Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/kk56FDV2k-CzkhnqcQA8ugh8TiA.roa
File: kk56FDV2k-CzkhnqcQA8ugh8TiA.roa (raw, json)
Hash identifier: vGr3fIfeBbaqKOxegKFuGzEc1pKOOOoRYf0+0cTRVw0=
Subject key identifier: 92:4E:7A:14:35:76:93:E0:B3:92:19:EA:71:00:3C:BA:08:7C:4E:20
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 018D11537EBB11993AC8FBA2F83EDCC310C9
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/kk56FDV2k-CzkhnqcQA8ugh8TiA.roa
Signing time: Tue 16 Jan 2024 08:11:40 +0000
ROA not before: Tue 16 Jan 2024 08:11:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 91.217.125.0/24 maxlen: 24
188.64.162.0/24 maxlen: 24
45.131.51.0/24 maxlen: 24
45.93.82.0/24 maxlen: 24
185.210.136.0/24 maxlen: 24
80.64.24.0/24 maxlen: 24
80.64.30.0/24 maxlen: 24
80.64.25.0/24 maxlen: 24
80.64.27.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 16 Jan 2024 19:55:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:11:53:7e:bb:11:99:3a:c8:fb:a2:f8:3e:dc:c3:10:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Jan 16 08:11:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=924e7a14357693e0b39219ea71003cba087c4e20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4a:19:71:b7:0f:15:86:6d:90:dc:ef:56:31:
8e:a1:da:82:33:fd:d4:c5:f6:6f:d0:c5:89:a0:38:
7c:e2:80:12:65:2b:68:db:3b:72:c8:6d:a2:6f:13:
9e:58:fa:11:e0:cb:72:6c:b7:b5:19:77:27:39:ae:
37:0e:fe:18:cc:14:94:c8:08:dc:73:e1:93:22:0f:
c5:53:0b:d5:a7:0a:1a:b6:bb:d8:2e:fc:74:a8:3a:
ff:05:68:e5:cd:8a:03:15:8d:a1:73:ed:0d:4f:7c:
ef:60:21:bd:c8:d0:09:0c:af:ca:ed:6f:8a:3d:ad:
bb:5a:db:1a:33:a7:69:dc:1d:04:13:24:41:58:46:
f5:1c:5f:9d:d6:5b:c7:ff:8b:8f:95:30:53:2a:18:
ee:fa:bf:b0:ba:4f:ab:7c:90:6f:52:e6:b9:ad:a1:
e8:b8:36:30:c1:d0:b5:b0:04:15:39:65:fb:c2:a1:
2b:1f:88:b2:27:0c:a1:ea:39:65:9d:b8:2a:c7:b4:
f5:82:8c:4e:13:72:98:9c:4d:2d:e7:15:aa:4e:b1:
2e:11:c3:95:35:c3:e8:1c:af:e2:69:00:ad:eb:b1:
7b:74:83:0b:5c:ad:16:30:e8:84:bc:3f:f1:16:3e:
31:b1:96:3f:65:8a:04:9e:d3:86:c0:a4:e4:41:e1:
ba:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:4E:7A:14:35:76:93:E0:B3:92:19:EA:71:00:3C:BA:08:7C:4E:20
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/kk56FDV2k-CzkhnqcQA8ugh8TiA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.82.0/24
45.131.51.0/24
80.64.24.0/23
80.64.27.0/24
80.64.30.0/24
91.217.125.0/24
185.210.136.0/24
188.64.162.0/24
Signature Algorithm: sha256WithRSAEncryption
70:d1:2d:3f:b6:54:01:49:4d:e2:dd:17:c1:5f:fd:f3:d4:b8:
63:5a:4c:51:d1:c6:76:b4:40:96:52:5f:14:fa:7e:3d:af:7d:
01:e2:88:c2:6b:f8:89:64:51:67:af:9b:50:69:25:35:bd:dc:
2b:4d:31:bb:92:2a:79:9c:32:7b:1f:45:a8:78:f0:50:b9:67:
82:4c:a0:3f:10:3a:ad:fc:59:6a:e6:7a:f0:b6:bb:ff:cc:c7:
bc:47:bb:4e:27:ea:64:bd:a6:3d:88:3e:86:ab:0d:bd:72:44:
26:7f:bd:97:96:6f:3a:9b:a2:79:d4:d8:02:d8:ca:e1:39:b1:
27:dd:a8:15:60:ab:d0:8b:b9:d0:ad:c9:2c:4e:cb:4f:80:9f:
26:45:48:39:8f:06:e1:c1:51:99:e7:bd:a6:8b:37:0f:5e:82:
f1:c5:8b:1d:50:42:2f:3a:53:7f:47:fe:94:82:96:9f:22:64:
0e:1a:f9:c8:29:01:b8:bc:9f:98:54:75:01:ad:2b:e7:49:8c:
4f:f9:75:96:b9:b3:bf:66:59:64:44:4a:b0:ce:ee:08:b8:f5:
9c:ce:e1:d8:47:0f:3d:c2:bd:bf:86:94:e0:6c:77:d6:b8:1a:
99:07:af:70:73:60:c4:cc:c4:65:7c:bd:c9:d0:e4:44:45:98:
9b:db:0a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 17 00:12:14 2024 by rpki-client on console-ams.rpki-client.org