Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/02966a-a7ae-4054-ab34-f7e73ddef4e2/1/LRJoqCWLtWBAHUhttyOjd6o1y-4.roa
File: LRJoqCWLtWBAHUhttyOjd6o1y-4.roa (raw, json)
Hash identifier: cx5gSyqHaYWslfvggkda94RV8q08bDVCFIg7wg42rGw=
Subject key identifier: 2D:12:68:A8:25:8B:B5:60:40:1D:48:6D:B7:23:A3:77:AA:35:CB:EE
Certificate issuer: /CN=c0395ec8821d8f8189413392bd876d7bd795c16c
Certificate serial: 0185710C1F29625464CFCAD3A7D686C6C5C0
Authority key identifier: C0:39:5E:C8:82:1D:8F:81:89:41:33:92:BD:87:6D:7B:D7:95:C1:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wDleyIIdj4GJQTOSvYdte9eVwWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/02966a-a7ae-4054-ab34-f7e73ddef4e2/1/LRJoqCWLtWBAHUhttyOjd6o1y-4.roa
Signing time: Mon 02 Jan 2023 05:54:57 +0000
ROA not before: Mon 02 Jan 2023 05:54:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5539
IP address blocks: 194.39.121.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:0c:1f:29:62:54:64:cf:ca:d3:a7:d6:86:c6:c5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0395ec8821d8f8189413392bd876d7bd795c16c
Validity
Not Before: Jan 2 05:54:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2d1268a8258bb560401d486db723a377aa35cbee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:af:55:d5:32:a7:83:79:1c:67:d4:25:57:51:
76:2e:48:96:ad:fd:e8:47:5f:99:b2:44:1c:55:76:
94:0e:84:c0:66:23:5f:6e:56:90:82:54:bb:54:96:
6a:1a:ea:fd:39:27:d2:d9:75:cf:cf:b3:9d:64:3c:
4e:e9:6e:ea:85:65:63:8a:6b:5c:ad:84:46:0d:cf:
8d:99:59:d6:07:4e:bf:76:a5:1d:8d:97:36:10:52:
22:54:54:79:51:3a:1b:68:4f:03:40:03:78:06:1e:
30:11:a1:35:e8:09:1a:09:a7:b9:dc:04:52:51:39:
ac:88:86:fc:5c:ed:33:2e:18:4a:fc:80:5b:09:3e:
08:9f:87:24:0f:f5:a0:7a:16:bd:e3:64:5a:03:da:
6f:90:c1:1f:10:dd:91:60:92:8e:2b:97:bb:8e:b2:
a2:1a:d7:39:1b:8d:4d:4c:1c:01:33:c2:9d:bc:16:
0a:fe:f3:b7:2a:a7:ea:e1:59:15:2c:0d:51:0d:f1:
04:ed:5c:6e:42:ac:bd:d2:ea:fa:ee:0d:02:45:d7:
84:d3:54:c2:39:d4:d3:ca:ff:f6:df:f3:98:91:83:
b4:4c:6f:08:81:c3:15:66:25:9d:9e:c4:bb:3d:39:
e6:d4:37:f0:8d:d9:61:49:b9:84:d3:80:37:18:0e:
52:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:12:68:A8:25:8B:B5:60:40:1D:48:6D:B7:23:A3:77:AA:35:CB:EE
X509v3 Authority Key Identifier:
keyid:C0:39:5E:C8:82:1D:8F:81:89:41:33:92:BD:87:6D:7B:D7:95:C1:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wDleyIIdj4GJQTOSvYdte9eVwWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/02966a-a7ae-4054-ab34-f7e73ddef4e2/1/LRJoqCWLtWBAHUhttyOjd6o1y-4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/02966a-a7ae-4054-ab34-f7e73ddef4e2/1/wDleyIIdj4GJQTOSvYdte9eVwWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.39.121.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:b2:33:dd:50:33:bf:cd:73:44:60:e7:29:2c:c6:3f:a2:4b:
72:92:8b:71:8c:b5:62:fa:01:44:aa:19:02:bd:5a:78:3d:1c:
c0:6a:44:50:ff:11:2a:9b:21:3d:50:55:08:d6:a6:7c:64:9e:
e5:b7:b1:e9:13:60:83:f8:4c:03:4d:90:7e:db:e8:1d:22:d8:
34:6f:49:11:68:81:a8:90:bb:15:ec:78:63:35:8b:db:af:77:
49:04:86:f4:83:6b:ff:30:67:fb:88:b4:ee:e5:22:0d:93:e9:
43:7a:c9:9f:2e:d8:db:05:79:b9:17:4b:2f:24:27:70:83:91:
1c:31:21:04:3a:59:3e:00:8f:02:1c:95:65:3d:f4:23:c7:79:
6a:42:9a:0d:a4:c4:bc:dd:8f:94:de:99:0f:d9:ca:db:06:fa:
56:0e:58:5c:3a:de:3a:52:72:ac:56:ac:79:48:56:ad:8c:ef:
4a:ad:19:37:fa:13:d1:ca:9b:39:1d:58:4b:2e:74:91:c2:78:
c6:aa:c3:de:4a:15:e0:2a:66:04:12:8b:fe:00:7d:35:a1:2e:
1f:c9:c9:30:8a:d0:80:43:3c:76:70:1c:ec:f5:fb:1a:94:b3:
01:ff:e5:5c:7a:28:0f:a0:bb:c5:88:02:57:5b:5d:0f:16:b1:
5f:f9:56:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:18 2024 by rpki-client on console-fra.rpki-client.org