Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/LJMPl-2vVZ60d3PpZmWlL6pu0Bg.roa
File: LJMPl-2vVZ60d3PpZmWlL6pu0Bg.roa (raw, json)
Hash identifier: OPADgMzFB1jK+QiGFm3WD+kWVbPdh8mjARVMRNVmJEU=
Subject key identifier: 2C:93:0F:97:ED:AF:55:9E:B4:77:73:E9:66:65:A5:2F:AA:6E:D0:18
Certificate issuer: /CN=2378a4a9c52325a85920809ba1a4d89e21c02f17
Certificate serial: 018CC94D7AE3EC8A5DAA88F39E7FBB91098D
Authority key identifier: 23:78:A4:A9:C5:23:25:A8:59:20:80:9B:A1:A4:D8:9E:21:C0:2F:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I3ikqcUjJahZIICboaTYniHALxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/LJMPl-2vVZ60d3PpZmWlL6pu0Bg.roa
Signing time: Tue 02 Jan 2024 08:32:27 +0000
ROA not before: Tue 02 Jan 2024 08:32:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43022
IP address blocks: 212.1.127.0/24 maxlen: 24
212.1.74.0/23 maxlen: 23
212.1.73.0/24 maxlen: 24
212.1.78.0/23 maxlen: 23
212.1.82.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 29 Apr 2024 08:58:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:7a:e3:ec:8a:5d:aa:88:f3:9e:7f:bb:91:09:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2378a4a9c52325a85920809ba1a4d89e21c02f17
Validity
Not Before: Jan 2 08:32:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2c930f97edaf559eb47773e96665a52faa6ed018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:cd:c4:5d:b7:c1:05:b9:d8:da:f8:37:1a:0d:
32:76:90:ac:fa:64:3e:36:b0:19:73:c5:28:4a:0a:
24:e6:5d:e6:c5:a7:df:97:60:d6:b8:20:3c:68:9d:
ec:06:a8:93:d4:50:04:96:78:aa:f3:a6:bd:46:10:
c1:42:6a:8a:b5:2f:3c:30:83:15:eb:2c:8b:1f:98:
53:cc:ea:8e:cf:3c:67:ec:6c:49:ce:f1:e9:35:48:
43:04:98:df:b0:70:25:1d:cf:08:61:d4:d1:70:58:
d2:03:10:99:ff:43:60:82:55:fd:47:d3:8b:05:6f:
b5:69:0c:89:c4:08:10:67:29:8e:64:7d:ee:1a:5a:
8b:c5:fc:30:ea:c7:44:dc:58:8a:15:99:b7:e9:53:
f8:a9:b9:4c:f0:3e:c0:08:67:e9:a8:f0:9c:6b:17:
8c:0d:fe:27:cb:a0:20:15:80:e2:c8:37:9f:8f:eb:
be:a8:4b:b7:32:c9:bc:1d:b5:2e:8f:2d:61:cc:9e:
6f:61:06:83:f5:3b:3f:ae:3d:17:20:f1:ad:c0:02:
47:29:56:92:d9:d7:7c:94:55:9c:89:af:d9:e6:d0:
40:e2:60:79:97:3a:a9:28:cf:ef:c2:80:6b:84:49:
1b:ba:8a:c7:8a:b7:58:8e:82:3a:39:be:5c:8b:6a:
cf:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:93:0F:97:ED:AF:55:9E:B4:77:73:E9:66:65:A5:2F:AA:6E:D0:18
X509v3 Authority Key Identifier:
keyid:23:78:A4:A9:C5:23:25:A8:59:20:80:9B:A1:A4:D8:9E:21:C0:2F:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I3ikqcUjJahZIICboaTYniHALxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/LJMPl-2vVZ60d3PpZmWlL6pu0Bg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/I3ikqcUjJahZIICboaTYniHALxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.1.73.0-212.1.75.255
212.1.78.0/23
212.1.82.0/23
212.1.127.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:f1:61:23:1c:53:b7:20:04:32:de:84:b1:8a:19:22:51:9e:
44:dd:3e:76:d1:d0:00:1b:36:65:04:4a:6b:d6:f1:21:83:3b:
e6:15:85:3c:c9:f6:70:68:90:af:59:cb:45:8d:80:ec:22:f3:
f7:16:53:f3:d2:d3:a3:29:d4:25:f9:1e:d2:b6:e8:d1:d2:06:
bf:c7:a4:66:fd:85:2b:44:f6:d0:85:81:d7:de:42:3f:94:47:
44:54:04:c7:be:74:19:d8:e6:67:52:b5:50:34:15:ae:fb:fe:
a6:81:59:84:e3:35:87:63:8b:be:81:b2:58:0e:a3:09:9f:88:
bb:e8:f0:b3:cc:1a:19:cc:fd:dd:1c:b9:36:44:ee:35:ad:d0:
1f:0c:2f:de:7c:6c:fb:53:b6:8a:a7:93:5e:6a:6c:87:94:f8:
b4:01:a5:ed:41:9d:4b:fa:ca:1c:d7:31:e2:3b:6b:12:be:03:
6a:2c:e0:42:2b:5f:94:d1:52:51:ca:b6:58:4d:77:f4:eb:6b:
36:c0:7b:d2:37:96:51:19:97:5f:85:0c:82:db:89:44:5f:4a:
b9:2f:f5:60:b9:cb:bd:9b:00:5b:05:fd:20:b6:05:15:8c:ed:
71:79:76:dc:37:7e:29:76:fa:57:11:e8:1d:29:a7:6e:d0:2c:
7f:4e:13:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:12 2024 by rpki-client on console-ams.rpki-client.org