Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/L1LNtFqo0sbpKIZ3lQwbZWaL7G4.roa
File: L1LNtFqo0sbpKIZ3lQwbZWaL7G4.roa (raw, json)
Hash identifier: 9wI4Ib0PpUHKBepWT0wH31wyN6cClDaxjwH1mjhhhso=
Subject key identifier: 2F:52:CD:B4:5A:A8:D2:C6:E9:28:86:77:95:0C:1B:65:66:8B:EC:6E
Certificate issuer: /CN=97cca0952db8aa9fe5e5703c6f189a06a57f4bb1
Certificate serial: 018C62D589BC26B936C9DC0AC8EAEBF5DC78
Authority key identifier: 97:CC:A0:95:2D:B8:AA:9F:E5:E5:70:3C:6F:18:9A:06:A5:7F:4B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l8yglS24qp_l5XA8bxiaBqV_S7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/L1LNtFqo0sbpKIZ3lQwbZWaL7G4.roa
Signing time: Wed 13 Dec 2023 11:00:10 +0000
ROA not before: Wed 13 Dec 2023 11:00:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 215846
IP address blocks: 185.111.110.0/24 maxlen: 24
2a06:5d81::/32 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:29:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:62:d5:89:bc:26:b9:36:c9:dc:0a:c8:ea:eb:f5:dc:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97cca0952db8aa9fe5e5703c6f189a06a57f4bb1
Validity
Not Before: Dec 13 11:00:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2f52cdb45aa8d2c6e9288677950c1b65668bec6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:88:99:d5:7f:f7:7a:b5:bf:ac:e3:7b:63:a4:
53:d4:cc:bc:96:46:02:ec:b9:f6:dd:92:2b:2e:4e:
7e:f2:55:e7:f8:9c:65:a0:56:81:8f:bb:05:9a:80:
f4:d3:70:02:23:23:17:dd:c7:ee:64:52:62:1d:c5:
71:4a:e4:fa:ff:0d:06:f4:23:9c:30:8e:52:08:d9:
38:83:de:0e:f6:2c:5f:c4:44:e9:62:d0:2f:1c:6a:
3e:c9:e3:b3:74:bf:3b:71:e6:e6:91:f3:5a:0b:b2:
5e:2f:7f:f1:82:b2:fe:c0:2b:4d:ba:75:70:a2:b0:
8a:61:c2:d7:ea:aa:fe:2a:02:32:f6:4b:3f:19:2b:
98:17:3a:36:4b:8e:ce:45:6b:bd:71:fd:a0:7b:7d:
de:6d:a4:58:7e:cd:5d:4a:13:83:91:1f:4b:2a:43:
4b:97:3a:b2:2f:eb:d6:56:c2:58:48:cc:14:2f:fd:
d3:cd:5d:3f:d3:5c:d6:54:68:26:34:cd:e9:33:9c:
12:c7:a4:bf:77:cd:30:84:f4:5b:08:20:89:51:9a:
1a:b7:c5:5f:3a:81:33:d5:90:ca:d4:6e:79:55:e4:
03:95:63:61:1a:65:1f:51:ea:ed:b9:4e:d1:4e:b6:
a3:9f:d6:66:f6:0f:05:3e:8f:51:e6:02:31:d1:71:
53:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:52:CD:B4:5A:A8:D2:C6:E9:28:86:77:95:0C:1B:65:66:8B:EC:6E
X509v3 Authority Key Identifier:
keyid:97:CC:A0:95:2D:B8:AA:9F:E5:E5:70:3C:6F:18:9A:06:A5:7F:4B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8yglS24qp_l5XA8bxiaBqV_S7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/L1LNtFqo0sbpKIZ3lQwbZWaL7G4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/9a0eb2-e994-4719-a166-5d6dd0ba52cf/1/l8yglS24qp_l5XA8bxiaBqV_S7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.111.110.0/24
IPv6:
2a06:5d81::/32
Signature Algorithm: sha256WithRSAEncryption
18:e7:d2:7f:3b:b8:cd:7a:70:fc:c1:4b:fd:85:30:3f:46:c6:
61:33:cc:86:7b:f2:51:b9:9a:35:bf:c5:91:0b:89:4a:58:9d:
6e:7e:aa:cf:f7:3d:f9:ac:1f:21:da:23:40:36:6a:d3:2e:70:
71:0f:1e:5e:c1:39:66:74:82:25:73:0b:2d:9e:10:4d:e1:f9:
9e:ad:10:be:95:72:0b:32:71:2b:fd:f6:1f:fa:e3:c9:6b:a4:
cc:b7:4b:ca:19:15:9b:92:01:48:8b:b3:27:e0:80:73:21:09:
52:f3:0b:47:18:24:fc:c6:9d:19:3a:55:b2:db:0b:b2:9a:99:
8a:db:a0:50:ed:98:ba:d5:1d:38:02:cf:06:d0:67:5f:c0:3e:
74:21:e7:3a:c1:be:73:98:14:9f:47:7b:2c:a1:7d:09:0b:13:
91:93:e5:46:63:ef:b8:5f:92:36:96:6a:a2:66:9e:9a:5f:54:
21:af:b6:a0:8e:50:9b:bc:81:f0:99:42:b2:7d:98:ac:38:a5:
25:46:e5:63:b4:63:b5:66:de:93:d6:7b:c6:f7:1e:1d:4a:44:
72:34:1a:50:01:7b:d5:c2:59:ff:43:40:3e:7a:e7:bc:cb:14:
58:f2:16:a6:d0:5d:4c:71:13:5f:43:d8:f6:9e:31:ee:4f:7f:
a1:a1:44:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:34 2024 by rpki-client on console-ams.rpki-client.org