Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/lcbCc-COenpTaM_q2Q5eqtr1KRY.roa
File: lcbCc-COenpTaM_q2Q5eqtr1KRY.roa (raw, json)
Hash identifier: C6HGeg3UeufhSFMrXmTAdPvVQJj+S1Gx4fAOM8OfbwE=
Subject key identifier: 95:C6:C2:73:E0:8E:7A:7A:53:68:CF:EA:D9:0E:5E:AA:DA:F5:29:16
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018ACB5BAD3C662196D765945B61CC5B66B4
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/lcbCc-COenpTaM_q2Q5eqtr1KRY.roa
Signing time: Mon 25 Sep 2023 08:01:37 +0000
ROA not before: Mon 25 Sep 2023 08:01:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50225
IP address blocks: 185.222.163.0/24 maxlen: 24
93.123.85.0/24 maxlen: 24
80.76.50.0/24 maxlen: 24
176.125.252.0/24 maxlen: 24
45.84.90.0/24 maxlen: 24
194.48.251.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:cb:5b:ad:3c:66:21:96:d7:65:94:5b:61:cc:5b:66:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 25 08:01:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=95c6c273e08e7a7a5368cfead90e5eaadaf52916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ac:a6:4c:2e:4e:3a:6d:01:3f:09:63:36:9a:
96:2b:1b:74:f1:3a:25:38:5b:88:18:a5:6f:ed:37:
20:68:11:2a:fd:c2:31:8b:b6:e4:fa:31:8e:28:89:
8c:3c:3a:6f:4d:87:b1:d3:8e:cb:60:48:92:23:45:
9d:60:9b:f8:45:63:68:19:0a:f8:76:c5:b1:f9:32:
bb:b3:f5:14:c4:b1:a5:b7:b6:e5:f7:5a:37:28:e4:
dc:91:3e:67:c2:a9:73:7c:5e:46:44:c1:a4:79:46:
71:c1:a9:0a:d2:48:6b:2e:f0:3f:05:9a:55:ab:c2:
b5:67:26:35:a1:ce:1b:10:92:cf:4f:6b:b7:ce:a4:
c2:d8:85:fd:b1:6f:91:2b:ea:22:a8:9f:cf:ae:25:
9f:82:43:11:de:40:18:04:a2:26:51:51:94:20:c4:
bd:81:d8:5e:1e:69:ce:28:67:32:76:ac:b9:2e:6d:
ef:56:57:21:f3:f2:52:bd:a6:0a:6d:9a:ea:79:7b:
a1:46:ce:62:7e:75:94:0b:52:9a:f3:76:cd:af:8a:
61:78:8c:df:ab:45:00:52:7a:ad:bd:36:8e:4d:ac:
c1:2c:1c:08:ff:f6:dd:68:8a:71:48:d9:4d:b8:c4:
aa:93:fc:26:7c:00:c0:1b:5d:ce:2f:54:22:2a:44:
fa:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:C6:C2:73:E0:8E:7A:7A:53:68:CF:EA:D9:0E:5E:AA:DA:F5:29:16
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/lcbCc-COenpTaM_q2Q5eqtr1KRY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.90.0/24
80.76.50.0/24
93.123.85.0/24
176.125.252.0/24
185.222.163.0/24
194.48.251.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:fa:82:9c:b7:02:06:0e:2d:2f:27:99:93:49:a6:44:fd:b8:
ff:8b:6a:f5:81:78:3b:c5:f5:01:81:55:0e:bc:e1:b7:5e:89:
90:ac:bf:a4:8a:8e:b3:32:1f:bd:33:b5:cc:79:44:62:57:61:
97:a1:b3:2e:b6:26:fe:71:92:7d:2b:6c:d5:f4:43:1a:3d:aa:
c8:83:00:2f:65:cb:82:43:58:f0:fe:cd:4b:2c:b7:42:ba:32:
f0:f3:f0:d0:96:fd:88:a4:98:f9:f9:49:c7:ee:03:b3:2d:82:
09:12:da:10:ba:5c:70:65:c8:cc:ba:cb:aa:4c:f0:fe:99:e4:
94:a1:4b:5c:62:8c:99:c0:d2:f0:3a:aa:1b:fc:ac:f5:29:0d:
bb:33:a8:eb:55:34:06:d1:d3:85:3d:93:c2:85:e6:6b:01:0c:
7c:31:43:34:7f:52:1b:a5:e7:ad:2c:21:4f:f8:30:b0:4e:f0:
c6:7a:d5:eb:94:a5:7b:cc:c1:13:06:94:02:34:e7:e0:86:83:
eb:4a:3f:72:db:16:40:96:6a:64:29:c1:39:5e:23:43:e5:d8:
e2:07:bd:ea:49:16:f4:fc:e6:b4:8d:07:4b:e1:4c:c2:a2:b1:
9a:01:9b:6a:b2:51:e9:38:dd:14:59:ee:17:35:62:69:1d:bc:
72:cd:1d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 27 08:30:47 2023 by rpki-client on console-ams.rpki-client.org