Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/2fea18-fb62-4b95-9feb-9cf811e9fa7a/1/kXC42-6u-eXPeVVUldKESy935_M.roa
File: kXC42-6u-eXPeVVUldKESy935_M.roa (raw, json)
Hash identifier: qqbqiFfWTAs1sRncC5WUmqXmGRjFeq4MqqVI4+/zGLM=
Subject key identifier: 91:70:B8:DB:EE:AE:F9:E5:CF:79:55:54:95:D2:84:4B:2F:77:E7:F3
Certificate issuer: /CN=59919584033c3911a009bdde3183f6c60b2afcca
Certificate serial: 0187BCACE9E1DE02D3F53A35CCC5B1177B69
Authority key identifier: 59:91:95:84:03:3C:39:11:A0:09:BD:DE:31:83:F6:C6:0B:2A:FC:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WZGVhAM8ORGgCb3eMYP2xgsq_Mo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/2fea18-fb62-4b95-9feb-9cf811e9fa7a/1/kXC42-6u-eXPeVVUldKESy935_M.roa
Signing time: Wed 26 Apr 2023 08:27:41 +0000
ROA not before: Wed 26 Apr 2023 08:27:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41497
IP address blocks: 83.137.232.0/21 maxlen: 24
5.252.240.0/22 maxlen: 24
212.183.160.0/19 maxlen: 24
212.165.32.0/19 maxlen: 24
80.76.80.0/20 maxlen: 24
193.43.24.0/24 maxlen: 24
2001:4bb0::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:bc:ac:e9:e1:de:02:d3:f5:3a:35:cc:c5:b1:17:7b:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59919584033c3911a009bdde3183f6c60b2afcca
Validity
Not Before: Apr 26 08:27:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9170b8dbeeaef9e5cf79555495d2844b2f77e7f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b3:97:41:86:2c:a7:08:bd:3c:ac:9b:f9:4d:
2f:60:fc:6a:48:79:4f:b6:2f:3d:3b:11:dc:e7:b0:
86:32:bb:5f:89:8d:60:f8:61:bf:a4:26:5a:40:30:
4b:eb:91:82:a4:4c:5d:b1:13:2f:10:a6:82:2e:f6:
5d:67:d4:04:d4:b6:50:95:b0:74:ed:9e:bf:ee:da:
35:9d:f8:64:9b:ce:7b:34:8a:52:70:46:1b:10:e9:
10:2a:36:f9:c1:82:3b:a1:c5:3b:f0:6d:ec:1f:90:
4d:b7:c0:21:ab:70:fc:19:ec:01:22:e7:ae:b3:6b:
9f:00:2b:3e:61:02:90:7f:33:81:17:81:2d:bb:03:
21:6e:ce:7d:50:8c:d7:c5:2a:c8:42:17:c4:df:3b:
4a:d4:29:a2:60:6f:45:70:ee:9d:18:7a:28:67:68:
dc:6e:ea:47:75:88:a2:9e:04:23:ac:30:bd:d6:6c:
22:d7:fa:1a:33:50:b2:72:7c:8a:c1:39:8b:3b:6f:
f0:69:ea:ec:d3:95:be:87:f8:db:17:d9:77:51:76:
88:e5:40:e0:34:85:30:b5:de:dc:9c:6c:43:92:2a:
f9:a4:07:5f:ef:2a:7d:e1:16:e7:2d:27:39:48:fe:
c2:9a:84:82:d0:bc:ac:cd:03:73:59:06:15:2a:b8:
80:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:70:B8:DB:EE:AE:F9:E5:CF:79:55:54:95:D2:84:4B:2F:77:E7:F3
X509v3 Authority Key Identifier:
keyid:59:91:95:84:03:3C:39:11:A0:09:BD:DE:31:83:F6:C6:0B:2A:FC:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WZGVhAM8ORGgCb3eMYP2xgsq_Mo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2fea18-fb62-4b95-9feb-9cf811e9fa7a/1/kXC42-6u-eXPeVVUldKESy935_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2fea18-fb62-4b95-9feb-9cf811e9fa7a/1/WZGVhAM8ORGgCb3eMYP2xgsq_Mo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.240.0/22
80.76.80.0/20
83.137.232.0/21
193.43.24.0/24
212.165.32.0/19
212.183.160.0/19
IPv6:
2001:4bb0::/32
Signature Algorithm: sha256WithRSAEncryption
25:c1:b8:8c:32:96:4f:06:60:08:96:6a:67:5b:dd:6f:f3:54:
cb:1b:61:a9:04:4f:f8:7b:21:97:06:41:4c:06:fd:48:c5:3c:
00:d4:aa:7e:06:e3:3e:0a:4b:27:1a:56:17:59:fc:8b:0b:c9:
c5:49:91:4e:af:dd:33:76:cc:e8:78:84:64:9a:b0:dc:94:3a:
f8:87:88:b7:5e:32:51:d1:50:4c:2e:d0:a0:b1:76:6c:cd:76:
05:68:1b:2f:f1:b4:bd:f8:b2:c7:69:e2:9b:f2:02:9e:ae:d7:
41:c5:28:03:a1:e3:e8:af:9c:46:30:04:08:01:37:5e:cb:28:
6e:e3:21:04:48:b9:82:34:45:7c:cc:96:21:43:ac:dd:2b:7e:
e3:8e:5f:08:3b:1f:87:dc:03:0e:bc:8b:d2:f5:e0:09:89:ea:
2e:85:46:28:56:81:00:a3:4e:86:aa:35:0f:ae:3c:d3:8f:b4:
b0:6f:2f:96:56:59:0a:cc:2d:62:2f:5c:65:45:21:75:3e:02:
8c:b6:5a:4c:59:83:4c:56:a3:b2:d0:02:18:7b:35:bb:2e:bd:
dd:39:04:dd:09:ac:da:40:66:7c:ae:9b:47:41:a1:f8:87:87:
39:af:bf:49:ba:fa:de:62:3b:c2:bc:60:8b:da:7d:35:5a:25:
d5:05:ab:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:40 2024 by rpki-client on console-fra.rpki-client.org