Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/KXXL2Tc86MZkYmFibo2mLszt_D4.roa
File: KXXL2Tc86MZkYmFibo2mLszt_D4.roa (raw, json)
Hash identifier: w4r3jPTHQmFF8Ed9QPhEnqACkJhYqEeLk2tql9Kp3YY=
Subject key identifier: 29:75:CB:D9:37:3C:E8:C6:64:62:61:62:6E:8D:A6:2E:CC:ED:FC:3E
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 01856DC1998376A0DF4C7CBC6E17B2B6E837
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/KXXL2Tc86MZkYmFibo2mLszt_D4.roa
Signing time: Sun 01 Jan 2023 14:34:42 +0000
ROA not before: Sun 01 Jan 2023 14:34:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48944
IP address blocks: 185.243.50.0/23 maxlen: 24
185.215.228.0/23 maxlen: 23
178.239.144.0/22 maxlen: 22
185.212.50.0/23 maxlen: 24
178.239.148.0/23 maxlen: 24
178.239.158.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 09 Feb 2023 10:22:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:c1:99:83:76:a0:df:4c:7c:bc:6e:17:b2:b6:e8:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Jan 1 14:34:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2975cbd9373ce8c6646261626e8da62eccedfc3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:94:91:48:a5:68:98:b2:43:3b:0e:8e:1c:76:
b3:ba:2f:30:67:02:15:bc:c8:6f:1e:a4:db:7b:ee:
b4:f2:b3:b7:a7:0f:ef:e2:ae:2b:17:52:64:c4:bb:
b3:19:46:03:8f:bf:74:cb:ab:50:e7:aa:f9:3a:61:
41:27:27:0e:44:2d:00:6c:a8:37:07:13:bd:74:e9:
5a:9c:d5:ba:58:fd:b1:4e:67:92:b8:e1:af:5c:13:
2c:b1:6f:e8:15:9f:a1:cc:cd:03:45:1b:5f:0d:62:
19:71:21:3c:b9:09:2e:24:ff:d3:d2:7e:b5:0c:18:
c6:70:74:6c:37:19:bf:d2:0e:49:f6:0c:6e:6b:2e:
b5:bc:d0:cc:b1:3c:4b:b5:dc:2f:4f:2b:85:5b:19:
00:51:fb:67:5c:84:b6:f9:45:3a:a8:90:6a:bc:c0:
91:bc:43:be:75:8b:88:ed:18:18:76:9c:0a:59:8a:
55:d0:82:8a:5e:78:84:0f:1f:86:3e:63:7d:23:ca:
19:71:98:2f:d2:9e:16:2f:3c:5e:92:25:7c:e9:8a:
c5:5c:f2:7a:99:73:e0:3c:21:3b:21:cc:fb:99:9e:
99:db:34:67:07:7a:73:c2:bc:02:ec:54:12:c6:6a:
44:de:c1:e2:9b:29:59:f6:12:b2:05:ab:73:1b:c2:
52:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:75:CB:D9:37:3C:E8:C6:64:62:61:62:6E:8D:A6:2E:CC:ED:FC:3E
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/KXXL2Tc86MZkYmFibo2mLszt_D4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.144.0-178.239.149.255
178.239.158.0/23
185.212.50.0/23
185.215.228.0/23
185.243.50.0/23
Signature Algorithm: sha256WithRSAEncryption
2c:37:e1:1d:d2:9e:b0:61:9f:50:87:53:13:e9:9d:1e:87:b3:
59:2b:99:88:08:df:3e:39:69:cc:77:e8:41:c5:60:4a:10:48:
e5:f2:ec:a4:1d:3e:a5:65:b5:a0:d9:88:33:04:57:c5:25:7e:
5e:8a:2b:47:ad:c9:d4:b8:79:fd:02:02:b6:01:bb:a7:7d:98:
03:1e:60:8d:d0:24:43:a2:83:55:52:81:e1:c2:04:9f:b0:0a:
5f:cb:08:3f:c0:bc:15:07:db:2b:90:eb:9c:25:ae:ec:16:27:
d1:47:06:1f:86:b4:90:d0:d5:73:e6:98:04:99:d5:72:97:0a:
4f:ad:c4:65:d1:aa:16:92:a6:da:85:71:34:67:f7:52:4b:d4:
ce:06:34:70:e2:6e:5d:22:22:e6:22:66:f9:3d:19:40:98:b0:
b3:51:30:b3:9d:fd:6a:f2:89:42:1e:22:c2:07:e5:0a:7f:d2:
5f:85:d9:93:5b:2f:f4:c9:f2:59:cc:2a:8f:22:5f:15:b3:f6:
32:c8:50:c8:e8:0f:fa:2f:40:71:3b:8a:48:4b:d0:a4:89:c8:
38:5e:5d:4e:8e:86:a7:d5:0f:7d:c3:12:24:c4:63:99:f0:a7:
1e:99:09:f1:33:13:23:3f:58:8f:0d:69:8f:b9:c0:6f:c8:91:
6d:87:a3:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:09 2024 by rpki-client on console-ams.rpki-client.org