Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/LEDy_IGH_EpAt5PgSZJSMB-rN8s.roa
File: LEDy_IGH_EpAt5PgSZJSMB-rN8s.roa (raw, json)
Hash identifier: rEC75TNuSEG+xx1aK5pDO2bOMw1K0AVIzaIL29j4eeo=
Subject key identifier: 2C:40:F2:FC:81:87:FC:4A:40:B7:93:E0:49:92:52:30:1F:AB:37:CB
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0185732846393FF24E72FFB6CBED3CEC50AA
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/LEDy_IGH_EpAt5PgSZJSMB-rN8s.roa
Signing time: Mon 02 Jan 2023 15:44:57 +0000
ROA not before: Mon 02 Jan 2023 15:44:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211939
IP address blocks: 185.13.159.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 03 May 2023 04:23:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:28:46:39:3f:f2:4e:72:ff:b6:cb:ed:3c:ec:50:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 2 15:44:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2c40f2fc8187fc4a40b793e0499252301fab37cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2d:e8:95:95:0c:85:f2:d9:87:a0:ce:e9:96:
09:42:c9:b8:e6:20:a0:cf:ae:14:4c:f4:36:68:f1:
42:22:64:64:6e:68:3e:bf:e4:c7:0c:e4:aa:cb:0d:
ff:0c:db:54:04:3b:39:d7:1a:b1:17:00:7a:b5:76:
f9:e8:a4:3d:06:09:17:00:92:76:5c:9b:ba:50:42:
0e:50:d0:c7:c6:78:9f:41:37:22:34:6b:cf:44:0e:
9b:24:b3:f3:7e:11:e5:e4:e9:94:69:d4:20:b1:ff:
ed:83:ff:33:46:9e:48:f2:3d:64:33:66:be:f3:fd:
d8:86:5e:d7:73:f1:fb:fe:dc:ae:f0:64:4c:68:db:
62:71:06:17:1c:5f:6d:ab:e9:70:90:c0:f9:67:f7:
a1:45:9a:c4:8f:3e:1b:05:74:9f:0f:63:e4:6b:3e:
a9:2e:25:2e:04:9d:d0:af:6e:64:46:5a:58:9e:b4:
75:f0:98:40:61:05:47:cc:81:48:1e:d9:93:12:b1:
48:1e:eb:96:7a:f8:dd:08:07:0e:29:d9:9d:dc:d3:
db:0e:f6:50:f0:9a:03:ac:6b:16:9e:08:a6:b4:f9:
e7:d5:34:1c:b8:30:dc:7f:3e:9f:a1:59:0c:59:5a:
12:7e:38:a5:73:ba:65:c7:66:d5:b7:9c:44:4e:ec:
0b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:40:F2:FC:81:87:FC:4A:40:B7:93:E0:49:92:52:30:1F:AB:37:CB
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/LEDy_IGH_EpAt5PgSZJSMB-rN8s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.13.159.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:a0:63:47:fc:4c:16:cd:98:d6:1c:7e:81:7f:89:5d:1f:3d:
a1:c2:bc:80:e4:46:dc:c5:7c:27:58:dd:ea:05:22:bf:5c:bb:
58:14:1c:52:b5:c1:aa:dc:a2:ef:02:3b:c9:2e:34:10:61:43:
9e:dd:2f:38:15:25:2d:8c:0b:31:61:f0:05:ff:b1:fe:94:6e:
1a:cc:11:ac:6e:2a:6b:bc:f2:40:30:51:d7:d6:08:2b:4f:70:
16:e8:0f:27:3a:4c:37:55:d0:10:26:92:96:c8:07:5c:17:1d:
d7:4b:5d:20:9c:2f:82:cd:10:22:6e:fa:b0:88:35:f5:5c:cb:
28:92:54:46:be:80:14:02:7d:f4:53:b9:d1:c1:5f:3d:48:59:
19:67:a7:4b:55:ed:0f:22:86:3e:91:04:bb:e6:c7:5a:55:ab:
00:e2:b0:07:0f:fa:16:ca:66:73:03:76:12:a1:60:b5:27:90:
9e:5d:4f:ab:02:ea:3f:d9:3c:5d:65:23:60:be:e1:4e:fd:3f:
f6:85:03:94:8c:5a:d2:fb:33:7d:e9:8c:a2:51:a6:e8:81:fc:
47:c2:d9:73:ca:a0:5c:eb:81:0d:df:1e:2d:bf:3f:db:d4:8c:
62:87:90:54:37:58:40:29:04:b3:1f:7e:8b:de:65:ed:6f:20:
e1:27:c0:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:30 2024 by rpki-client on console-fra.rpki-client.org