Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/Lw0uYp7T0Y-GDOqUz7p-MeeHMVY.roa
File: Lw0uYp7T0Y-GDOqUz7p-MeeHMVY.roa (raw, json)
Hash identifier: DgBzChGk/1xzkCwpg2JQbcEj20aol5+Gc0F7CKwEsbI=
Subject key identifier: 2F:0D:2E:62:9E:D3:D1:8F:86:0C:EA:94:CF:BA:7E:31:E7:87:31:56
Certificate issuer: /CN=6ccf360df9a1f61e23327da0d2c09112e0a9bd69
Certificate serial: 018CC80193F1CA45E4FE3593464DCB9A77C6
Authority key identifier: 6C:CF:36:0D:F9:A1:F6:1E:23:32:7D:A0:D2:C0:91:12:E0:A9:BD:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM82Dfmh9h4jMn2g0sCREuCpvWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/Lw0uYp7T0Y-GDOqUz7p-MeeHMVY.roa
Signing time: Tue 02 Jan 2024 02:29:55 +0000
ROA not before: Tue 02 Jan 2024 02:29:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35574
IP address blocks: 93.101.0.0/20 maxlen: 24
185.40.12.0/22 maxlen: 24
2a04:a9c0::/29 maxlen: 48
Validation: Failed, certificate revoked on Thu 04 Apr 2024 09:09:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:93:f1:ca:45:e4:fe:35:93:46:4d:cb:9a:77:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccf360df9a1f61e23327da0d2c09112e0a9bd69
Validity
Not Before: Jan 2 02:29:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2f0d2e629ed3d18f860cea94cfba7e31e7873156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:bf:30:68:33:1d:cf:2d:d7:f8:40:45:54:d6:
c6:ab:af:b4:be:77:43:5c:f5:e0:e2:e9:8c:96:7e:
a1:46:a7:c8:9c:bb:c5:bc:28:5b:28:0a:e9:a9:22:
4a:c2:35:77:f6:c8:4a:97:ba:d9:b1:6a:1c:ef:31:
ce:d6:e1:c1:3d:c9:9c:f8:9f:20:f5:a9:0b:06:5f:
ef:c4:fa:a4:83:b5:f6:e7:bb:9f:29:35:52:30:4c:
f1:c5:95:92:66:38:e2:6b:58:01:68:2d:bb:39:44:
a0:f6:76:da:42:79:a0:d4:0b:ae:72:99:d6:e7:4b:
59:47:e3:20:7c:66:37:93:e8:e7:6e:c9:95:af:a7:
e8:01:cc:54:b2:1b:23:ce:e8:70:6c:b3:e1:60:90:
fb:16:60:2a:69:cc:d8:c4:e7:a4:8e:d3:6d:b3:96:
f1:56:75:10:dd:f5:7a:8e:3e:be:59:bb:f9:91:53:
44:7e:51:2d:aa:1d:7b:e8:ba:b8:a6:45:82:f1:18:
24:7d:28:88:c6:3a:07:fb:33:63:3d:4f:85:fe:97:
6f:b8:68:94:0a:69:30:eb:e8:f3:34:89:e3:87:42:
b4:38:e4:b4:f8:e5:17:d0:3b:83:de:a9:cb:f9:f0:
99:dc:20:6a:4a:57:87:af:56:a8:b5:d4:e0:91:56:
9c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:0D:2E:62:9E:D3:D1:8F:86:0C:EA:94:CF:BA:7E:31:E7:87:31:56
X509v3 Authority Key Identifier:
keyid:6C:CF:36:0D:F9:A1:F6:1E:23:32:7D:A0:D2:C0:91:12:E0:A9:BD:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM82Dfmh9h4jMn2g0sCREuCpvWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/Lw0uYp7T0Y-GDOqUz7p-MeeHMVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.101.0.0/20
185.40.12.0/22
IPv6:
2a04:a9c0::/29
Signature Algorithm: sha256WithRSAEncryption
82:50:fe:d8:1f:ef:83:b6:83:02:9b:db:e7:83:90:ab:fa:f8:
c8:77:aa:c6:e2:ae:b5:f7:c2:90:4f:cd:1e:6c:1f:8c:42:6a:
dd:a2:70:22:d8:e6:da:a7:2d:ca:de:f5:c8:f0:0c:50:52:f2:
21:32:73:6a:35:c0:b9:17:00:d9:f4:3a:44:38:e2:e2:54:a4:
7c:f1:34:2b:cd:19:67:fd:7e:67:ae:a6:22:1a:1c:c5:6e:c5:
45:69:4e:09:f0:de:5f:9b:bf:98:d6:f5:15:a0:09:76:91:0a:
cc:af:88:3f:a7:74:0a:08:00:ed:a7:a4:25:bf:84:1d:4f:ec:
7f:ea:8a:ad:57:88:5d:61:b4:5e:2f:a9:24:58:90:1f:7e:5d:
41:62:0a:4a:39:42:fd:f9:c6:7f:0a:d2:cb:c3:0f:1f:c4:8d:
47:e4:6b:13:bd:95:81:f5:b7:2e:e1:80:dc:45:6a:e1:86:69:
9d:9a:48:93:b3:0b:f5:dd:76:d6:24:f8:88:06:2f:bf:6d:13:
12:36:c9:01:da:79:da:77:74:15:22:b9:51:a5:ac:b8:78:97:
7b:74:c3:d7:b6:ad:9d:4f:b2:ae:66:12:8c:61:aa:0c:9b:33:
a6:7b:81:d4:4e:b7:05:75:54:a8:bc:64:6f:cf:2d:26:64:1b:
9d:fa:07:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:05 2024 by rpki-client on console-ams.rpki-client.org