Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/96eb70-0d04-476f-825e-556cc2e071dc/1/ku3-Asq6XuVzw3HiVJxnW0rawTI.roa
File: ku3-Asq6XuVzw3HiVJxnW0rawTI.roa (raw, json)
Hash identifier: SpfoGDeVSONBGvlFVn8iYXcFVYA/lp2aFAVUf3PAFwc=
Subject key identifier: 92:ED:FE:02:CA:BA:5E:E5:73:C3:71:E2:54:9C:67:5B:4A:DA:C1:32
Certificate issuer: /CN=1490fc17382dd6066a38e423badb2d8a18d1c045
Certificate serial: 018CC2DB014EF512B9F9026FFFA7BE68E8FB
Authority key identifier: 14:90:FC:17:38:2D:D6:06:6A:38:E4:23:BA:DB:2D:8A:18:D1:C0:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FJD8Fzgt1gZqOOQjutstihjRwEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/96eb70-0d04-476f-825e-556cc2e071dc/1/ku3-Asq6XuVzw3HiVJxnW0rawTI.roa
Signing time: Mon 01 Jan 2024 02:29:41 +0000
ROA not before: Mon 01 Jan 2024 02:29:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212100
IP address blocks: 185.1.59.0/24 maxlen: 24
2001:7f8:cc::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 01:47:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:01:4e:f5:12:b9:f9:02:6f:ff:a7:be:68:e8:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1490fc17382dd6066a38e423badb2d8a18d1c045
Validity
Not Before: Jan 1 02:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=92edfe02caba5ee573c371e2549c675b4adac132
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a7:cc:2d:fb:a6:e0:44:4e:ca:90:bd:e9:e7:
83:96:96:73:3b:3e:a6:91:1f:d4:58:c5:8b:ed:6e:
3c:05:8f:07:c4:94:28:07:67:c4:e1:82:bb:5d:c8:
09:83:08:e2:c0:03:ca:67:50:82:92:58:8d:54:df:
fa:02:d5:96:9e:b3:03:90:03:67:30:bf:15:90:fa:
9f:e9:bb:13:76:40:fb:fb:cc:bf:f3:8b:b0:0e:48:
82:47:75:1f:6f:2c:b8:f7:a4:67:15:4d:5b:e0:80:
03:c4:66:08:9c:b5:67:6a:16:12:d5:45:36:da:8e:
cf:bf:ce:3b:c7:70:21:4d:46:0f:73:ef:d4:62:40:
3f:52:cc:ac:3e:66:24:27:f6:6d:20:42:63:19:ae:
63:7f:70:9a:a0:9a:cd:da:90:b8:6d:ca:6b:54:4c:
99:69:a3:6d:65:36:f8:19:85:aa:eb:2e:5a:4d:27:
7e:37:8e:9e:c4:c9:1e:73:1f:96:74:17:03:fe:39:
8a:ca:17:c8:ff:88:cb:44:e2:8c:47:da:a9:5f:ef:
7a:9d:21:d6:6b:77:72:bd:e6:5c:93:40:7c:1c:66:
a1:6a:83:f1:53:a8:5e:af:c6:8c:f0:a9:26:29:b6:
6d:ad:c4:71:fa:03:1f:a1:87:4f:6e:ee:ac:01:1c:
fd:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:ED:FE:02:CA:BA:5E:E5:73:C3:71:E2:54:9C:67:5B:4A:DA:C1:32
X509v3 Authority Key Identifier:
keyid:14:90:FC:17:38:2D:D6:06:6A:38:E4:23:BA:DB:2D:8A:18:D1:C0:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJD8Fzgt1gZqOOQjutstihjRwEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/96eb70-0d04-476f-825e-556cc2e071dc/1/ku3-Asq6XuVzw3HiVJxnW0rawTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/96eb70-0d04-476f-825e-556cc2e071dc/1/FJD8Fzgt1gZqOOQjutstihjRwEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.1.59.0/24
IPv6:
2001:7f8:cc::/48
Signature Algorithm: sha256WithRSAEncryption
9c:46:3d:37:ce:92:37:66:65:d7:e6:e9:e5:d5:a9:16:bb:22:
36:d4:c9:26:12:4a:53:1c:70:62:31:e4:45:98:30:fd:5f:88:
94:5e:91:3e:94:24:16:e6:8a:f9:09:c6:e8:dc:30:86:9c:68:
5c:ba:8f:86:bc:0a:ae:ea:e6:b5:aa:f0:3a:ff:9e:ed:5c:bc:
64:3a:47:cb:c4:8f:9f:9b:92:a8:d0:d6:75:07:1a:c0:38:75:
a0:2e:ac:7d:fa:b3:f0:05:c7:01:35:48:d6:87:28:91:dd:7a:
4b:ec:38:87:c1:76:a0:6d:d5:0c:57:09:57:ab:1c:5d:cc:00:
ab:13:10:b4:21:2f:47:16:be:9e:60:1b:1c:20:15:77:2a:0d:
db:ea:54:90:ff:f6:51:f2:de:4f:27:95:63:36:8f:0c:dc:90:
a2:ac:82:2d:93:15:f4:eb:c4:9c:43:13:1b:77:a7:82:ab:a6:
4e:0c:93:55:26:1e:4e:72:f4:fc:58:5f:fa:d3:bf:f2:bc:2a:
7a:88:5d:79:9f:95:21:71:35:05:3a:bb:a0:f6:b2:b2:0f:8f:
13:89:10:67:0e:72:2f:17:e7:a3:39:54:a3:4b:8e:07:2e:3e:
b8:37:63:49:90:39:66:0f:51:a8:46:1a:3f:2c:d2:06:c7:1d:
9c:c6:dc:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:14:55 2025 by rpki-client