Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/LGv2Oz4_JL36xgnD1pQIbtFSR1Y.roa
File: LGv2Oz4_JL36xgnD1pQIbtFSR1Y.roa (raw, json)
Hash identifier: HlyRxJq3hnjx1jBJFz0HszZKitkHYbpkb2gq/vvCu6w=
Subject key identifier: 2C:6B:F6:3B:3E:3F:24:BD:FA:C6:09:C3:D6:94:08:6E:D1:52:47:56
Certificate issuer: /CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba
Certificate serial: 01865060494783BFCC89DCC11E258EEFB835
Authority key identifier: 9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/LGv2Oz4_JL36xgnD1pQIbtFSR1Y.roa
Signing time: Tue 14 Feb 2023 14:42:12 +0000
ROA not before: Tue 14 Feb 2023 14:42:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 11351
IP address blocks: 185.114.206.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 15 Feb 2023 19:48:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:50:60:49:47:83:bf:cc:89:dc:c1:1e:25:8e:ef:b8:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba
Validity
Not Before: Feb 14 14:42:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2c6bf63b3e3f24bdfac609c3d694086ed1524756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:93:f2:e4:51:13:7d:72:cb:21:24:b8:6c:fa:
6f:d7:5b:7a:15:1c:d4:4f:1b:1b:e9:bf:6e:ab:c8:
d1:1f:ec:fb:c6:27:a8:ad:55:1c:97:ea:f8:e4:c5:
da:06:d2:30:af:c7:e4:63:d9:8d:d7:3c:44:d3:48:
16:c1:2d:de:48:32:90:c4:2c:f2:6e:5a:e7:f7:74:
8d:32:1a:e6:89:56:e1:c0:68:ea:9e:93:70:a3:f3:
58:63:88:cd:af:7a:5f:be:20:3c:38:70:10:5b:ee:
9c:85:60:8f:3d:83:4f:83:15:01:a2:9c:6a:5d:c8:
23:75:53:ce:cd:00:bc:77:f3:7b:f9:bf:1c:2b:01:
37:4f:20:23:46:bc:f0:f8:9f:90:f7:16:49:0f:28:
fc:26:75:42:42:a7:f1:ea:e2:b8:9c:84:22:60:b5:
28:90:a3:a8:d4:bd:6c:f7:61:07:b6:ae:26:40:44:
50:d3:5f:a3:fe:a7:09:88:b7:c5:50:db:e5:86:27:
3e:61:d9:28:38:a2:15:fe:28:26:52:37:7b:87:aa:
41:b2:38:d1:7e:4f:f6:a1:9e:d8:b8:db:de:a1:75:
1f:90:1c:31:ee:e2:78:35:6b:2b:da:21:99:af:1c:
eb:f5:83:fc:af:d8:63:eb:e4:f8:8a:19:e8:8f:f4:
1c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:6B:F6:3B:3E:3F:24:BD:FA:C6:09:C3:D6:94:08:6E:D1:52:47:56
X509v3 Authority Key Identifier:
keyid:9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/LGv2Oz4_JL36xgnD1pQIbtFSR1Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.114.206.0/23
Signature Algorithm: sha256WithRSAEncryption
29:d5:66:cd:4d:12:fa:ed:90:67:dd:0f:b2:c5:0e:e8:2e:3d:
cb:cb:d4:bc:12:c1:1f:ae:ba:23:2a:a1:ba:8f:43:dd:eb:b4:
f4:8d:19:ed:13:7a:15:fa:99:de:58:f8:31:d5:72:fa:f7:28:
5d:1a:c1:84:23:15:6e:53:f5:2f:66:94:c7:d3:0d:b8:97:98:
36:63:00:de:a0:39:bd:18:b3:56:11:1b:7c:4c:e2:ad:a6:93:
ec:d6:d4:a8:47:79:6d:9a:dd:4c:f6:05:c2:d6:4b:a4:ba:aa:
08:0b:c6:d1:70:52:7c:ee:9a:b2:ee:13:88:54:48:1a:62:29:
d4:d7:c7:0e:30:2c:c0:6b:ba:3b:fb:e9:b7:88:8a:c6:1a:43:
9f:40:ff:a0:48:a4:76:33:34:2c:26:8b:36:11:83:1c:f1:56:
ef:12:5a:89:28:d5:b3:47:70:24:97:a6:f9:53:90:c1:fd:66:
a3:85:14:4e:45:5f:37:f0:26:a2:6c:54:8c:5f:90:4e:b0:a8:
45:6a:cc:92:94:32:bb:dc:3f:60:92:ac:b2:69:48:12:63:64:
12:49:b3:9f:c9:8d:38:ad:6e:40:11:79:06:fe:73:cf:19:46:
2a:d2:57:58:29:bb:4d:5b:76:93:63:4f:b1:26:47:32:c1:6f:
92:a4:0d:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:56:36 2024 by rpki-client on console-ams.rpki-client.org