Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/29cd58-8327-42be-b7f9-c9819a410a7a/1/lAnR7ct4DRuXZ-S50bfz67Z47K8.roa
File: lAnR7ct4DRuXZ-S50bfz67Z47K8.roa (raw, json)
Hash identifier: kYHccqCaxwaQ1V+lgYZiuvuzT/7M1bo+l/D/W9vj4Pk=
Subject key identifier: 94:09:D1:ED:CB:78:0D:1B:97:67:E4:B9:D1:B7:F3:EB:B6:78:EC:AF
Certificate issuer: /CN=348cf9779a92efe97543b22a347b81c2eaa5bbfa
Certificate serial: 01856F26BA47F09E3EF209E6CA127EC44FC8
Authority key identifier: 34:8C:F9:77:9A:92:EF:E9:75:43:B2:2A:34:7B:81:C2:EA:A5:BB:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/29cd58-8327-42be-b7f9-c9819a410a7a/1/lAnR7ct4DRuXZ-S50bfz67Z47K8.roa
Signing time: Sun 01 Jan 2023 21:04:47 +0000
ROA not before: Sun 01 Jan 2023 21:04:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199752
IP address blocks: 185.36.132.0/22 maxlen: 22
185.187.108.0/22 maxlen: 22
185.239.171.0/24 maxlen: 24
2a00:ef20::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:26:ba:47:f0:9e:3e:f2:09:e6:ca:12:7e:c4:4f:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=348cf9779a92efe97543b22a347b81c2eaa5bbfa
Validity
Not Before: Jan 1 21:04:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9409d1edcb780d1b9767e4b9d1b7f3ebb678ecaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:d5:96:50:ac:82:fb:2e:b3:16:9d:40:e5:c7:
69:66:d2:b2:c6:4a:d5:31:e7:a9:a9:61:b7:b0:50:
f9:e3:40:c3:8e:90:a6:f9:b9:9c:1f:f8:97:37:99:
8d:46:dc:1c:a5:44:46:b5:e7:51:85:f1:67:70:3c:
db:d6:c2:d3:66:53:ae:aa:e4:8c:a0:79:56:20:df:
a8:40:8a:a9:03:eb:ca:a2:23:53:44:42:0c:de:ea:
49:bc:2a:20:2a:0d:f9:cd:3b:b3:01:59:f1:4d:62:
e9:7d:32:ce:c4:9a:4e:c9:32:e0:e2:4e:ac:6e:7b:
68:c9:56:02:9b:26:41:9d:7f:e2:d5:af:a8:76:b1:
4f:66:8e:d6:4e:59:bd:bc:f2:1f:0e:f8:18:14:df:
75:b0:6b:f3:9a:ec:11:db:f7:bd:03:da:88:77:70:
dd:2a:de:1c:93:2e:8d:d7:7c:d1:b9:f7:63:fd:9a:
6d:7b:39:e1:2b:3c:44:9f:4f:cb:16:f4:1e:60:aa:
1d:00:38:fa:84:18:f8:6a:eb:c4:57:00:03:70:9f:
77:06:9f:8b:5d:fe:2f:00:3b:9b:4a:44:13:a0:28:
a9:a7:2e:14:07:f5:1e:a3:d0:79:97:f9:40:a8:f3:
f8:ca:e7:f2:d8:a7:0e:f9:91:e7:1f:f7:97:eb:51:
54:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:09:D1:ED:CB:78:0D:1B:97:67:E4:B9:D1:B7:F3:EB:B6:78:EC:AF
X509v3 Authority Key Identifier:
keyid:34:8C:F9:77:9A:92:EF:E9:75:43:B2:2A:34:7B:81:C2:EA:A5:BB:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/29cd58-8327-42be-b7f9-c9819a410a7a/1/lAnR7ct4DRuXZ-S50bfz67Z47K8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/29cd58-8327-42be-b7f9-c9819a410a7a/1/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.36.132.0/22
185.187.108.0/22
185.239.171.0/24
IPv6:
2a00:ef20::/29
Signature Algorithm: sha256WithRSAEncryption
41:e2:47:7b:9f:ae:7f:74:3e:92:1a:74:c2:29:8c:6d:8b:9b:
e2:54:e6:80:15:40:9e:15:8a:e1:ec:68:ea:42:d8:10:8f:85:
26:13:12:1d:23:db:44:d0:20:11:b1:b4:84:a0:3f:43:28:26:
33:61:3b:6e:dd:77:79:ee:84:4f:fc:00:bc:a9:76:19:f4:16:
41:8d:f9:7c:f8:97:e3:42:c5:e4:2a:71:fe:48:de:cf:19:24:
fc:08:17:aa:66:4d:b5:e0:88:b7:4e:38:94:a8:99:99:7c:dd:
8c:8b:6b:be:f9:8b:d1:0d:2d:7c:83:11:09:73:d9:4a:a4:af:
22:76:9a:40:e0:51:e9:ff:90:b2:eb:28:b0:f7:19:20:14:e3:
71:b7:ab:73:f1:54:af:4f:d4:91:8a:9d:29:41:ad:ff:5e:b3:
67:0a:a4:ad:40:1b:2d:c6:17:2e:b4:eb:06:27:0a:41:ba:d1:
4e:62:25:b5:ce:bc:84:57:c9:fa:19:64:d7:df:42:cb:15:ca:
ac:fe:42:8b:07:a5:5c:c6:bf:d4:82:40:f4:df:ea:80:dc:8c:
20:19:16:50:09:6d:98:b2:67:0a:49:50:de:3c:d8:38:09:d1:
2e:5f:1e:e9:97:a0:63:eb:86:6d:e0:1f:41:10:79:df:9e:45:
3c:91:f6:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:30:05 2024 by rpki-client on console-ams.rpki-client.org