Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/LNAVehrkw71Ay0moPSY-oxPnqtI.roa
File: LNAVehrkw71Ay0moPSY-oxPnqtI.roa (raw, json)
Hash identifier: cZe/3UF6qBCAK7wbpNxdseC+0EiGdR10xYZB+rPRx0s=
Subject key identifier: 2C:D0:15:7A:1A:E4:C3:BD:40:CB:49:A8:3D:26:3E:A3:13:E7:AA:D2
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018CCA2A971A365F617B64BBA9F7BFA2E42B
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/LNAVehrkw71Ay0moPSY-oxPnqtI.roa
Signing time: Tue 02 Jan 2024 12:33:58 +0000
ROA not before: Tue 02 Jan 2024 12:33:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 398465
IP address blocks: 212.193.25.0/24 maxlen: 24
185.72.10.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 Jan 2024 16:16:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:97:1a:36:5f:61:7b:64:bb:a9:f7:bf:a2:e4:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 2 12:33:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2cd0157a1ae4c3bd40cb49a83d263ea313e7aad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:33:de:30:ae:31:e8:2f:17:d3:82:d2:b1:52:
f9:57:4d:3b:61:25:39:09:19:70:f0:44:4e:11:ee:
29:0b:0b:f2:df:3a:3f:a1:52:6e:20:c2:67:02:8d:
f6:f9:da:70:3f:ad:00:31:38:79:eb:e1:1c:32:67:
1e:a9:5c:16:cf:c7:5a:58:e8:ca:8e:71:0d:fe:a3:
7d:38:77:60:41:f4:b9:8c:ec:ff:22:20:24:91:71:
f4:08:4c:6d:9a:06:ca:f3:50:ec:ad:11:38:ec:26:
32:ac:cc:2f:62:cf:f9:9b:0c:95:4d:24:c3:00:4a:
eb:78:f8:b0:6c:10:70:30:6c:5b:e1:66:3e:d3:1c:
4f:63:2f:18:61:f0:f5:a0:2e:a4:da:c7:4a:8b:74:
d6:d0:94:e5:07:7c:05:08:86:b5:6f:05:59:75:cf:
32:7e:41:65:09:c4:9c:49:5c:cc:8c:7c:a4:7e:d0:
da:99:dd:49:4d:f7:b9:1b:47:8a:3a:e8:5d:08:3f:
a9:1c:d6:1e:19:20:49:a6:7c:40:22:39:95:33:46:
ad:e4:87:91:16:4b:f3:3d:6c:39:dc:ad:ab:cd:47:
3f:b2:75:1a:a7:69:97:28:01:12:99:8f:ba:67:c1:
6d:c7:65:cd:58:4c:e9:9b:5a:80:85:e7:8c:c4:46:
1e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:D0:15:7A:1A:E4:C3:BD:40:CB:49:A8:3D:26:3E:A3:13:E7:AA:D2
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/LNAVehrkw71Ay0moPSY-oxPnqtI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.72.10.0/24
212.193.25.0/24
Signature Algorithm: sha256WithRSAEncryption
08:4a:1f:6c:ed:a3:ab:92:0d:9f:e3:9a:7b:62:bf:4b:cd:9a:
ce:9a:61:d2:0f:3b:ff:50:ec:3c:0a:6c:d2:e3:da:5a:86:15:
8e:4b:1c:0b:af:c9:46:e1:d0:ed:6f:e0:2c:9f:9f:78:e4:73:
f5:db:7c:36:5b:fb:23:7e:90:03:57:eb:50:45:8e:94:77:40:
eb:5c:53:0b:21:a3:45:f3:47:f3:d7:14:fd:9e:94:57:40:26:
a1:ba:cc:bf:03:2b:96:f3:b5:d6:85:d3:0c:91:52:a4:87:6e:
67:f5:af:c2:78:85:eb:92:9f:5a:ec:e7:41:b1:51:66:c4:b7:
7f:76:ef:8a:ae:bb:ad:ad:28:4e:8d:48:06:81:35:4e:57:ef:
45:6b:ac:e6:a7:be:f0:9b:10:a7:91:73:8b:b0:6e:19:ad:37:
26:1d:d9:2f:e6:3a:0f:f2:46:8b:71:06:2d:e3:49:a4:f4:37:
95:0f:06:a3:52:af:29:dc:f2:a1:be:fd:22:66:38:e3:c3:84:
bc:43:2e:3c:60:fd:73:d2:b8:85:68:c0:79:d9:d6:ba:af:2a:
25:5b:29:1f:c1:d2:69:6e:0e:e8:b5:45:d1:b9:d9:57:24:2a:
7d:25:25:03:63:c3:3c:99:b9:36:b9:90:f8:d6:cb:74:59:42:
9a:74:ad:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 11 20:57:24 2024 by rpki-client on console-ams.rpki-client.org