Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e68e1b-356c-4868-909f-42606f5aa5b9/1/KUXOVVtGF8CaRIcHCTNQehWNonA.roa
File: KUXOVVtGF8CaRIcHCTNQehWNonA.roa (raw, json)
Hash identifier: RE8r2qw6o92Yu9qxc8//Pf/Dk1OIbURFFrE/aBFQMG8=
Subject key identifier: 29:45:CE:55:5B:46:17:C0:9A:44:87:07:09:33:50:7A:15:8D:A2:70
Certificate issuer: /CN=cd6b9d593ac54aa6cbb83889277ba24f54067889
Certificate serial: 018CC94CE0BA9D203CAC4632761D50B402E2
Authority key identifier: CD:6B:9D:59:3A:C5:4A:A6:CB:B8:38:89:27:7B:A2:4F:54:06:78:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zWudWTrFSqbLuDiJJ3uiT1QGeIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/e68e1b-356c-4868-909f-42606f5aa5b9/1/KUXOVVtGF8CaRIcHCTNQehWNonA.roa
Signing time: Tue 02 Jan 2024 08:31:47 +0000
ROA not before: Tue 02 Jan 2024 08:31:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29084
IP address blocks: 94.190.252.0/24 maxlen: 24
94.190.252.0/22 maxlen: 22
94.190.253.0/24 maxlen: 24
94.190.254.0/24 maxlen: 24
94.190.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 03:47:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4c:e0:ba:9d:20:3c:ac:46:32:76:1d:50:b4:02:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd6b9d593ac54aa6cbb83889277ba24f54067889
Validity
Not Before: Jan 2 08:31:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2945ce555b4617c09a4487070933507a158da270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:62:e9:7e:4f:80:2f:83:e9:b9:5b:c3:ee:1e:
d5:e3:be:a9:07:bb:23:0f:89:b7:b2:50:6e:84:49:
fb:e4:af:de:37:db:9c:dc:b2:75:f9:66:78:06:0d:
1c:04:ad:45:ed:74:28:d6:36:99:33:6a:48:fc:d6:
e7:32:7b:53:d5:d4:26:c1:56:51:03:29:38:b6:db:
e4:1a:c8:19:96:0d:87:29:f3:c6:ac:ba:88:71:9d:
8b:b7:73:ab:17:bf:f3:b2:b2:5c:48:26:e3:8a:4b:
37:df:b5:74:49:c2:fa:a3:65:78:32:98:ad:e4:bb:
77:c6:c1:a3:ab:83:bf:1e:d1:d9:e1:47:2b:15:e6:
3f:09:bc:fb:8b:0d:f1:80:67:54:64:6d:57:7f:d1:
19:2b:34:2c:ef:cf:77:ab:85:3c:3a:d7:71:0f:a1:
ac:ce:ae:d4:df:14:e1:ba:3b:f9:b7:e8:04:e9:4d:
92:bb:93:86:29:4b:e3:a8:21:ee:fc:ce:99:37:9f:
6a:3b:d5:6f:bf:a0:95:21:d4:b4:56:d4:6a:8d:a0:
fd:5f:53:2e:60:88:6f:c2:e6:71:82:3b:ef:60:f0:
85:a6:2c:9b:3d:20:5a:ab:38:f9:60:f2:ca:e9:f1:
2d:6d:36:5c:6a:30:9e:5a:de:73:fa:98:99:c5:1c:
3f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:45:CE:55:5B:46:17:C0:9A:44:87:07:09:33:50:7A:15:8D:A2:70
X509v3 Authority Key Identifier:
keyid:CD:6B:9D:59:3A:C5:4A:A6:CB:B8:38:89:27:7B:A2:4F:54:06:78:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWudWTrFSqbLuDiJJ3uiT1QGeIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e68e1b-356c-4868-909f-42606f5aa5b9/1/KUXOVVtGF8CaRIcHCTNQehWNonA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e68e1b-356c-4868-909f-42606f5aa5b9/1/zWudWTrFSqbLuDiJJ3uiT1QGeIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.190.252.0/22
Signature Algorithm: sha256WithRSAEncryption
90:e0:e2:73:60:15:f1:82:93:91:08:af:53:b1:e2:54:37:f3:
b1:bc:54:08:55:b1:8f:d4:b1:47:9d:b2:aa:e9:03:2d:97:e4:
cd:31:7e:f6:7c:9e:04:d1:98:6c:aa:d8:61:bc:89:18:bf:8b:
9e:3a:89:ed:9a:61:f4:0b:a5:d3:6e:9b:b5:68:75:4f:f8:e5:
f6:ec:04:6b:ab:e1:ff:e0:b4:ee:0e:e9:dc:c8:33:b0:73:64:
7b:19:a5:cb:69:a3:88:74:0d:32:39:93:14:b1:ea:98:89:06:
da:fc:89:e1:a4:c6:c3:cd:fe:aa:eb:a4:f9:03:87:45:24:37:
f5:bb:d1:49:eb:d0:a9:58:05:88:1a:39:55:fe:2c:cd:bd:55:
99:07:ee:05:b8:8f:74:6a:15:18:20:f9:45:7b:da:60:35:58:
b0:48:4b:0d:eb:4d:cd:84:f9:a8:45:d8:39:c6:71:75:20:1a:
5a:e4:53:32:4a:e8:6f:43:df:9d:88:ef:fc:db:53:52:f9:ec:
47:e5:9a:51:b0:d0:02:06:45:20:50:05:74:ef:78:ed:43:32:
25:8b:39:2f:18:6f:2a:43:65:38:d4:76:88:35:07:08:15:b6:
8b:da:28:01:17:60:b7:12:c2:35:36:c4:dc:6c:72:d1:d5:32:
66:22:1e:7b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJTOC6nSA8rEYydh1QtALiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkNmI5ZDU5M2FjNTRhYTZjYmI4Mzg4OTI3N2JhMjRmNTQw
Njc4ODkwHhcNMjQwMTAyMDgzMTQ3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOTQ1Y2U1NTViNDYxN2MwOWE0NDg3MDcwOTMzNTA3YTE1OGRhMjcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWLpfk+AL4PpuVvD7h7V476pB7sj
D4m3slBuhEn75K/eN9uc3LJ1+WZ4Bg0cBK1F7XQo1jaZM2pI/NbnMntT1dQmwVZR
Ayk4ttvkGsgZlg2HKfPGrLqIcZ2Lt3OrF7/zsrJcSCbjiks337V0ScL6o2V4Mpit
5Lt3xsGjq4O/HtHZ4UcrFeY/Cbz7iw3xgGdUZG1Xf9EZKzQs7893q4U8OtdxD6Gs
zq7U3xThujv5t+gE6U2Su5OGKUvjqCHu/M6ZN59qO9Vvv6CVIdS0VtRqjaD9X1Mu
YIhvwuZxgjvvYPCFpiybPSBaqzj5YPLK6fEtbTZcajCeWt5z+piZxRw/ewIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFClFzlVbRhfAmkSHBwkzUHoVjaJwMB8GA1UdIwQY
MBaAFM1rnVk6xUqmy7g4iSd7ok9UBniJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveld1ZFdUckZTcWJMdURpSkozdWlUMVFHZUlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9lNjhlMWItMzU2Yy00ODY4LTkwOWYt
NDI2MDZmNWFhNWI5LzEvS1VYT1ZWdEdGOENhUkljSENUTlFlaFdOb25BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9lNjhlMWItMzU2Yy00ODY4LTkwOWYtNDI2MDZmNWFhNWI5
LzEveld1ZFdUckZTcWJMdURpSkozdWlUMVFHZUlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCXr78MA0G
CSqGSIb3DQEBCwUAA4IBAQCQ4OJzYBXxgpORCK9TseJUN/OxvFQIVbGP1LFHnbKq
6QMtl+TNMX72fJ4E0ZhsqthhvIkYv4ueOontmmH0C6XTbpu1aHVP+OX27ARrq+H/
4LTuDuncyDOwc2R7GaXLaaOIdA0yOZMUseqYiQba/InhpMbDzf6q66T5A4dFJDf1
u9FJ69CpWAWIGjlV/izNvVWZB+4FuI90ahUYIPlFe9pgNViwSEsN603NhPmoRdg5
xnF1IBpa5FMySuhvQ9+diO/821NS+exH5ZpRsNACBkUgUAV073jtQzIlizkvGG8q
Q2U41HaINQcIFbaL2igBF2C3EsI1NsTcbHLR1TJmIh57
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:51:50 2025 by rpki-client