Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/551e92-992d-41da-986b-9519693eaa7b/1/sLEK44AVPpLqP49y3Lr-NnBeRkk.roa
File: sLEK44AVPpLqP49y3Lr-NnBeRkk.roa (raw, json)
Hash identifier: SefItWqTJhNr+8vOGr7l3Ekmy9KS68dH6KebsKYb4EA=
Subject key identifier: B0:B1:0A:E3:80:15:3E:92:EA:3F:8F:72:DC:BA:FE:36:70:5E:46:49
Certificate issuer: /CN=c3b0d535eebcf28e60ac98ae495b34981b5a93ec
Certificate serial: 0185F3608987B29AE7749BA8D8E7B9676446
Authority key identifier: C3:B0:D5:35:EE:BC:F2:8E:60:AC:98:AE:49:5B:34:98:1B:5A:93:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w7DVNe688o5grJiuSVs0mBtak-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/551e92-992d-41da-986b-9519693eaa7b/1/sLEK44AVPpLqP49y3Lr-NnBeRkk.roa
Signing time: Fri 27 Jan 2023 13:17:48 +0000
ROA not before: Fri 27 Jan 2023 13:17:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29119
IP address blocks: 188.119.104.0/24 maxlen: 24
185.50.207.0/24 maxlen: 24
193.43.75.0/24 maxlen: 24
45.13.11.0/24 maxlen: 24
193.43.98.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:f3:60:89:87:b2:9a:e7:74:9b:a8:d8:e7:b9:67:64:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3b0d535eebcf28e60ac98ae495b34981b5a93ec
Validity
Not Before: Jan 27 13:17:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b0b10ae380153e92ea3f8f72dcbafe36705e4649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:8b:93:f0:68:3c:b2:23:d8:27:76:b4:9f:01:
26:f5:79:3a:57:b0:74:01:4b:ff:ec:a2:3a:0b:7f:
b7:33:95:86:5d:37:71:b1:6f:e3:55:02:b4:cb:55:
71:c0:58:60:d3:cd:7e:09:88:92:d2:e3:50:c9:55:
05:37:65:46:74:9b:b5:11:3f:d7:c7:de:19:f3:53:
54:74:b6:f8:a4:47:6b:81:b5:93:d1:d0:fe:8f:8b:
52:42:66:a5:92:b3:81:fc:95:97:d9:37:b5:84:27:
71:20:43:9e:10:c4:cd:e2:2d:bb:a4:44:bb:0f:17:
9a:d2:72:a7:1b:eb:72:4a:a9:57:a8:b7:cd:46:15:
49:e5:27:a7:39:34:8c:36:8e:c0:8e:24:d4:e9:ec:
6e:43:8f:1c:3a:27:68:1b:cc:af:d6:65:be:18:7a:
bb:a8:47:2a:5e:7b:77:a0:3a:26:67:8e:fd:f7:82:
f6:c1:75:a5:d3:ff:ca:63:63:8f:6f:ef:ee:de:ab:
fe:c3:a5:c4:8f:25:56:fd:9c:5b:cd:b8:d4:69:0f:
f1:d5:d6:e3:df:dc:4a:81:50:39:2e:a3:c3:eb:3e:
58:66:e8:e0:a0:d9:8f:83:2a:41:4b:10:59:6f:88:
a4:ef:f0:93:8d:38:27:80:c4:99:34:14:69:c2:29:
80:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:B1:0A:E3:80:15:3E:92:EA:3F:8F:72:DC:BA:FE:36:70:5E:46:49
X509v3 Authority Key Identifier:
keyid:C3:B0:D5:35:EE:BC:F2:8E:60:AC:98:AE:49:5B:34:98:1B:5A:93:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w7DVNe688o5grJiuSVs0mBtak-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/551e92-992d-41da-986b-9519693eaa7b/1/sLEK44AVPpLqP49y3Lr-NnBeRkk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/551e92-992d-41da-986b-9519693eaa7b/1/w7DVNe688o5grJiuSVs0mBtak-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.11.0/24
185.50.207.0/24
188.119.104.0/24
193.43.75.0/24
193.43.98.0/24
Signature Algorithm: sha256WithRSAEncryption
48:4e:50:bf:b0:6d:c9:4b:3a:cb:9c:fd:4a:2e:e4:0f:89:b1:
c0:1e:90:4b:7d:a4:86:f3:c1:9d:6e:95:b5:f2:76:5a:a7:79:
03:55:06:f2:75:7f:94:c8:31:1a:40:d0:17:9f:30:fb:be:8e:
70:54:14:0f:3a:07:89:29:ec:35:80:d6:e4:73:66:6f:c4:9b:
1a:db:40:98:bf:4c:37:73:9e:23:1f:5f:d0:84:5f:d6:82:fe:
3f:ff:7a:23:2f:aa:da:f7:c6:14:a6:fe:21:7d:d5:af:86:ab:
43:81:05:52:a1:39:23:eb:13:a3:07:9b:46:67:08:bb:cb:96:
0f:80:b4:12:0a:ff:bb:79:b3:74:4d:53:f4:a9:3d:6b:e1:6e:
fe:92:47:e7:9c:2b:bd:67:07:20:5c:23:59:45:60:28:24:f1:
98:07:a6:ae:81:4d:b1:dd:11:c9:4e:cb:8c:c7:57:4a:67:cf:
be:b6:f1:3b:f0:77:53:0c:22:21:e7:00:ef:af:fc:9d:d2:8f:
8a:c0:d8:00:16:2b:92:98:3e:76:9e:39:b7:05:d7:f6:23:67:
f7:03:55:a9:f7:f4:4d:46:1d:70:77:ea:a4:0d:63:5c:ec:ae:
f0:4a:cb:4d:a8:bb:49:18:9f:7b:d2:17:b7:58:8d:e2:b4:ef:
7c:19:52:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:01 2024 by rpki-client on console-fra.rpki-client.org