:62:e4:b0:7e:0b:aa:e4:2c:
7b:c9:ed:10:8e:0f:d9:28:c1:fa:58:8e:9d:53:99:
cd:d4:3a:17:6d:37:6e:c2:4e:ad:d6:0a:9e:26:58:
e2:cb:43:87:af:89:74:2d:f3:c4:02:cc:c1:b7:4b:
12:07:19:9e:66:f6:d4:5e:f9:ad:2d:1e:91:49:f3:
fc:57:5f:79:a6:d8:8e:d6:61:b0:52:91:99:88:4b:
f3:d0:4e:9c:6e:de:e1:be:1c:8b:9a:43:58:66:07:
82:6f:c8:b0:4e:4f:2b:9b:82:da:b6:50:d2:c6:5c:
bd:01:c5:07:63:3a:1f:0c:cc:1c:d2:8b:a9:20:87:
22:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:D2:64:F5:06:8F:AD:D2:36:28:C5:7A:0E:2F:1A:0A:E1:F5:EC:D4
X509v3 Authority Key Identifier:
keyid:31:A1:85:D0:EB:0C:A7:81:1C:58:64:25:DE:0E:96:0E:1C:FE:B6:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/KtJk9QaPrdI2KMV6Di8aCuH17NQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.153.16.0/21
85.153.48.0/22
85.153.76.0/22
85.153.96.0/21
Signature Algorithm: sha256WithRSAEncryption
93:b5:b5:c6:c2:37:28:1a:4a:fc:94:56:0d:4c:8e:74:c8:38:
c1:c9:2e:bb:09:9f:88:4b:b3:fd:03:25:00:bb:cb:e5:19:38:
99:41:d9:76:b6:cb:24:bc:c3:18:f7:b4:8f:03:f1:63:2f:9d:
50:0a:b9:77:2c:30:3e:d1:1a:1a:ce:f8:c9:1f:de:bd:72:ea:
23:d1:53:75:9d:cd:7b:ea:d4:c8:0b:28:e0:22:26:2d:e9:a2:
10:dd:df:8d:02:61:1b:97:e0:62:b5:39:4c:ce:9c:5d:33:b1:
79:b8:8f:0a:66:71:80:63:fc:7c:c0:c8:a4:ff:dd:56:4f:2f:
40:84:20:d6:7a:4c:f1:c0:97:2b:11:61:8d:93:3a:06:a1:34:
96:0d:f4:4e:1e:44:71:d4:95:2e:7c:88:c3:a6:9e:6f:e8:69:
2d:95:aa:da:02:61:17:cb:b2:10:7a:e4:04:f5:f2:48:65:65:
6f:e8:08:67:e2:2b:d1:ee:7e:60:b5:cd:61:fd:d5:bc:f5:14:
df:ad:7f:14:96:c0:dc:f5:da:04:b7:bc:10:30:ce:f3:7f:40:
f3:a9:09:a3:3a:4c:d3:ba:77:35:79:6e:ea:48:7a:f6:97:4c:
44:aa:06:f3:86:1a:65:83:64:0e:36:8c:5f:f4:c8:c3:5e:29:
eb:5d:77:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 23 10:48:42 2024 by rpki-client on console-ams.rpki-client.org