Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/LKbH5Jufj63DX3NjrN43LR5Far0.roa
File: LKbH5Jufj63DX3NjrN43LR5Far0.roa (raw, json)
Hash identifier: Mvk0fTR0v+pz58/UBMunpLC/lon4r9XyV0i1ggOuF2A=
Subject key identifier: 2C:A6:C7:E4:9B:9F:8F:AD:C3:5F:73:63:AC:DE:37:2D:1E:45:6A:BD
Certificate issuer: /CN=6107e2e2e8171d319da1bc64b36c3c985e646c2a
Certificate serial: 01856DDD6AF3346BDF4C53BBEA480ECD08FF
Authority key identifier: 61:07:E2:E2:E8:17:1D:31:9D:A1:BC:64:B3:6C:3C:98:5E:64:6C:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YQfi4ugXHTGdobxks2w8mF5kbCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/LKbH5Jufj63DX3NjrN43LR5Far0.roa
Signing time: Sun 01 Jan 2023 15:05:05 +0000
ROA not before: Sun 01 Jan 2023 15:05:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42868
IP address blocks: 185.87.253.0/24 maxlen: 24
185.87.252.0/24 maxlen: 24
185.87.254.0/24 maxlen: 24
185.87.255.0/24 maxlen: 24
77.245.144.0/24 maxlen: 24
77.245.145.0/24 maxlen: 24
77.245.146.0/24 maxlen: 24
77.245.147.0/24 maxlen: 24
77.245.148.0/24 maxlen: 24
77.245.149.0/24 maxlen: 24
77.245.150.0/24 maxlen: 24
77.245.151.0/24 maxlen: 24
77.245.152.0/24 maxlen: 24
77.245.153.0/24 maxlen: 24
77.245.154.0/24 maxlen: 24
77.245.155.0/24 maxlen: 24
77.245.156.0/24 maxlen: 24
77.245.157.0/24 maxlen: 24
77.245.158.0/24 maxlen: 24
77.245.159.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:dd:6a:f3:34:6b:df:4c:53:bb:ea:48:0e:cd:08:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6107e2e2e8171d319da1bc64b36c3c985e646c2a
Validity
Not Before: Jan 1 15:05:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2ca6c7e49b9f8fadc35f7363acde372d1e456abd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:38:7c:66:d8:52:f8:f1:07:94:f8:be:eb:a7:
87:9a:8b:87:1a:10:9d:56:69:26:9d:a3:a7:22:ee:
27:2f:ab:6f:1b:99:db:67:aa:09:6e:2a:5c:a7:ab:
48:d5:07:41:17:e2:09:d0:0d:93:52:9b:bb:ae:fb:
7d:d2:86:74:e7:be:40:56:9c:71:e9:78:4a:1b:6b:
04:a1:72:dc:1a:75:2c:da:1a:d7:62:92:c6:20:06:
b6:4c:30:a8:84:94:90:8a:3e:f8:8e:1a:a0:0f:57:
b2:98:54:d4:de:de:eb:ba:a0:9b:da:a9:86:8a:6b:
ea:08:21:b7:f6:3d:6a:84:ea:a3:a6:2e:8b:bf:0f:
65:4f:b5:23:6e:cd:35:c6:42:77:68:89:f6:98:22:
86:3f:17:5b:56:c1:83:a3:d7:37:39:4d:ce:20:1b:
35:95:4e:73:e9:de:3c:76:b9:4f:ac:7b:4d:c7:39:
2c:21:d7:34:da:3f:bd:1c:0c:ce:98:be:77:f5:f9:
8d:bd:68:1b:60:f2:ea:b1:0e:cb:9f:14:a8:70:f9:
64:9c:78:29:6c:89:a6:4f:2c:6e:03:f2:22:b5:03:
7e:b3:9e:73:39:b0:5c:f4:8e:bf:a0:33:7e:0d:0b:
69:23:06:47:e3:6d:03:38:29:3d:16:b0:34:1d:42:
87:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:A6:C7:E4:9B:9F:8F:AD:C3:5F:73:63:AC:DE:37:2D:1E:45:6A:BD
X509v3 Authority Key Identifier:
keyid:61:07:E2:E2:E8:17:1D:31:9D:A1:BC:64:B3:6C:3C:98:5E:64:6C:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YQfi4ugXHTGdobxks2w8mF5kbCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/LKbH5Jufj63DX3NjrN43LR5Far0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.245.144.0/20
185.87.252.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:35:da:49:f7:2d:2c:4c:9a:d9:98:40:d8:6b:e4:99:e3:c9:
67:72:de:25:38:e1:b3:c0:a0:a4:04:fb:a4:bc:df:42:94:dc:
69:6f:48:c8:a1:29:a2:9d:1d:fd:43:52:a1:98:dd:77:68:8a:
d2:3d:7b:17:bb:b5:85:87:f3:9c:55:19:31:a0:e5:60:63:36:
53:69:1d:9c:5a:86:17:32:6b:0e:fd:e9:48:0f:1a:4d:0d:ae:
36:39:ea:ce:33:bf:c6:a9:6b:74:cc:86:c0:67:b3:1f:ed:d7:
b9:05:45:ab:c7:85:fc:54:ba:f9:a3:3c:7f:52:4b:f8:7e:14:
ad:63:bc:dc:5e:69:79:e4:b7:b4:f7:8e:31:4c:02:c5:4d:aa:
b8:26:d2:b1:b6:2e:15:ee:e6:79:7b:c8:10:3a:65:2d:79:ff:
4c:e4:8d:85:8a:3a:20:4c:5a:ae:57:3c:77:2b:f8:5b:e5:20:
c5:ef:68:68:8d:da:22:4b:8c:75:04:fd:95:1b:c1:0f:5f:9b:
ba:a3:ec:15:dc:b8:98:f3:21:c4:d1:dc:d3:9c:8b:d6:90:3a:
00:06:d8:8c:14:09:72:7a:a6:87:6b:8b:44:85:ed:bf:97:0f:
5d:12:39:2a:b1:55:e7:73:b3:bf:1d:f3:5a:8e:4c:37:1a:c7:
73:e3:20:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:17 2024 by rpki-client on console-ams.rpki-client.org