Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/ko-IssvttG77Mh1I9FCOCpXP5bk.roa
File: ko-IssvttG77Mh1I9FCOCpXP5bk.roa (raw, json)
Hash identifier: j8dVcGGGJbSYiWOKkivoDP+3UbfUDkvsr80UnrfVEAk=
Subject key identifier: 92:8F:88:B2:CB:ED:B4:6E:FB:32:1D:48:F4:50:8E:0A:95:CF:E5:B9
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 019298B99547C76A8A9DFC0DFB2E2F7B8563
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/ko-IssvttG77Mh1I9FCOCpXP5bk.roa
Signing time: Thu 17 Oct 2024 04:25:51 +0000
ROA not before: Thu 17 Oct 2024 04:25:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 23959
IP address blocks: 45.14.64.0/22 maxlen: 24
45.14.70.0/24 maxlen: 24
45.14.105.0/24 maxlen: 24
45.14.107.0/24 maxlen: 24
45.66.128.0/22 maxlen: 24
45.66.216.0/22 maxlen: 24
45.130.21.0/24 maxlen: 24
45.142.125.0/24 maxlen: 24
45.142.126.0/24 maxlen: 24
45.142.127.0/24 maxlen: 24
45.143.232.0/22 maxlen: 24
45.143.232.0/24 maxlen: 24
45.143.233.0/24 maxlen: 24
45.143.234.0/24 maxlen: 24
45.143.235.0/24 maxlen: 24
45.149.156.0/22 maxlen: 24
45.159.48.0/22 maxlen: 24
79.143.140.0/22 maxlen: 24
88.214.22.0/24 maxlen: 24
91.200.240.0/24 maxlen: 24
91.200.242.0/24 maxlen: 24
91.200.243.0/24 maxlen: 24
92.60.43.0/24 maxlen: 24
94.124.119.0/24 maxlen: 24
95.214.164.0/24 maxlen: 24
95.214.165.0/24 maxlen: 24
141.98.196.0/24 maxlen: 24
141.98.197.0/24 maxlen: 24
141.98.198.0/24 maxlen: 24
147.78.240.0/21 maxlen: 24
149.62.44.0/24 maxlen: 24
149.62.45.0/24 maxlen: 24
149.62.46.0/24 maxlen: 24
149.62.47.0/24 maxlen: 24
176.119.148.0/22 maxlen: 24
185.194.54.0/24 maxlen: 24
185.200.64.0/24 maxlen: 24
185.200.66.0/24 maxlen: 24
193.32.148.0/22 maxlen: 24
193.111.30.0/23 maxlen: 24
194.36.24.0/24 maxlen: 24
194.104.153.0/24 maxlen: 24
194.104.154.0/24 maxlen: 24
194.104.155.0/24 maxlen: 24
194.169.54.0/24 maxlen: 24
195.245.219.0/24 maxlen: 24
195.245.241.0/24 maxlen: 24
195.245.242.0/24 maxlen: 24
2a09:7::/36 maxlen: 48
2a0d:c7c1::/32 maxlen: 48
Validation: Failed, certificate revoked on Thu 24 Oct 2024 06:28:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:98:b9:95:47:c7:6a:8a:9d:fc:0d:fb:2e:2f:7b:85:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Oct 17 04:25:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=928f88b2cbedb46efb321d48f4508e0a95cfe5b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b9:74:bf:33:1b:95:f4:60:bc:f3:bb:dd:4d:
eb:de:ec:cb:39:ca:a5:cd:aa:ec:0e:c5:d9:09:ab:
a0:71:db:55:ae:c3:37:08:16:2f:9f:9d:8e:b6:29:
de:73:66:bd:5f:41:e3:2f:8a:76:3a:67:55:06:2c:
43:a2:6e:4d:67:45:90:38:1d:6f:48:79:f1:24:98:
e1:55:c1:02:6d:3a:93:d1:f3:94:7d:ff:94:25:64:
63:0f:89:10:05:8d:e1:4d:1b:18:8e:6c:d9:c2:d9:
27:d9:01:8e:22:fe:5d:b7:dd:9d:68:61:6e:81:2b:
c5:90:84:96:a7:67:a0:31:65:03:d6:37:76:2d:87:
82:a0:58:53:f2:9d:c8:bd:c5:a3:a8:54:78:44:50:
8b:1a:65:9d:e2:a9:0b:43:de:e9:48:38:5f:5f:82:
5a:b7:a7:b2:02:d8:96:be:ca:c3:15:cb:4d:14:ae:
06:fb:2b:82:f2:60:0f:3f:3e:b4:ec:5e:c3:07:09:
54:8d:13:f1:c7:1c:81:1d:8e:79:ab:18:62:73:34:
29:bb:b4:e7:2f:cb:62:6d:65:40:19:bb:e8:d4:3d:
89:c7:ed:af:90:c2:d7:d8:4f:4a:62:36:10:1d:0a:
bb:42:a9:24:d2:f7:95:29:f1:92:79:ad:d2:e7:5a:
f2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:8F:88:B2:CB:ED:B4:6E:FB:32:1D:48:F4:50:8E:0A:95:CF:E5:B9
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/ko-IssvttG77Mh1I9FCOCpXP5bk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.64.0/22
45.14.70.0/24
45.14.105.0/24
45.14.107.0/24
45.66.128.0/22
45.66.216.0/22
45.130.21.0/24
45.142.125.0-45.142.127.255
45.143.232.0/22
45.149.156.0/22
45.159.48.0/22
79.143.140.0/22
88.214.22.0/24
91.200.240.0/24
91.200.242.0/23
92.60.43.0/24
94.124.119.0/24
95.214.164.0/23
141.98.196.0-141.98.198.255
147.78.240.0/21
149.62.44.0/22
176.119.148.0/22
185.194.54.0/24
185.200.64.0/24
185.200.66.0/24
193.32.148.0/22
193.111.30.0/23
194.36.24.0/24
194.104.153.0-194.104.155.255
194.169.54.0/24
195.245.219.0/24
195.245.241.0-195.245.242.255
IPv6:
2a09:7::/36
2a0d:c7c1::/32
Signature Algorithm: sha256WithRSAEncryption
44:8f:78:c6:f8:05:88:a5:6c:52:39:3f:37:5c:45:34:bf:f4:
e6:76:07:b8:ea:5c:8c:f9:da:b2:0e:a9:4d:a9:5e:92:67:5d:
65:97:10:65:0c:10:ae:93:81:79:cd:03:46:d7:5e:3c:4e:71:
23:4c:83:3c:f8:35:51:46:32:b0:73:04:1b:04:f9:1d:f3:e7:
b5:d2:b9:f3:a6:ba:fd:73:5a:75:ba:18:0b:e2:9e:86:6d:32:
29:2a:28:3e:08:0b:42:91:67:6f:a5:a3:ab:c4:4d:96:64:14:
8d:6b:ff:57:1b:1a:2b:80:c5:fd:fb:84:bf:57:a3:f7:ce:f3:
30:2e:52:ab:bc:dc:d2:fd:08:9a:cc:45:73:87:e3:c9:48:1c:
f4:9a:09:8e:5b:7f:95:46:a9:88:dc:62:f7:d0:d5:f2:c6:dc:
13:9f:df:3f:56:30:85:d4:78:1a:a7:3f:f2:3b:40:ea:ff:e7:
92:8d:4d:9c:81:16:7d:98:cc:59:3c:5b:dc:94:75:99:b9:44:
34:7d:b0:16:f3:56:ac:fb:08:ae:4a:ad:27:0b:5b:9c:45:e4:
e7:4f:a6:40:55:79:d8:7e:af:b6:c5:ff:a8:4a:b3:2b:27:3a:
b8:90:fe:d9:a6:63:5d:7a:61:1a:d7:37:d2:06:5b:bf:3d:66:
87:59:9f:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 10:02:34 2024 by rpki-client on console-ams.rpki-client.org