Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/a1c6ec-c260-4ca2-887b-4bb94cbc2e73/1/Kpp0pVwBR46_utQULsGDI5kHB7U.roa
File: Kpp0pVwBR46_utQULsGDI5kHB7U.roa (raw, json)
Hash identifier: 4oJOmD19yQ3NIfjTAEjII6mtS3dkODWIMZz7PmcNZqE=
Subject key identifier: 2A:9A:74:A5:5C:01:47:8E:BF:BA:D4:14:2E:C1:83:23:99:07:07:B5
Certificate issuer: /CN=5b6d178f13851306b5634df159716319f4d82478
Certificate serial: 019013192945ECA25CF2391BC0A6924DE8F6
Authority key identifier: 5B:6D:17:8F:13:85:13:06:B5:63:4D:F1:59:71:63:19:F4:D8:24:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W20XjxOFEwa1Y03xWXFjGfTYJHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/a1c6ec-c260-4ca2-887b-4bb94cbc2e73/1/Kpp0pVwBR46_utQULsGDI5kHB7U.roa
Signing time: Thu 13 Jun 2024 19:35:34 +0000
ROA not before: Thu 13 Jun 2024 19:35:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207459
IP address blocks: 80.253.254.0/24 maxlen: 32
80.253.255.0/24 maxlen: 32
91.217.119.0/24 maxlen: 32
2a0e:36c0::/29 maxlen: 32
2a0e:36c0::/32 maxlen: 32
2a0e:36c1::/32 maxlen: 32
2a0e:36c2::/32 maxlen: 32
2a0e:36c3::/32 maxlen: 32
2a0e:36c4::/32 maxlen: 32
2a0e:36c5::/32 maxlen: 32
2a0e:36c6::/32 maxlen: 32
2a0e:36c7::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 09 Jul 2024 11:29:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:13:19:29:45:ec:a2:5c:f2:39:1b:c0:a6:92:4d:e8:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b6d178f13851306b5634df159716319f4d82478
Validity
Not Before: Jun 13 19:35:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2a9a74a55c01478ebfbad4142ec18323990707b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:48:41:31:4c:8c:f1:4a:9c:25:f3:fa:a6:76:
2e:78:42:bb:5a:9f:69:2d:2c:a8:90:ca:19:7e:45:
67:f6:05:90:ff:e9:9f:90:b7:4d:37:62:5b:82:96:
37:1d:45:b9:3e:e2:0a:6b:20:99:2f:09:b6:91:a9:
62:cd:4c:96:0d:8b:85:90:c2:df:78:17:6f:55:80:
0f:99:d4:6a:7d:48:6a:8e:2c:63:cd:83:ac:0a:fe:
6f:c9:25:3f:89:ae:1a:76:b7:0a:fc:5e:04:56:94:
3e:73:e1:f3:c6:a9:5d:d6:62:54:96:9d:73:93:08:
6c:9a:a5:6a:1f:15:2a:a8:f8:22:6f:e7:18:93:59:
78:2b:a5:d1:13:6d:f8:a0:99:97:e0:39:e3:f2:9c:
34:af:21:bd:a6:b4:99:34:66:59:28:f4:d7:6d:14:
2e:8b:fa:8f:32:a3:b4:9e:83:37:ad:30:bb:b1:dd:
4d:32:2f:6d:78:47:4a:0a:c2:03:42:ec:17:48:70:
db:00:4d:8f:46:ca:c4:8d:66:ea:63:7d:4e:86:c4:
3b:7d:04:50:0c:ac:ef:16:9d:28:2d:83:d0:32:b9:
e3:09:1f:12:7a:1f:e2:41:90:c0:3e:d1:e1:1e:84:
4e:1d:b2:75:3c:4b:80:ad:62:73:53:ad:49:34:e0:
80:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:9A:74:A5:5C:01:47:8E:BF:BA:D4:14:2E:C1:83:23:99:07:07:B5
X509v3 Authority Key Identifier:
keyid:5B:6D:17:8F:13:85:13:06:B5:63:4D:F1:59:71:63:19:F4:D8:24:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W20XjxOFEwa1Y03xWXFjGfTYJHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a1c6ec-c260-4ca2-887b-4bb94cbc2e73/1/Kpp0pVwBR46_utQULsGDI5kHB7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a1c6ec-c260-4ca2-887b-4bb94cbc2e73/1/W20XjxOFEwa1Y03xWXFjGfTYJHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.253.254.0/23
91.217.119.0/24
IPv6:
2a0e:36c0::/29
Signature Algorithm: sha256WithRSAEncryption
25:8c:b9:9c:ac:2a:0c:4c:36:12:8e:37:23:a4:af:0c:24:d0:
ad:b7:84:e2:4a:83:57:42:0e:30:74:38:6c:35:dd:49:01:5e:
82:d5:d7:5e:29:f4:0a:b0:37:77:98:6b:e4:7a:86:12:62:31:
ec:f5:4a:3e:79:f4:2b:4f:19:91:f0:62:df:2b:dc:95:d0:73:
40:89:45:34:7e:d6:28:bb:22:89:24:d8:68:d3:d2:22:a6:2e:
22:7b:5c:ca:9e:69:4a:d3:8c:b1:8e:41:d0:be:82:02:b2:6a:
4c:fb:f8:82:c6:61:64:d5:0d:db:d9:fc:04:28:9c:f5:a4:cd:
4a:cb:46:cd:96:02:34:44:71:98:93:89:2c:c0:e7:70:9b:9c:
ce:2d:45:f1:71:9e:bd:6d:ac:5f:2b:24:1b:4b:ae:62:da:d7:
b0:22:34:60:00:6c:8c:23:0a:30:a7:24:1e:1a:b4:2f:ef:37:
9b:b3:98:50:9f:36:41:a8:15:70:6c:ac:84:13:b0:07:7c:9b:
19:2d:f9:19:ac:64:a7:95:ee:2f:29:d8:e2:96:0e:59:c3:a9:
49:ea:3a:ab:56:17:d7:cb:6b:e7:6a:36:a3:50:23:5f:29:e4:
ad:f8:76:b0:27:10:17:b5:b4:33:04:1b:df:7d:27:a2:36:52:
01:84:18:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 9 13:50:32 2024 by rpki-client on console-ams.rpki-client.org