Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/KvE1Fg6lCgwC3_Q9JJDjlg4fuK4.roa
File: KvE1Fg6lCgwC3_Q9JJDjlg4fuK4.roa (raw, json)
Hash identifier: JkrgBWQTjNjMsXoOxS8CgI9GUloU0F8OY8bVHjKSgMQ=
Subject key identifier: 2A:F1:35:16:0E:A5:0A:0C:02:DF:F4:3D:24:90:E3:96:0E:1F:B8:AE
Certificate issuer: /CN=af734108705a95796e8577125dd300c751dfd9a8
Certificate serial: 0191450A8BDF74FBA5CA2F316E09980F759A
Authority key identifier: AF:73:41:08:70:5A:95:79:6E:85:77:12:5D:D3:00:C7:51:DF:D9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/KvE1Fg6lCgwC3_Q9JJDjlg4fuK4.roa
Signing time: Mon 12 Aug 2024 05:23:24 +0000
ROA not before: Mon 12 Aug 2024 05:23:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47376
IP address blocks: 103.215.220.0/22 maxlen: 22
103.215.220.0/24 maxlen: 24
103.215.221.0/24 maxlen: 24
103.215.222.0/24 maxlen: 24
103.215.223.0/24 maxlen: 24
185.221.239.0/24 maxlen: 24
195.28.11.0/24 maxlen: 24
195.238.231.0/24 maxlen: 24
195.238.240.0/24 maxlen: 24
195.238.247.0/24 maxlen: 24
2a05:63c0::/29 maxlen: 29
2a05:63c0::/30 maxlen: 30
2a05:63c0::/48 maxlen: 48
2a0f:c040::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 08 Oct 2024 08:33:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:45:0a:8b:df:74:fb:a5:ca:2f:31:6e:09:98:0f:75:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af734108705a95796e8577125dd300c751dfd9a8
Validity
Not Before: Aug 12 05:23:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2af135160ea50a0c02dff43d2490e3960e1fb8ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:85:78:dd:c8:0a:a1:b2:af:ef:ee:c5:e9:8f:
4d:83:22:06:c7:d0:d3:cc:a0:eb:3c:66:15:5c:56:
d1:43:0f:1e:dc:19:36:55:3d:ed:3a:ab:ad:10:fe:
e5:b6:a2:b5:74:ba:14:ac:3b:f2:7d:b6:77:10:87:
58:8b:46:46:72:fb:4c:5c:1c:95:f9:d6:7d:7a:f0:
5c:8b:80:33:af:f2:de:93:73:85:65:b6:ff:01:38:
00:59:29:56:cf:f6:95:17:4b:61:7f:ec:6e:6d:29:
c5:14:c0:67:87:25:fe:1b:7f:c5:35:13:3c:ef:86:
8f:5d:2e:93:9b:6f:48:6e:78:c8:13:87:bd:6a:6a:
5c:70:6c:cc:65:98:91:43:83:10:5d:67:5d:6e:38:
3f:5b:06:53:9e:29:da:1e:33:0b:82:29:0a:5c:cf:
91:93:58:11:54:d7:33:23:29:1f:97:56:7e:d2:45:
ba:5c:77:3f:7e:ec:e0:e7:1d:d6:a0:83:3c:86:e9:
71:d7:ec:a8:4f:79:45:d9:25:33:00:88:ec:6b:9d:
61:c7:28:71:0c:00:85:a0:bd:29:4e:b1:f4:d6:63:
4b:23:3c:2a:85:d2:57:61:6a:dd:0d:f0:59:c6:dd:
58:de:03:0a:6c:c6:33:51:44:f2:be:cb:ba:e5:e1:
44:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:F1:35:16:0E:A5:0A:0C:02:DF:F4:3D:24:90:E3:96:0E:1F:B8:AE
X509v3 Authority Key Identifier:
keyid:AF:73:41:08:70:5A:95:79:6E:85:77:12:5D:D3:00:C7:51:DF:D9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/KvE1Fg6lCgwC3_Q9JJDjlg4fuK4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.215.220.0/22
185.221.239.0/24
195.28.11.0/24
195.238.231.0/24
195.238.240.0/24
195.238.247.0/24
IPv6:
2a05:63c0::/29
2a0f:c040::/29
Signature Algorithm: sha256WithRSAEncryption
ab:90:67:33:88:8f:a7:f3:04:2b:e9:8a:83:b7:99:e2:5f:fb:
70:01:1e:b7:7a:01:4f:ef:75:00:2e:32:b0:1d:96:8e:f7:89:
30:9e:88:a6:44:c9:2f:f2:96:bd:5b:27:b3:6d:2e:0d:92:6b:
43:a5:c8:da:db:1c:91:d7:f3:38:4e:62:a6:43:1f:1e:c2:5b:
60:3a:7d:7b:f3:5a:4c:16:7f:84:46:73:c1:fa:82:52:e1:8f:
b0:cf:60:61:b0:84:b4:39:78:d5:a8:e9:3e:eb:6d:81:ae:9c:
23:1b:1c:ff:a9:ad:f6:88:4d:3d:8f:15:c1:54:73:96:e6:36:
f1:61:d7:8c:ac:80:fd:c9:22:52:5d:96:ed:37:be:d5:cf:26:
99:9b:df:6b:03:51:b5:c2:72:fa:ee:97:62:7b:c7:b8:80:5f:
60:85:bd:d9:ca:07:7c:29:d0:49:a5:0d:6f:a9:13:41:97:8e:
05:87:0d:31:3a:a6:a5:48:e5:de:b3:c1:d8:b6:6a:41:52:fe:
f7:60:ce:52:7b:4e:53:22:20:c7:af:e1:22:0b:ef:67:69:c8:
2a:f0:aa:07:6d:94:8c:89:1f:58:0b:b4:4d:b3:18:03:4e:a1:
57:60:cf:f8:ff:b6:da:99:a8:fa:ba:cb:84:30:e0:70:98:b8:
d8:ba:e9:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 8 10:05:56 2024 by rpki-client on console-fra.rpki-client.org