Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/LbgqT7i5dFw29OmRU6c6Z3hZ7wo.roa
File: LbgqT7i5dFw29OmRU6c6Z3hZ7wo.roa (raw, json)
Hash identifier: 8fQ8xnXLxD7GPCvT/vXcgbvWQvo5RGCknVuYJd163Os=
Subject key identifier: 2D:B8:2A:4F:B8:B9:74:5C:36:F4:E9:91:53:A7:3A:67:78:59:EF:0A
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01856F67009D10878DAE1545301E69411529
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/LbgqT7i5dFw29OmRU6c6Z3hZ7wo.roa
Signing time: Sun 01 Jan 2023 22:14:59 +0000
ROA not before: Sun 01 Jan 2023 22:14:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 138687
IP address blocks: 194.58.155.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
194.58.154.0/24 maxlen: 24
194.87.180.0/24 maxlen: 24
195.58.61.0/24 maxlen: 24
194.58.61.0/24 maxlen: 24
193.124.94.0/24 maxlen: 24
194.87.191.0/24 maxlen: 24
212.193.5.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:67:00:9d:10:87:8d:ae:15:45:30:1e:69:41:15:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 1 22:14:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2db82a4fb8b9745c36f4e99153a73a677859ef0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8c:48:eb:8b:bd:70:10:c8:2c:da:82:76:03:
28:47:fc:aa:05:25:05:09:7b:f3:a0:c4:6b:c3:07:
bc:e3:72:67:65:b5:bd:ad:ee:d2:1a:28:6b:cf:e6:
9f:43:c5:f3:e5:1c:aa:c4:69:0b:06:3d:81:e4:c8:
f0:01:ba:a8:17:d9:e0:64:f0:b7:ea:ae:36:46:a4:
82:f1:fe:90:58:3f:a6:a5:9f:f3:e5:e5:3c:fd:59:
a4:db:01:58:92:5b:1e:76:04:d0:9c:85:af:66:f3:
f7:1c:e6:77:63:9d:1e:28:50:5b:84:77:ad:f5:85:
0e:a2:ff:c1:be:33:75:b5:0a:cc:fd:26:ca:08:e0:
9d:13:f5:df:dc:30:48:e9:82:b0:a0:2b:17:5f:e6:
db:89:0c:d0:9e:28:3f:c7:99:57:ca:56:1b:41:57:
28:35:f4:d7:87:9d:39:97:25:6e:81:ac:4a:93:6c:
9e:b0:f1:02:ec:ff:3c:7a:ad:40:35:70:54:96:77:
cd:75:ed:96:67:27:45:ac:fd:ad:92:47:0b:60:6c:
1e:62:f4:6c:07:a8:9e:9c:23:a2:0e:23:de:41:e7:
fe:74:e3:f2:25:5a:c1:06:0b:61:ff:48:f4:54:23:
00:38:73:f2:c7:47:e9:5f:62:c6:61:c1:b0:f1:bb:
77:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:B8:2A:4F:B8:B9:74:5C:36:F4:E9:91:53:A7:3A:67:78:59:EF:0A
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/LbgqT7i5dFw29OmRU6c6Z3hZ7wo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.181.0/24
193.124.94.0/24
194.58.61.0/24
194.58.154.0/23
194.87.180.0/24
194.87.191.0/24
195.58.61.0/24
212.193.5.0/24
Signature Algorithm: sha256WithRSAEncryption
05:54:e8:d3:2b:82:86:d0:23:24:54:4e:c3:d1:f0:57:48:f3:
e4:63:17:86:d3:9f:49:3e:b7:b7:02:dd:23:8d:88:f4:0f:68:
94:48:c3:cb:8f:70:f0:68:59:bb:c5:5d:35:cd:4f:16:02:7b:
1c:bc:8e:d6:d3:4b:a0:b8:9e:2b:5f:b1:76:93:b1:3c:8b:03:
2f:dd:c9:75:67:3c:8c:e3:8d:da:4a:9a:b7:be:9d:b1:e2:b6:
31:46:3c:56:34:ae:c7:bf:ac:52:90:16:a3:4f:76:0a:37:23:
03:ae:ed:b9:1b:0b:e1:0e:e6:de:fc:84:bd:7c:42:de:bf:a9:
4a:db:50:2a:9b:a6:c1:f5:c1:8b:7d:51:5a:0c:0c:df:25:55:
4d:ee:b8:fb:e4:2d:0d:f3:7c:f3:9a:a2:e0:f9:0c:46:a1:63:
14:a1:87:da:b7:6d:e6:4f:9b:b7:b5:06:42:a4:0b:f8:36:cc:
91:d3:a1:a0:24:3d:d8:d4:eb:cc:b0:66:ee:46:da:cd:f7:f7:
06:73:c4:6e:6f:6f:04:35:70:31:8f:4f:1a:fb:69:2b:93:90:
36:00:ac:4e:0f:cb:b4:39:07:cb:93:7f:2f:d4:2a:83:4c:38:
c4:d6:be:6a:16:f3:71:2e:e8:c0:1e:8b:70:4a:2c:16:e8:96:
27:99:2f:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:55 2023 by rpki-client on console-ams.rpki-client.org