Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6db34b-8afa-49c5-b73f-9204c197aa65/1/LUiU8Ie8PN6y4PcHzj3VWCHDDig.roa
File: LUiU8Ie8PN6y4PcHzj3VWCHDDig.roa (raw, json)
Hash identifier: RmiSMW9868/9wy7wDOB9WUz/ZgXtbA6PX5rXKxXXGvc=
Subject key identifier: 2D:48:94:F0:87:BC:3C:DE:B2:E0:F7:07:CE:3D:D5:58:21:C3:0E:28
Certificate issuer: /CN=47edf8f1bf0c4fbc469e71c99d82489ea1f3da4a
Certificate serial: 01856DA655CEB96E925267003808FC2674F4
Authority key identifier: 47:ED:F8:F1:BF:0C:4F:BC:46:9E:71:C9:9D:82:48:9E:A1:F3:DA:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R-348b8MT7xGnnHJnYJInqHz2ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6db34b-8afa-49c5-b73f-9204c197aa65/1/LUiU8Ie8PN6y4PcHzj3VWCHDDig.roa
Signing time: Sun 01 Jan 2023 14:04:55 +0000
ROA not before: Sun 01 Jan 2023 14:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41627
IP address blocks: 89.251.40.0/21 maxlen: 21
185.167.92.0/22 maxlen: 22
31.171.224.0/20 maxlen: 20
46.251.12.0/22 maxlen: 22
91.147.236.0/22 maxlen: 22
89.251.32.0/21 maxlen: 21
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:a6:55:ce:b9:6e:92:52:67:00:38:08:fc:26:74:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47edf8f1bf0c4fbc469e71c99d82489ea1f3da4a
Validity
Not Before: Jan 1 14:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2d4894f087bc3cdeb2e0f707ce3dd55821c30e28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f1:d6:b8:d9:f2:d3:4d:a5:cc:b9:f0:d7:1d:
23:7b:dc:61:04:30:5b:d7:84:8e:b9:dc:05:9b:3d:
85:4f:f6:4b:05:65:16:b1:60:53:ef:71:01:f3:0c:
18:d6:64:9a:9a:c4:1b:b2:be:d0:b5:67:87:4b:eb:
9e:1f:04:b3:57:e4:eb:76:8c:49:15:b6:78:f6:28:
dc:19:04:07:48:03:81:25:dd:09:2b:df:61:ae:2a:
c5:87:da:7c:4b:59:76:cd:07:6e:73:bc:52:c3:02:
fd:0a:0a:f2:30:59:76:a1:ad:5d:32:dd:a8:b0:f7:
b2:8c:13:5b:56:59:72:26:3f:92:80:c4:f1:5f:33:
85:3f:1b:90:be:fc:bf:44:50:2e:28:6c:8d:f7:94:
ff:8b:65:3f:e3:d9:6e:75:7d:2c:1e:7b:85:8c:79:
ed:ab:e3:ef:67:b6:63:5a:fb:78:04:ff:96:72:84:
67:10:d8:f8:9d:03:4a:16:28:df:7c:ce:4e:88:65:
a5:38:5e:2d:a7:fb:95:9d:30:c9:f8:9d:87:93:c5:
e3:bc:f4:ad:1e:02:fd:75:12:f4:7a:03:b8:da:10:
6b:ce:69:43:31:20:12:1c:e2:15:3a:03:75:b3:39:
98:e4:00:d4:0d:35:d2:01:fc:ad:61:b3:32:87:fc:
06:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:48:94:F0:87:BC:3C:DE:B2:E0:F7:07:CE:3D:D5:58:21:C3:0E:28
X509v3 Authority Key Identifier:
keyid:47:ED:F8:F1:BF:0C:4F:BC:46:9E:71:C9:9D:82:48:9E:A1:F3:DA:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-348b8MT7xGnnHJnYJInqHz2ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6db34b-8afa-49c5-b73f-9204c197aa65/1/LUiU8Ie8PN6y4PcHzj3VWCHDDig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6db34b-8afa-49c5-b73f-9204c197aa65/1/R-348b8MT7xGnnHJnYJInqHz2ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.171.224.0/20
46.251.12.0/22
89.251.32.0/20
91.147.236.0/22
185.167.92.0/22
Signature Algorithm: sha256WithRSAEncryption
03:72:8c:7e:1a:9f:21:61:ec:73:6c:59:0d:c8:f7:69:a0:46:
e6:16:b0:69:13:5f:15:6a:6d:30:91:86:78:25:80:67:ff:e9:
32:c7:be:a6:46:a9:13:09:91:6e:6d:35:7e:92:a5:b5:e3:fd:
38:af:ea:a4:2b:f6:0c:10:bb:a5:57:01:3c:59:68:53:81:ce:
e6:ad:71:6c:1e:b2:3f:67:89:0f:2d:98:8a:bb:96:4b:b1:bc:
33:1b:26:22:b4:c5:73:a2:07:cc:d4:3e:6f:ce:5f:47:5e:23:
e7:b3:ed:a3:d5:a6:06:c5:64:48:0d:fe:4d:45:6d:82:28:be:
5d:69:06:38:39:74:9a:b0:17:b0:98:7f:21:d7:8a:4d:f7:9c:
c0:ce:cb:d5:e8:8a:2b:2c:af:df:39:85:7c:4d:f1:b1:5d:f4:
12:1c:5d:1d:d1:ef:86:5e:7d:8e:79:16:ad:67:9f:d6:a4:a6:
a9:b0:a6:0c:ee:7d:36:1e:3b:0b:34:a9:25:95:1d:30:12:eb:
bd:ca:f0:73:7e:bc:b4:a2:c8:cf:4b:35:67:a1:83:1a:07:d1:
1a:18:dc:1a:74:e4:77:d7:f1:a6:e7:05:46:16:7f:f3:e2:f1:
c6:c6:1c:2c:37:fe:fa:25:bf:be:ce:16:b2:a9:0f:31:20:50:
4a:a4:cd:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:16 2024 by rpki-client on console-fra.rpki-client.org