Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/LciymOT6_28JoWuqZY_2MeXiR1E.roa
File: LciymOT6_28JoWuqZY_2MeXiR1E.roa (raw, json)
Hash identifier: nxDlycWNEFA3/36B8j+pws7j/QH4kZ0JPQB2juOVhSc=
Subject key identifier: 2D:C8:B2:98:E4:FA:FF:6F:09:A1:6B:AA:65:8F:F6:31:E5:E2:47:51
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 018FB989BC46195D90042C80E58A4159BEC6
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/LciymOT6_28JoWuqZY_2MeXiR1E.roa
Signing time: Mon 27 May 2024 10:12:42 +0000
ROA not before: Mon 27 May 2024 10:12:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 5.34.208.0/21 maxlen: 24
82.115.4.0/22 maxlen: 24
82.115.8.0/24 maxlen: 24
89.251.10.0/24 maxlen: 24
103.25.86.0/23 maxlen: 24
188.253.8.0/22 maxlen: 24
202.133.90.0/23 maxlen: 24
213.173.32.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 28 May 2024 05:57:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:b9:89:bc:46:19:5d:90:04:2c:80:e5:8a:41:59:be:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: May 27 10:12:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2dc8b298e4faff6f09a16baa658ff631e5e24751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:37:1b:72:ce:7b:4f:58:8e:2a:a9:4f:df:e4:
91:21:f8:59:06:53:3e:99:f7:b0:26:96:83:15:50:
9a:f5:8d:d5:4f:6f:27:3c:3f:54:d4:a7:66:be:42:
7e:71:32:c9:18:92:2f:a9:9d:e4:60:14:39:0f:72:
87:19:be:9c:af:67:ad:7e:97:97:59:06:60:7b:ef:
8a:2f:fb:16:b4:4b:24:29:5b:99:d5:f2:6d:0e:83:
91:d0:be:b1:1b:79:9c:cf:40:fb:86:6e:91:15:ea:
4f:fd:92:17:15:72:57:5d:e4:53:67:3d:cb:1c:b3:
41:b2:19:c2:a0:f1:ed:52:2c:3e:a8:bd:02:7b:c0:
b9:1c:34:b1:bc:27:de:0c:d5:bf:d9:07:8e:e1:8e:
c3:c8:62:93:8a:ed:66:ba:1c:fc:57:45:19:03:66:
51:b1:76:b3:e7:85:3d:68:96:99:2a:60:c3:f9:33:
52:02:0d:38:5a:b4:9c:16:18:a6:d1:64:9e:f7:64:
96:a7:0e:d2:b0:54:24:18:72:35:ec:f9:20:04:7f:
3a:60:12:87:11:88:f2:4b:d6:0e:11:a5:0d:b9:55:
f6:46:ab:03:53:72:79:ac:4c:f5:0b:8c:2a:3b:86:
66:ef:89:3c:a0:4b:71:10:e6:15:d1:1e:a8:c7:13:
41:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:C8:B2:98:E4:FA:FF:6F:09:A1:6B:AA:65:8F:F6:31:E5:E2:47:51
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/LciymOT6_28JoWuqZY_2MeXiR1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.34.208.0/21
82.115.4.0-82.115.8.255
89.251.10.0/24
103.25.86.0/23
188.253.8.0/22
202.133.90.0/23
213.173.32.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:d4:6f:49:0a:8f:0c:7b:df:e0:7e:57:73:78:51:ef:7a:c8:
77:cd:7a:c0:62:0c:11:01:96:40:3c:cf:ac:74:ba:3a:56:82:
af:0b:50:fb:72:05:41:f0:c0:1b:25:e6:77:f2:66:f7:a9:6b:
37:93:8f:f7:73:04:12:61:37:da:5a:8e:af:35:8c:e0:b5:8c:
33:19:5e:2f:60:74:c6:c8:1c:63:fe:aa:fd:59:ff:22:c8:e6:
84:a1:e3:b6:92:8b:98:f0:63:ac:eb:d0:01:9d:bc:ae:70:d1:
95:dc:3c:2f:c8:1c:8d:74:51:b4:b0:cb:df:1c:b7:b2:d1:23:
2c:33:5b:2c:bf:bf:22:a3:44:e9:9f:51:c9:d1:24:27:63:7f:
7c:8b:75:b0:33:3c:a0:89:22:b3:08:72:e2:86:fb:17:9a:42:
de:e0:12:34:e9:64:0e:51:b1:26:7d:80:d6:c5:bd:d1:ce:52:
1c:ad:67:94:67:b2:52:65:df:34:40:a3:ab:0f:c8:0e:c3:3c:
1c:d8:95:0e:4a:3e:f6:14:f9:d6:d6:87:39:0a:34:80:f9:5f:
41:c2:80:ff:07:b0:b4:10:88:d2:95:51:45:db:e0:43:c8:fa:
10:f3:95:e5:64:26:48:ed:98:78:05:03:16:85:2a:cd:17:88:
0b:54:cc:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:34 2024 by rpki-client on console-fra.rpki-client.org