Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/lKg3QbFw9IBQnTz_JpAv3XXitP0.roa
File: lKg3QbFw9IBQnTz_JpAv3XXitP0.roa (raw, json)
Hash identifier: 4VF2Z39aEg9vsUu3pND/VX8p4A8B7ETR6pEY7repjjs=
Subject key identifier: 94:A8:37:41:B1:70:F4:80:50:9D:3C:FF:26:90:2F:DD:75:E2:B4:FD
Certificate issuer: /CN=7df904ab14066c7a9fe61a521d5492a0e52965ca
Certificate serial: 018C5AF74F1C25A4A3CF617AA955931F69A7
Authority key identifier: 7D:F9:04:AB:14:06:6C:7A:9F:E6:1A:52:1D:54:92:A0:E5:29:65:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/lKg3QbFw9IBQnTz_JpAv3XXitP0.roa
Signing time: Mon 11 Dec 2023 22:20:06 +0000
ROA not before: Mon 11 Dec 2023 22:20:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201642
IP address blocks: 121.127.36.0/24 maxlen: 24
185.249.103.0/24 maxlen: 24
185.249.100.0/23 maxlen: 23
185.249.100.0/24 maxlen: 24
185.249.101.0/24 maxlen: 24
185.249.102.0/24 maxlen: 24
185.249.102.0/23 maxlen: 23
2a14:3200::/32 maxlen: 32
2a14:3200:2a14::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:5a:f7:4f:1c:25:a4:a3:cf:61:7a:a9:55:93:1f:69:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df904ab14066c7a9fe61a521d5492a0e52965ca
Validity
Not Before: Dec 11 22:20:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=94a83741b170f480509d3cff26902fdd75e2b4fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b5:c4:d2:8f:7d:43:4a:94:84:cc:6d:ad:86:
8e:b6:7f:43:8d:c9:5b:b8:f3:74:00:b2:67:25:9e:
5b:e7:18:e3:a7:c2:79:27:77:e8:bc:f1:ff:0e:b5:
4a:20:77:86:4e:ce:02:70:16:35:56:ca:51:10:50:
82:79:fc:00:96:34:ae:bd:a4:90:79:59:c0:32:56:
d0:67:57:b9:42:ee:99:43:77:83:c5:72:64:c6:40:
2e:66:86:cc:74:72:b9:b6:0c:3c:f5:ae:93:c8:eb:
07:d1:93:82:6d:ab:a3:bc:eb:a4:35:c7:bb:5d:f7:
9a:47:17:43:cc:66:90:90:15:64:78:64:ec:d3:9f:
f5:e2:af:12:33:9b:96:3d:f5:a8:54:76:7c:7a:da:
ee:a1:23:3b:3f:7f:d2:4d:af:89:26:5b:f2:e6:ab:
8d:fe:de:d7:67:d3:bb:97:c7:13:c1:9b:aa:1b:03:
b5:ff:fb:4f:ec:60:57:97:8c:c3:16:17:bf:b0:ac:
2e:9a:5f:63:c2:08:92:13:b0:5a:74:0e:10:35:0c:
7c:e4:d7:b8:53:7a:08:9f:b8:40:33:51:a2:ba:bd:
40:78:fa:c5:27:cb:39:37:d0:78:f9:47:f8:04:15:
ab:4e:ab:ea:43:68:ff:83:da:78:41:b9:ef:a9:00:
8c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:A8:37:41:B1:70:F4:80:50:9D:3C:FF:26:90:2F:DD:75:E2:B4:FD
X509v3 Authority Key Identifier:
keyid:7D:F9:04:AB:14:06:6C:7A:9F:E6:1A:52:1D:54:92:A0:E5:29:65:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/lKg3QbFw9IBQnTz_JpAv3XXitP0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
121.127.36.0/24
185.249.100.0/22
IPv6:
2a14:3200::/32
Signature Algorithm: sha256WithRSAEncryption
51:54:e4:98:a7:84:19:89:cb:ea:24:d0:eb:e1:8e:c4:66:c1:
21:52:e3:c1:95:ad:a8:63:9b:e1:cc:61:2a:64:cd:52:ca:69:
5a:74:74:0b:77:ff:31:53:97:08:0e:c4:72:59:7e:b6:4c:b1:
f2:af:33:18:0a:19:53:d7:17:43:b9:05:fa:31:e0:08:ec:0a:
4a:cb:96:db:b2:16:21:24:d4:7b:3c:e5:dd:67:3b:c5:ef:4f:
a9:64:2d:20:3e:22:4c:b7:e7:82:d7:1a:79:27:c9:61:bf:75:
0e:2f:e1:c1:47:7b:2c:07:a5:d8:b3:e0:f8:b6:53:77:53:19:
18:28:46:3b:80:fe:43:7b:71:28:f1:56:91:26:cb:a2:eb:76:
38:b2:4b:1c:37:b1:7f:3b:41:3c:b9:98:71:3f:e5:2b:4d:e6:
1d:fc:5e:e5:24:06:e8:1e:a3:ce:42:a4:f7:42:0d:bc:6f:28:
c9:f7:36:0c:c5:cd:d5:9c:39:a6:09:c5:fb:11:f4:da:f9:67:
5a:f9:3d:92:53:ef:32:f6:6c:bf:02:9a:88:28:92:a8:77:78:
6c:63:f6:19:3c:99:d7:48:1e:3b:80:b2:6a:a7:64:f8:8e:72:
8e:e3:ab:2e:eb:a4:61:51:82:c9:c9:2f:6c:2e:19:df:e2:ff:
b0:9c:db:37
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYxa908cJaSjz2F6qVWTH2mnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkZjkwNGFiMTQwNjZjN2E5ZmU2MWE1MjFkNTQ5MmEwZTUy
OTY1Y2EwHhcNMjMxMjExMjIyMDA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NGE4Mzc0MWIxNzBmNDgwNTA5ZDNjZmYyNjkwMmZkZDc1ZTJiNGZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobXE0o99Q0qUhMxtrYaOtn9Djclb
uPN0ALJnJZ5b5xjjp8J5J3fovPH/DrVKIHeGTs4CcBY1VspREFCCefwAljSuvaSQ
eVnAMlbQZ1e5Qu6ZQ3eDxXJkxkAuZobMdHK5tgw89a6TyOsH0ZOCbaujvOukNce7
XfeaRxdDzGaQkBVkeGTs05/14q8SM5uWPfWoVHZ8etruoSM7P3/STa+JJlvy5quN
/t7XZ9O7l8cTwZuqGwO1//tP7GBXl4zDFhe/sKwuml9jwgiSE7BadA4QNQx85Ne4
U3oIn7hAM1Giur1AePrFJ8s5N9B4+Uf4BBWrTqvqQ2j/g9p4QbnvqQCM0wIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFJSoN0GxcPSAUJ08/yaQL9114rT9MB8GA1UdIwQY
MBaAFH35BKsUBmx6n+YaUh1UkqDlKWXKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmZrRXF4UUdiSHFmNWhwU0hWU1NvT1VwWmNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS81M2ZiMzQtMjVkYi00Njg0LTk4NGYt
M2I0NDVmMjlmNWI3LzEvbEtnM1FiRnc5SUJRblR6X0pwQXYzWFhpdFAwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS81M2ZiMzQtMjVkYi00Njg0LTk4NGYtM2I0NDVmMjlmNWI3
LzEvZmZrRXF4UUdiSHFmNWhwU0hWU1NvT1VwWmNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAeX8kAwQC
uflkMA0EAgACMAcDBQAqFDIAMA0GCSqGSIb3DQEBCwUAA4IBAQBRVOSYp4QZicvq
JNDr4Y7EZsEhUuPBla2oY5vhzGEqZM1SymladHQLd/8xU5cIDsRyWX62TLHyrzMY
ChlT1xdDuQX6MeAI7ApKy5bbshYhJNR7POXdZzvF70+pZC0gPiJMt+eC1xp5J8lh
v3UOL+HBR3ssB6XYs+D4tlN3UxkYKEY7gP5De3Eo8VaRJsui63Y4skscN7F/O0E8
uZhxP+UrTeYd/F7lJAboHqPOQqT3Qg28byjJ9zYMxc3VnDmmCcX7EfTa+Wda+T2S
U+8y9my/ApqIKJKod3hsY/YZPJnXSB47gLJqp2T4jnKO46su66RhUYLJyS9sLhnf
4v+wnNs3
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:03 2024 by rpki-client on console-ams.rpki-client.org