Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Lba1M25ABJUbcFsSBLHvOk0-NoA.roa
File: Lba1M25ABJUbcFsSBLHvOk0-NoA.roa (raw, json)
Hash identifier: Uw2Kv7tOchZvRHSEZ+KailYDxVHIZTMsocn2TyrCCmI=
Subject key identifier: 2D:B6:B5:33:6E:40:04:95:1B:70:5B:12:04:B1:EF:3A:4D:3E:36:80
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0190DF3C73A8D8BAA7FCE32F5070E9354F1C
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Lba1M25ABJUbcFsSBLHvOk0-NoA.roa
Signing time: Tue 23 Jul 2024 10:56:39 +0000
ROA not before: Tue 23 Jul 2024 10:56:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31490
IP address blocks: 85.217.188.0/24 maxlen: 24
93.123.23.0/24 maxlen: 24
185.219.124.0/24 maxlen: 24
2a00:1728:20::/48 maxlen: 48
2a00:1728:20:100::/56 maxlen: 56
2a00:1728:33::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 17 Sep 2024 13:35:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:df:3c:73:a8:d8:ba:a7:fc:e3:2f:50:70:e9:35:4f:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 23 10:56:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2db6b5336e4004951b705b1204b1ef3a4d3e3680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:26:6f:2d:27:33:9a:c8:ee:67:b7:dd:52:02:
26:e5:fb:76:a2:10:e2:d9:d5:eb:9a:6c:87:4a:2f:
1b:2a:fd:6b:c9:b8:d1:bb:f9:96:40:2c:a7:4b:3a:
d2:ac:c0:cf:e8:b5:73:5f:09:c6:20:95:50:a4:93:
70:a6:45:35:b2:68:91:bd:3c:fc:85:f3:f3:bd:69:
29:ea:86:36:a2:23:bf:c3:6a:a3:17:be:27:fa:0e:
ae:8c:03:21:00:96:d9:d8:aa:91:17:d2:e6:ba:80:
78:3c:fd:f4:e4:e9:8c:37:ad:06:a9:dc:e8:51:0d:
dc:f2:49:41:cf:36:8b:e1:ce:26:c7:3d:28:77:6d:
85:bd:e5:9f:aa:dd:12:33:a3:2c:03:cc:3a:af:16:
97:79:61:f5:79:0b:32:0c:0f:24:5c:e8:bf:8e:49:
58:e5:c8:c8:96:fa:f5:68:47:f3:0f:39:ed:ff:bd:
52:37:19:99:16:85:73:87:c2:64:1c:6a:22:1d:c7:
67:7a:40:db:ef:cf:4c:2a:70:28:e6:73:9a:0a:a4:
f6:c5:21:36:09:d0:b4:79:78:d4:6d:89:1f:49:cb:
3e:3d:90:66:c1:e9:78:4b:66:75:2d:89:bf:90:ed:
6b:16:e4:d9:bb:a8:95:32:a1:93:39:ee:a5:0b:0c:
43:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:B6:B5:33:6E:40:04:95:1B:70:5B:12:04:B1:EF:3A:4D:3E:36:80
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Lba1M25ABJUbcFsSBLHvOk0-NoA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.217.188.0/24
93.123.23.0/24
185.219.124.0/24
IPv6:
2a00:1728:20::/48
2a00:1728:33::/48
Signature Algorithm: sha256WithRSAEncryption
00:1f:a1:41:08:d7:d4:1a:bc:78:4b:7e:c8:a6:82:56:c5:e0:
02:82:01:57:f9:57:3d:d1:2f:3b:e2:ef:04:e8:b1:68:12:ed:
13:4a:b1:6d:33:bf:38:db:77:a4:ab:42:a5:29:6f:62:42:ea:
fb:74:52:81:2a:89:63:1e:47:f3:70:89:3a:e8:36:8c:e0:0c:
ad:fc:2e:a9:f2:3d:49:0b:5b:79:f8:b3:f3:87:d4:51:48:11:
23:b1:35:c4:26:5e:6b:56:78:44:d8:f3:16:89:61:d7:5b:64:
ee:b5:6c:02:2d:62:17:cf:f6:51:f1:df:7b:b4:fc:72:86:20:
31:e0:bc:75:38:fb:e5:a8:0e:6a:26:b9:5f:1e:45:ac:59:5e:
03:b8:20:7e:10:e1:60:da:03:00:52:a6:12:f3:a3:6c:fe:13:
3d:3e:fa:6d:9b:f5:53:ff:13:8f:1b:93:fe:cb:bc:3e:38:7c:
db:27:1e:c2:ce:5f:01:b1:52:bf:60:40:68:8f:bd:c3:5f:bd:
cb:d2:12:f8:a7:e1:eb:eb:6a:3d:11:3c:7b:60:e1:18:1c:17:
10:28:d4:f0:63:6b:60:42:5b:54:ad:26:3f:3c:b2:7c:31:a0:
07:da:ac:b6:ab:f6:a0:10:b7:d6:a2:34:bc:9c:f2:ef:8a:75:
03:c1:8d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 17 19:07:42 2024 by rpki-client on console-fra.rpki-client.org