Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/LQVouVWzjH0TJcpm62FAMC8UDzA.roa
File: LQVouVWzjH0TJcpm62FAMC8UDzA.roa (raw, json)
Hash identifier: YijySeHN69xlAsUGP5WB2C+Es223QAkOdX9p5vw/B1U=
Subject key identifier: 2D:05:68:B9:55:B3:8C:7D:13:25:CA:66:EB:61:40:30:2F:14:0F:30
Certificate issuer: /CN=dea46eaae7aef2f44fe660162bb9dc70d6525af1
Certificate serial: 01863C844BACAEC341EE4E487D1B41121746
Authority key identifier: DE:A4:6E:AA:E7:AE:F2:F4:4F:E6:60:16:2B:B9:DC:70:D6:52:5A:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3qRuqueu8vRP5mAWK7nccNZSWvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/LQVouVWzjH0TJcpm62FAMC8UDzA.roa
Signing time: Fri 10 Feb 2023 18:09:08 +0000
ROA not before: Fri 10 Feb 2023 18:09:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48314
IP address blocks: 185.225.132.0/23 maxlen: 23
185.225.134.0/24 maxlen: 24
2a0d:c400::/32 maxlen: 32
2a0d:c401::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:3c:84:4b:ac:ae:c3:41:ee:4e:48:7d:1b:41:12:17:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dea46eaae7aef2f44fe660162bb9dc70d6525af1
Validity
Not Before: Feb 10 18:09:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2d0568b955b38c7d1325ca66eb6140302f140f30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5d:ec:46:47:38:fd:a5:25:d9:8c:6c:f5:65:
fd:8e:d0:f7:4d:20:96:b4:92:c9:a1:50:49:b1:74:
f4:e3:0e:9d:e9:fa:c0:e0:05:61:b7:14:0d:da:3c:
0e:62:6b:63:a1:b2:e3:1e:7a:99:33:5c:e6:52:bc:
c7:c0:7b:9f:0a:92:21:fe:6b:64:f1:4f:f8:34:1c:
82:19:09:a9:74:d7:79:b2:93:a0:94:79:dd:e1:a7:
3d:24:bb:e8:fd:e0:14:e1:42:39:a7:fd:d1:c3:49:
e4:ea:ca:b0:72:65:6d:6c:a8:29:a8:80:f8:07:34:
b2:59:c0:cf:0c:9d:3c:ae:6e:31:b3:26:de:44:c0:
51:bd:0b:0a:95:a8:32:39:e1:da:86:c6:30:91:85:
ed:fe:c4:fa:ff:34:44:31:d3:8b:22:60:b7:fc:b5:
f6:22:16:d4:44:22:2c:66:3e:d5:8f:d5:5b:50:c1:
f3:63:5d:22:10:eb:32:ca:3e:27:e3:c6:24:da:82:
bf:2d:a5:3f:53:c1:f9:bd:51:6d:01:58:ac:bd:59:
ae:b9:c0:a0:d7:26:d2:4f:1d:d3:b1:c2:56:11:b9:
a9:b5:1e:44:08:0c:ed:ee:6f:2e:91:30:65:60:a1:
1b:4e:90:f6:91:29:67:b1:5e:2a:1f:cd:67:81:e5:
22:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:05:68:B9:55:B3:8C:7D:13:25:CA:66:EB:61:40:30:2F:14:0F:30
X509v3 Authority Key Identifier:
keyid:DE:A4:6E:AA:E7:AE:F2:F4:4F:E6:60:16:2B:B9:DC:70:D6:52:5A:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3qRuqueu8vRP5mAWK7nccNZSWvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/LQVouVWzjH0TJcpm62FAMC8UDzA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.132.0-185.225.134.255
IPv6:
2a0d:c400::/31
Signature Algorithm: sha256WithRSAEncryption
7f:e2:de:d2:45:b8:ff:8d:23:37:b9:69:58:55:44:f1:dd:e8:
ee:c6:89:09:80:85:cb:38:22:e7:99:4f:32:b7:83:cd:2e:84:
ed:f6:ab:65:97:37:03:ce:6c:a9:95:19:fd:a7:c4:62:66:c1:
5e:08:68:2b:d3:f0:7a:81:db:c7:70:d6:cb:80:ce:16:b5:dc:
30:1c:82:c3:95:78:d8:83:f1:7f:2b:6a:a5:17:e8:c1:33:44:
d2:a4:09:51:00:74:35:85:50:b7:a6:43:90:a6:11:32:8b:91:
3e:17:b4:ac:f8:28:eb:00:df:e5:01:ee:d5:c9:7a:97:a3:37:
39:dd:f4:ad:a7:66:02:85:8c:24:ec:85:5c:93:d2:d8:68:90:
22:4e:3a:b2:44:43:c8:12:59:83:54:4e:57:12:53:b3:59:1b:
2e:91:8d:3f:a3:cd:5d:55:dd:6e:b5:27:c1:65:d3:3a:5d:f5:
d4:d8:b3:b3:10:6f:c2:47:6b:3e:ac:7d:07:2e:63:cf:fa:c9:
42:dc:dc:31:9a:a6:aa:41:40:af:01:f4:b8:38:b5:89:78:72:
33:9a:15:fb:d2:52:80:47:fd:d1:60:eb:29:1c:a3:46:58:25:
b9:86:54:f0:0a:18:11:34:fb:04:a7:a7:6a:48:68:f1:02:12:
a7:2e:c4:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:38 2024 by rpki-client on console-fra.rpki-client.org