Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3b58d8-6d94-4302-aa91-7c2bd984d735/1/L4ZcIwufZ3LEmW0xgMq2wzlKe18.roa
File: L4ZcIwufZ3LEmW0xgMq2wzlKe18.roa (raw, json)
Hash identifier: m+fwXc9nGk1XDUKS0/bs84dxUdhz5oN1wg7ju8hUbK8=
Subject key identifier: 2F:86:5C:23:0B:9F:67:72:C4:99:6D:31:80:CA:B6:C3:39:4A:7B:5F
Certificate issuer: /CN=2e87c3d5f45fef38c105b93dd44dd24f5bee60e7
Certificate serial: 01856E1420B3B8A86899AF1F7DB10E209AC0
Authority key identifier: 2E:87:C3:D5:F4:5F:EF:38:C1:05:B9:3D:D4:4D:D2:4F:5B:EE:60:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LofD1fRf7zjBBbk91E3ST1vuYOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3b58d8-6d94-4302-aa91-7c2bd984d735/1/L4ZcIwufZ3LEmW0xgMq2wzlKe18.roa
Signing time: Sun 01 Jan 2023 16:04:50 +0000
ROA not before: Sun 01 Jan 2023 16:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201649
IP address blocks: 185.68.49.0/24 maxlen: 24
185.68.48.0/22 maxlen: 22
185.68.51.0/24 maxlen: 24
185.68.48.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:29:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:14:20:b3:b8:a8:68:99:af:1f:7d:b1:0e:20:9a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e87c3d5f45fef38c105b93dd44dd24f5bee60e7
Validity
Not Before: Jan 1 16:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2f865c230b9f6772c4996d3180cab6c3394a7b5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:c8:03:81:de:01:d1:31:09:c1:f4:fd:fd:98:
e7:3b:6b:e1:91:5d:31:ac:f2:2f:0f:0c:82:45:19:
b2:34:80:37:08:47:2b:b3:b7:65:64:1f:03:b5:f9:
3f:c7:f4:d5:c9:24:ef:d0:af:4b:0f:19:d0:46:57:
51:58:26:9d:0f:c6:8e:d2:7c:44:53:78:5e:c0:97:
8f:45:58:c0:9d:8c:2f:85:f9:c0:20:e0:dc:1c:6d:
ab:3b:d0:78:8a:84:98:76:0a:93:ce:8f:92:a1:1a:
a8:b0:8d:78:49:24:84:9e:98:a2:e5:c7:c5:c4:ba:
37:83:64:3b:28:9f:50:d7:2f:7f:d3:61:d8:6d:d8:
80:50:f3:06:a6:c0:b1:1c:17:b6:f2:e4:d6:5d:e8:
76:da:89:56:b5:9a:ee:66:52:19:d4:89:ee:cb:6f:
1d:3d:20:90:cb:7b:70:dc:68:50:6d:e4:5c:1d:47:
ef:76:5e:c8:4d:a2:fb:20:b9:3e:8d:d2:de:b5:fd:
72:b0:86:3c:19:70:0f:cd:75:ea:c0:86:8b:6b:3a:
1f:14:9f:83:20:59:60:6f:b4:b7:7f:68:9a:9e:89:
d3:af:64:40:eb:64:01:ac:2a:c7:40:9d:28:c3:33:
eb:ee:cc:f7:fc:e6:5f:57:55:10:9a:a9:8a:3c:b8:
72:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:86:5C:23:0B:9F:67:72:C4:99:6D:31:80:CA:B6:C3:39:4A:7B:5F
X509v3 Authority Key Identifier:
keyid:2E:87:C3:D5:F4:5F:EF:38:C1:05:B9:3D:D4:4D:D2:4F:5B:EE:60:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LofD1fRf7zjBBbk91E3ST1vuYOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3b58d8-6d94-4302-aa91-7c2bd984d735/1/L4ZcIwufZ3LEmW0xgMq2wzlKe18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3b58d8-6d94-4302-aa91-7c2bd984d735/1/LofD1fRf7zjBBbk91E3ST1vuYOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.68.48.0/22
Signature Algorithm: sha256WithRSAEncryption
66:c2:ec:49:31:e4:a0:52:86:66:93:14:f1:b0:2e:66:98:18:
8d:9c:77:91:05:5a:01:9f:31:b5:cf:12:99:f4:ce:19:72:47:
f4:2f:98:0e:38:4d:94:14:c6:a4:79:7d:75:ed:5c:b9:2d:65:
0d:72:dc:e5:65:44:a9:72:04:ed:ba:93:dd:27:6a:b6:67:54:
94:60:84:6c:b2:c6:8a:ed:89:94:a0:ea:50:97:d6:f1:a4:7e:
40:0f:a1:2e:2e:72:c0:8e:41:49:16:a1:35:bd:9d:32:4d:7e:
c3:a0:61:63:09:5d:bb:1c:47:a3:05:a9:8f:a5:bf:7b:cb:45:
5f:a3:f2:32:14:1e:d0:48:73:65:8f:4d:5e:f6:c0:a3:ee:c6:
9c:3b:91:7e:4b:08:3b:93:1c:1c:f4:6e:8c:d1:18:20:9f:b1:
a7:22:2a:e8:3d:14:cf:3a:cf:2d:35:b9:1d:37:61:d1:81:03:
cf:e4:26:29:71:84:aa:01:6c:17:f6:1f:3b:df:a5:cf:22:32:
3c:c6:67:12:94:3e:cc:49:00:81:7e:7c:a3:d5:06:12:60:4b:
b3:0d:bd:a9:0a:e1:77:2f:e6:8a:f1:97:9c:30:16:36:03:ee:
52:62:23:2d:2c:33:53:2f:16:04:d5:ea:cf:9e:f2:dd:4d:6f:
74:52:f3:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:00 2024 by rpki-client on console-fra.rpki-client.org