Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/kkrg9AnkC9LH1i3oW_QbmEO6Ic8.roa
File: kkrg9AnkC9LH1i3oW_QbmEO6Ic8.roa (raw, json)
Hash identifier: 7C9r70Uqn84QlVmDGsBtgnPFSIMSVgqOERlRS9LDPe0=
Subject key identifier: 92:4A:E0:F4:09:E4:0B:D2:C7:D6:2D:E8:5B:F4:1B:98:43:BA:21:CF
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 01856F799924700198D983435E929E1F3147
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/kkrg9AnkC9LH1i3oW_QbmEO6Ic8.roa
Signing time: Sun 01 Jan 2023 22:35:18 +0000
ROA not before: Sun 01 Jan 2023 22:35:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211588
IP address blocks: 45.131.60.0/24 maxlen: 24
45.83.205.0/24 maxlen: 24
2a07:e345::/32 maxlen: 48
Validation: Failed, certificate revoked on Mon 16 Oct 2023 09:41:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:79:99:24:70:01:98:d9:83:43:5e:92:9e:1f:31:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jan 1 22:35:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=924ae0f409e40bd2c7d62de85bf41b9843ba21cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a5:1f:17:aa:41:90:fb:13:f2:9c:cc:e0:90:
7f:f9:55:1f:ae:b0:3d:63:14:87:42:df:33:48:e9:
a1:22:4f:b6:a7:2a:d9:0a:91:a0:a2:43:f3:5b:08:
84:4b:ac:1b:fb:5d:5d:a5:88:aa:e8:09:a7:22:2b:
56:5f:48:8d:2e:bd:dd:71:47:75:e1:ed:0c:04:84:
38:f7:df:93:d4:12:3d:9a:51:0b:01:51:86:e5:a0:
a7:72:63:d4:07:6a:79:a1:65:4d:53:a3:dd:56:c0:
88:d9:de:5f:fc:d9:ec:61:5f:05:87:50:51:cf:fa:
d0:4c:19:88:b0:e5:93:08:40:4c:20:df:82:01:ba:
d8:b2:c1:84:de:78:02:d5:c5:68:0e:b4:ac:15:35:
24:28:a0:47:e6:6d:23:0b:da:fb:76:da:42:66:71:
5d:a2:c1:cf:aa:03:4d:61:48:b7:f7:60:06:4e:32:
4e:d9:d4:62:e7:fd:c4:c3:4e:47:70:bc:a1:23:ed:
3e:60:90:b8:ca:bf:ef:78:b7:7b:a3:db:86:ce:d3:
ae:f7:8f:ba:4a:51:72:43:67:a4:fd:02:ae:30:c0:
63:56:c1:88:eb:08:4c:00:86:40:99:91:84:83:c6:
54:0c:3e:96:af:32:14:75:0c:d6:9d:aa:7a:16:48:
71:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:4A:E0:F4:09:E4:0B:D2:C7:D6:2D:E8:5B:F4:1B:98:43:BA:21:CF
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/kkrg9AnkC9LH1i3oW_QbmEO6Ic8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.205.0/24
45.131.60.0/24
IPv6:
2a07:e345::/32
Signature Algorithm: sha256WithRSAEncryption
63:be:3e:21:cd:0b:f5:fd:af:db:67:0e:7b:13:36:ad:92:0d:
75:e9:70:4c:40:eb:bd:6b:b8:fa:db:2e:70:ac:40:f1:28:51:
c9:87:66:ab:27:74:31:32:07:96:1a:05:b1:0f:52:78:a7:29:
a7:1f:44:ab:79:b9:58:fd:23:0e:01:09:65:02:9a:19:be:30:
15:29:45:e0:68:7a:f2:cd:45:89:c6:09:63:e9:42:75:d6:d1:
61:f8:32:dc:be:c4:57:1a:be:40:8e:9c:29:e0:32:00:4b:a1:
f1:ea:30:b4:8b:43:9e:1c:7d:d0:96:af:ea:de:5a:be:c2:1e:
4e:47:0a:d4:70:f2:71:7c:3d:14:6d:4b:e5:86:95:21:a2:5b:
d3:8b:79:12:8f:7c:f5:ad:11:b4:4d:da:78:ce:94:1a:3c:97:
0e:df:6f:15:aa:aa:6e:34:ac:43:09:c2:0d:97:b5:67:67:ea:
d3:cb:da:1d:df:ef:7c:c5:bd:ed:f0:f6:b0:57:ca:4f:5c:ba:
87:70:1f:39:fc:ec:a0:a7:b5:b6:99:ba:ef:19:97:74:c5:10:
96:bb:99:53:ce:d8:cc:f5:50:66:b5:1f:5a:ae:41:63:7c:d1:
21:44:a7:78:cb:7b:1b:9e:c8:8d:0c:f0:6f:87:5c:c4:ef:6c:
b1:05:70:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:52 2024 by rpki-client on console-fra.rpki-client.org