Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/LyJ0SRkH5rOi6Wqo4hrDw443PB0.roa
File: LyJ0SRkH5rOi6Wqo4hrDw443PB0.roa (raw, json)
Hash identifier: cKRXkwnI+fEdiUx4FD50X3QGCrnOwGMwULvXMHJJt5g=
Subject key identifier: 2F:22:74:49:19:07:E6:B3:A2:E9:6A:A8:E2:1A:C3:C3:8E:37:3C:1D
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 018978E9AA241FF04E690580ED9B7878E061
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/LyJ0SRkH5rOi6Wqo4hrDw443PB0.roa
Signing time: Fri 21 Jul 2023 14:45:26 +0000
ROA not before: Fri 21 Jul 2023 14:45:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49112
IP address blocks: 130.0.96.0/19 maxlen: 19
95.157.128.0/18 maxlen: 18
185.147.232.0/22 maxlen: 22
2a00:9380::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 05 Oct 2023 06:47:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:78:e9:aa:24:1f:f0:4e:69:05:80:ed:9b:78:78:e0:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Jul 21 14:45:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2f2274491907e6b3a2e96aa8e21ac3c38e373c1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b7:0a:be:e2:9a:95:3a:11:38:02:b8:10:c6:
41:12:48:ac:33:c1:76:e0:a1:31:f0:90:41:d2:35:
e0:d0:fb:f5:f1:43:26:0e:d9:9d:4f:8d:61:ac:59:
5e:7c:59:ee:ba:63:1d:a9:ab:e7:fb:5d:36:7b:85:
fa:8e:36:9c:63:44:2a:e5:06:7e:c5:e5:87:35:cc:
77:96:c5:2e:22:3f:83:bb:ad:3a:e0:5a:13:3a:f2:
ac:e6:27:8a:39:bd:10:fb:ff:ce:30:6d:c2:40:39:
a8:7f:41:73:c8:e0:b8:4a:c4:34:7d:18:f7:ad:90:
a6:cd:59:ba:2c:1e:d3:23:68:98:42:63:65:9e:47:
cc:8f:87:87:c6:79:bc:d4:b8:9e:12:50:ad:1b:3c:
59:4c:10:e8:99:50:a5:28:32:ac:ab:16:36:8c:d6:
13:ae:0c:ed:29:ba:54:6e:02:73:db:f1:58:68:f6:
8f:f6:1e:ea:2e:8b:90:24:86:95:9f:40:1e:22:18:
8d:2f:5e:4d:13:b3:8d:63:9e:be:6f:23:01:dd:00:
4e:d1:a4:74:43:36:48:e9:05:62:dc:77:cb:a3:7d:
c6:f3:6c:b7:46:57:89:6b:24:7a:f1:df:e7:d5:f5:
c4:e8:4e:86:43:4f:75:3e:37:e7:c1:0a:29:ab:ac:
0f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:22:74:49:19:07:E6:B3:A2:E9:6A:A8:E2:1A:C3:C3:8E:37:3C:1D
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/LyJ0SRkH5rOi6Wqo4hrDw443PB0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.157.128.0/18
130.0.96.0/19
185.147.232.0/22
IPv6:
2a00:9380::/32
Signature Algorithm: sha256WithRSAEncryption
84:38:07:c0:67:ef:e6:57:30:fe:72:d1:9c:5a:c5:21:62:64:
62:91:2d:f9:da:b0:fc:3e:da:f0:a0:d5:0c:6d:58:09:ab:d0:
84:3a:7d:64:94:e9:86:d3:66:55:72:93:57:8a:a8:fb:70:7a:
e0:1b:f9:88:cc:83:69:38:ad:a5:9b:86:05:fe:83:4a:12:17:
cd:54:f6:48:67:4f:ae:c5:f5:48:e3:1b:3e:88:f2:8a:97:58:
d3:ce:f8:62:21:08:3a:41:99:13:a4:7b:e6:96:49:96:58:d9:
87:63:12:ac:ad:06:4c:a1:51:ce:36:d7:10:df:6f:db:43:b0:
21:c3:b0:3b:b8:3d:aa:a3:73:38:9f:b5:76:ba:f1:ae:9b:03:
5d:e6:d7:a9:f6:18:91:5c:b3:12:55:a0:77:da:4f:57:c8:e6:
a6:d2:e7:ca:8c:78:91:06:64:cb:93:3b:45:e1:9a:ac:c4:44:
1f:3a:10:7f:4a:6c:05:57:fc:9a:bd:39:fd:f2:6e:c6:db:04:
7d:cd:5c:48:30:4b:bd:3d:44:d0:f7:23:a8:82:f7:d6:85:65:
08:4e:0a:29:6a:15:c5:9a:68:15:9e:1e:b1:3f:09:29:a1:9f:
1e:38:2e:a6:0c:35:d6:5d:80:d4:91:93:bb:26:9f:d8:5a:44:
93:f0:00:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:50 2024 by rpki-client on console-ams.rpki-client.org