Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/kjKBM76ryGt1S8FzpP9wSswgr3g.roa
File: kjKBM76ryGt1S8FzpP9wSswgr3g.roa (raw, json)
Hash identifier: oShC1fTAcORQF1lQk4HMHxQeGkIaxabBMmeORc3Bh4g=
Subject key identifier: 92:32:81:33:BE:AB:C8:6B:75:4B:C1:73:A4:FF:70:4A:CC:20:AF:78
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 018BD77F7AE525F4F4F30E7D5DCB71901574
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/kjKBM76ryGt1S8FzpP9wSswgr3g.roa
Signing time: Thu 16 Nov 2023 09:38:57 +0000
ROA not before: Thu 16 Nov 2023 09:38:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210644
IP address blocks: 185.174.137.0/24 maxlen: 24
185.229.65.0/24 maxlen: 24
185.174.136.0/24 maxlen: 24
185.229.66.0/24 maxlen: 24
94.142.138.0/24 maxlen: 24
185.106.94.0/24 maxlen: 24
185.106.93.0/24 maxlen: 24
185.112.83.0/24 maxlen: 24
91.103.252.0/23 maxlen: 23
45.142.122.0/24 maxlen: 24
185.17.0.0/24 maxlen: 24
45.138.74.0/24 maxlen: 24
5.252.118.0/24 maxlen: 24
194.67.201.0/24 maxlen: 24
2a0e:d607::/48 maxlen: 48
2a0e:d602:3::/48 maxlen: 48
2a0e:d602:2::/48 maxlen: 48
2a0e:d606::/48 maxlen: 48
2a0e:d602:1::/48 maxlen: 48
2a0e:d602::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 12 Dec 2023 11:41:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d7:7f:7a:e5:25:f4:f4:f3:0e:7d:5d:cb:71:90:15:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Nov 16 09:38:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=92328133beabc86b754bc173a4ff704acc20af78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:73:09:3d:de:71:c2:66:89:69:19:21:6a:b5:
7e:b5:08:2d:47:4b:e6:5e:0d:fb:0a:b8:e7:8f:be:
5a:bf:e2:c8:f1:7d:fa:90:dc:9f:9e:16:3f:c9:73:
28:e3:ab:51:ec:ae:54:6f:5e:83:b0:0e:31:9d:d7:
d9:f7:2a:0d:73:aa:b7:f0:90:e5:6a:a2:32:5e:04:
86:3f:73:17:a9:6a:c2:cc:6d:ff:ff:6f:3e:7f:84:
95:a3:61:7b:6c:82:88:08:4d:5c:71:ca:44:9c:9f:
9d:4b:11:84:2a:1d:15:6b:1d:2e:ee:ff:d1:a2:12:
3f:1b:f6:01:0f:10:06:cd:ac:de:bc:bf:59:0c:7c:
1f:3b:35:87:b3:f1:66:01:63:f3:a3:8b:1a:ec:23:
74:3f:83:de:ae:34:4f:da:e7:e6:e7:46:15:b2:dc:
f7:19:d7:91:f0:a1:28:a3:86:2a:10:c8:87:62:5f:
8a:8d:e9:5d:8d:88:e7:fa:32:04:17:92:1b:f2:08:
cf:85:76:a2:d8:96:3f:7f:81:62:49:a0:d9:96:7e:
16:2f:25:40:95:16:d9:a1:8a:a5:35:40:c4:ec:5a:
4f:9a:9a:c5:de:df:49:13:42:79:fe:ea:1a:3a:e4:
17:6f:fe:45:69:8d:69:1e:0f:fd:92:43:dc:74:62:
3d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:32:81:33:BE:AB:C8:6B:75:4B:C1:73:A4:FF:70:4A:CC:20:AF:78
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/kjKBM76ryGt1S8FzpP9wSswgr3g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.118.0/24
45.138.74.0/24
45.142.122.0/24
91.103.252.0/23
94.142.138.0/24
185.17.0.0/24
185.106.93.0-185.106.94.255
185.112.83.0/24
185.174.136.0/23
185.229.65.0-185.229.66.255
194.67.201.0/24
IPv6:
2a0e:d602::/46
2a0e:d606::/48
2a0e:d607::/48
Signature Algorithm: sha256WithRSAEncryption
67:5a:b4:5f:bc:cc:7e:7a:e7:a7:86:16:ac:e9:a8:83:50:90:
43:bd:70:06:6f:24:e8:11:25:e9:65:dd:2e:21:50:e6:c9:ee:
c6:fd:e8:8f:b7:e7:14:77:96:19:40:41:0a:a6:3f:aa:68:0d:
12:e0:15:ea:02:53:c3:1f:f5:fc:ff:d2:a1:3c:bb:07:81:85:
95:8c:89:ee:49:2e:09:66:4d:7c:af:1d:4a:c6:93:bb:f0:f0:
f8:6f:b3:4b:4f:22:71:ba:a9:dd:a2:fd:15:0c:88:f7:f7:90:
01:38:85:db:9f:dd:20:b7:e3:67:7d:9a:7a:0d:b5:10:79:08:
e1:95:27:5f:b7:00:38:16:43:9d:a1:a7:3b:4e:53:d4:40:41:
78:97:76:5e:01:ac:ee:7e:d9:a4:bf:ef:ad:c0:81:7c:75:8b:
3b:ec:a2:90:e8:81:b3:cb:22:19:fb:57:e9:c2:8b:10:62:6c:
59:3f:cd:23:be:66:64:33:6f:2f:52:89:f7:cd:9d:a1:a6:a3:
c7:93:3b:1d:f8:cd:6c:c1:c7:fc:20:59:ee:ff:e5:bf:3d:f4:
e9:9f:1f:7a:c2:af:02:e9:f7:2e:58:90:2c:23:38:98:a8:bc:
2a:27:06:9d:5a:c6:ab:60:a8:63:38:3f:86:5a:2d:cc:a3:61:
94:7b:c2:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:08 2024 by rpki-client on console-fra.rpki-client.org