Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/liy-o86iJn0Hw6U8G3BhQDPCO4I.roa
File: liy-o86iJn0Hw6U8G3BhQDPCO4I.roa (raw, json)
Hash identifier: +6p4eUvAHk/S+REhoNQPEpVXrgS+m8fZYVvwvIJAl7s=
Subject key identifier: 96:2C:BE:A3:CE:A2:26:7D:07:C3:A5:3C:1B:70:61:40:33:C2:3B:82
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 018CC64AEB3B31173F9B703EE2508512E9A4
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/liy-o86iJn0Hw6U8G3BhQDPCO4I.roa
Signing time: Mon 01 Jan 2024 18:30:47 +0000
ROA not before: Mon 01 Jan 2024 18:30:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48749
IP address blocks: 85.122.84.0/23 maxlen: 23
217.156.108.0/23 maxlen: 23
85.121.18.0/23 maxlen: 23
85.121.36.0/23 maxlen: 23
81.180.252.0/23 maxlen: 23
81.180.36.0/23 maxlen: 23
81.180.172.0/23 maxlen: 23
80.96.236.0/23 maxlen: 23
81.180.94.0/23 maxlen: 23
85.120.44.0/23 maxlen: 23
81.180.204.0/23 maxlen: 23
81.181.172.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 31 Jan 2024 15:52:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:eb:3b:31:17:3f:9b:70:3e:e2:50:85:12:e9:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 18:30:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=962cbea3cea2267d07c3a53c1b70614033c23b82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f3:26:bb:f8:a0:a7:c2:16:9c:2c:89:b6:5f:
c2:c4:7c:cc:eb:e6:24:af:76:78:5b:b8:c2:56:94:
0a:28:8d:3c:ae:e6:10:09:7a:e6:8d:e5:cf:74:da:
37:a2:89:e6:88:4f:ba:2b:e7:7c:7c:0d:7a:e9:d2:
b0:95:74:fd:80:3a:c8:0b:97:58:1d:85:a3:76:b1:
08:1f:df:f8:a3:c0:a0:95:04:63:47:2e:c0:f3:9f:
b0:a2:3d:be:12:e1:c9:5b:ea:e8:07:aa:26:05:48:
9d:6b:a5:b6:74:42:e8:dd:ee:14:a0:68:5d:ae:3a:
45:b8:c8:d4:7a:0b:2c:8f:6e:d4:af:cf:f6:45:4c:
8b:f9:05:0f:03:32:99:a6:9e:5c:2b:97:5b:df:78:
6f:a5:fe:1f:40:35:86:ee:76:c1:ac:37:a1:1c:1c:
88:bc:e5:b5:dd:3b:93:3a:48:90:9b:0c:65:3d:57:
ac:8f:d8:5a:f6:d6:a4:bf:c2:4b:ed:25:c8:12:aa:
af:65:8d:d0:d4:a0:1d:2f:38:f0:d1:ca:d2:17:b9:
25:48:c4:b3:99:74:fe:72:7b:c7:40:e8:3d:fe:8e:
4d:96:b4:99:9f:e0:c1:26:c3:0d:95:dd:e3:44:af:
b1:94:8e:74:d4:78:fc:f1:18:bf:61:0f:30:73:da:
75:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:2C:BE:A3:CE:A2:26:7D:07:C3:A5:3C:1B:70:61:40:33:C2:3B:82
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/liy-o86iJn0Hw6U8G3BhQDPCO4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.236.0/23
81.180.36.0/23
81.180.94.0/23
81.180.172.0/23
81.180.204.0/23
81.180.252.0/23
81.181.172.0/23
85.120.44.0/23
85.121.18.0/23
85.121.36.0/23
85.122.84.0/23
217.156.108.0/23
Signature Algorithm: sha256WithRSAEncryption
36:88:a0:46:7e:00:e4:3f:a8:41:af:d0:38:9c:02:b3:76:32:
a1:7b:a4:b4:2d:53:f0:dc:30:fc:5c:f6:86:06:5f:cc:81:94:
f6:6d:9b:3b:4c:ec:64:d3:93:b7:30:97:4a:4f:89:71:1f:9b:
66:81:b8:85:d4:dd:4b:0d:28:6a:e0:5a:7b:dd:ae:77:94:c7:
3e:66:36:f4:bb:81:21:fd:5d:f6:c1:76:f4:5f:c4:43:f2:61:
69:ac:8f:9d:ef:1a:1b:52:43:ff:c5:11:9f:58:da:b7:b4:f1:
78:ac:5c:71:ce:81:0c:30:c6:51:73:70:ee:54:de:67:21:80:
e4:2f:ed:0e:6b:bc:20:2d:d9:fa:fa:28:00:73:7c:9b:99:0c:
cc:72:ad:1d:4e:ec:b0:06:0e:4f:5d:ff:03:82:5b:d2:af:8e:
f1:51:aa:12:cd:16:90:d7:fb:8d:24:44:0e:fe:b6:a4:24:ee:
bf:74:7d:ae:8c:6a:9e:e6:c7:40:e8:39:dc:27:4c:42:45:ed:
b6:e2:8d:eb:10:9c:a7:ed:89:22:01:f0:45:7e:a8:42:44:71:
8d:99:79:86:d6:e5:10:a1:0a:c9:7b:67:db:7f:cc:85:44:75:
c8:7f:1b:c2:98:3f:24:35:97:e4:68:b4:e3:fb:01:97:c8:25:
8d:c4:c5:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:05 2024 by rpki-client on console-ams.rpki-client.org