Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/79a64e-069f-499d-a631-8cd42cede220/1/KX5X_cnegqVANdt1K_pQZHU0QZ0.roa
File: KX5X_cnegqVANdt1K_pQZHU0QZ0.roa (raw, json)
Hash identifier: PbK1t15DikHf5C9Q4zItCqKER0XS9917+Neo9ReZR8c=
Subject key identifier: 29:7E:57:FD:C9:DE:82:A5:40:35:DB:75:2B:FA:50:64:75:34:41:9D
Certificate issuer: /CN=1594f00471e248abe394d521e96cba9630d8520e
Certificate serial: 01856E0AD97C3BB455C1B27D6717D8E1CA83
Authority key identifier: 15:94:F0:04:71:E2:48:AB:E3:94:D5:21:E9:6C:BA:96:30:D8:52:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/79a64e-069f-499d-a631-8cd42cede220/1/KX5X_cnegqVANdt1K_pQZHU0QZ0.roa
Signing time: Sun 01 Jan 2023 15:54:42 +0000
ROA not before: Sun 01 Jan 2023 15:54:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212041
IP address blocks: 185.252.130.0/24 maxlen: 31
185.252.129.0/24 maxlen: 31
185.252.128.0/24 maxlen: 31
185.252.131.0/24 maxlen: 31
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:0a:d9:7c:3b:b4:55:c1:b2:7d:67:17:d8:e1:ca:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1594f00471e248abe394d521e96cba9630d8520e
Validity
Not Before: Jan 1 15:54:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=297e57fdc9de82a54035db752bfa50647534419d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:6f:db:89:a6:fa:9f:a4:49:95:4e:f2:7c:b4:
45:ba:90:e3:3d:c4:61:28:bb:11:1d:5e:65:b1:dd:
a0:18:df:ef:94:3a:77:04:b7:cc:62:fc:26:b2:6e:
41:07:6c:cc:ef:ae:e9:6e:0b:bb:d2:e9:c7:a5:f8:
79:6f:3a:91:ac:b1:49:ee:36:da:6b:aa:b7:e5:32:
ee:a0:37:8e:e1:f6:c3:bd:cb:af:b3:5b:36:7a:61:
30:b9:21:e2:04:e1:24:a8:4a:a5:c9:b8:dd:ac:b8:
92:72:8c:15:89:7d:b9:fb:65:74:38:6b:19:f6:de:
3b:40:af:d7:f8:3a:2a:48:f0:92:a2:d0:96:c0:29:
01:d3:12:76:d2:56:f8:a4:86:a5:f3:e9:65:e9:78:
36:55:d1:e9:5d:65:e5:59:c3:15:d6:c3:d0:82:de:
2f:ac:a2:33:32:5f:16:2d:7d:eb:b8:b1:d4:de:1e:
96:bb:a5:cb:32:7e:1f:42:11:cd:5d:dd:4a:10:dc:
84:84:de:a2:1d:ae:bd:37:e1:e1:52:95:bb:7b:c4:
8d:31:96:75:49:25:b2:6e:98:e0:bc:82:b7:ab:d0:
1f:8b:9b:b7:e1:82:28:95:93:2e:f9:47:f0:0d:dd:
04:e4:d2:c4:73:55:35:a1:ac:89:13:46:8e:65:ba:
00:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:7E:57:FD:C9:DE:82:A5:40:35:DB:75:2B:FA:50:64:75:34:41:9D
X509v3 Authority Key Identifier:
keyid:15:94:F0:04:71:E2:48:AB:E3:94:D5:21:E9:6C:BA:96:30:D8:52:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/79a64e-069f-499d-a631-8cd42cede220/1/KX5X_cnegqVANdt1K_pQZHU0QZ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/79a64e-069f-499d-a631-8cd42cede220/1/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.252.128.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:27:84:08:66:a5:53:1f:3d:69:04:30:9f:6d:cb:e9:df:a9:
d9:7a:a1:f7:a5:e5:ed:92:72:f9:1d:4a:f0:07:c0:6c:79:bc:
33:2f:06:c7:16:8f:66:48:8c:3a:72:28:7b:5e:83:69:df:b4:
a3:fc:d5:40:cb:f9:81:76:ad:c1:3e:ff:40:25:47:71:0b:35:
2c:c1:f1:dd:9c:38:83:b4:f0:52:c7:31:00:7b:9c:88:b6:92:
17:ad:ec:db:46:52:87:fe:01:28:ab:ab:1d:e3:c3:6e:23:cf:
e7:e7:2e:c2:48:50:0b:1b:b2:b4:1a:ad:4d:e6:73:30:54:2d:
da:7a:8e:f2:f1:f2:ce:c1:70:f3:0b:37:fa:7a:85:1e:ff:d9:
8e:8f:ee:27:d3:97:90:f0:5c:08:6f:29:12:f0:eb:c6:80:a2:
e8:e4:42:b6:38:78:3e:d5:55:6a:af:5c:9e:0e:ad:90:07:c1:
4b:a6:ca:8d:ee:b4:7f:f9:ac:62:ab:a3:a8:53:ed:47:c8:6e:
5f:f8:0a:7e:30:1f:82:92:f8:3a:0b:a2:de:ca:1f:3b:c7:76:
60:1d:53:11:e8:e8:18:32:29:43:d4:14:dd:e7:1e:9a:e9:0d:
b2:bd:bf:d5:c6:9a:cd:8a:ff:97:1e:0a:29:66:2f:37:33:5a:
10:55:50:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:35:25 2024 by rpki-client on console-ams.rpki-client.org