Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e2e3d6-f226-4a7e-840d-d5763fecd605/1/luUcqULzg4Kz6-vRkR1d2AuwFmQ.roa
File: luUcqULzg4Kz6-vRkR1d2AuwFmQ.roa (raw, json)
Hash identifier: 7G/YQOJBePno66Xf4QLLfEbCLWCqYKnrTY1pc0hgbV0=
Subject key identifier: 96:E5:1C:A9:42:F3:83:82:B3:EB:EB:D1:91:1D:5D:D8:0B:B0:16:64
Certificate issuer: /CN=7488ac3ce7e91e240caff219cbe38fcf023bf2b6
Certificate serial: 018CC2DB3ACA81C8C827D90A4E5D9F81AFFC
Authority key identifier: 74:88:AC:3C:E7:E9:1E:24:0C:AF:F2:19:CB:E3:8F:CF:02:3B:F2:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dIisPOfpHiQMr_IZy-OPzwI78rY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e2e3d6-f226-4a7e-840d-d5763fecd605/1/luUcqULzg4Kz6-vRkR1d2AuwFmQ.roa
Signing time: Mon 01 Jan 2024 02:29:56 +0000
ROA not before: Mon 01 Jan 2024 02:29:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202548
IP address blocks: 185.212.185.0/24 maxlen: 24
45.130.45.0/24 maxlen: 24
2a0f:a040::/29 maxlen: 29
Validation: Failed, certificate revoked on Fri 12 Jan 2024 14:40:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:3a:ca:81:c8:c8:27:d9:0a:4e:5d:9f:81:af:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7488ac3ce7e91e240caff219cbe38fcf023bf2b6
Validity
Not Before: Jan 1 02:29:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=96e51ca942f38382b3ebebd1911d5dd80bb01664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:39:05:0c:3e:90:7b:cf:84:3f:72:23:b9:77:
61:28:c2:0d:91:0a:11:f9:d3:0e:56:a9:83:19:a7:
d5:e2:f4:32:01:38:39:bc:37:21:12:e3:60:13:88:
ac:f4:1c:64:16:64:46:6f:b7:f7:76:ff:4f:b3:70:
a1:6c:17:4a:72:11:4d:a8:c6:51:7a:ff:2d:52:2c:
f1:a6:a1:89:a1:12:56:6f:5c:2f:7b:28:a8:51:29:
21:dc:d4:ad:02:c7:59:9e:80:c6:8d:c5:8d:77:b9:
c9:3e:e4:80:eb:07:83:57:f6:19:cc:e9:38:5e:d4:
4f:4c:30:be:8d:02:66:ef:2a:37:01:c6:d0:22:22:
e8:6b:ef:ac:05:60:ca:22:6f:80:ae:5f:50:a5:c1:
19:97:79:ff:03:e2:07:9f:4e:9b:95:bf:63:54:61:
e4:19:2f:8f:33:27:d0:85:db:20:08:2d:f2:5e:be:
f3:63:a2:9f:82:85:eb:4c:2a:df:8d:71:59:c2:2a:
9b:28:95:c3:cf:2f:61:6d:81:13:e8:bc:eb:7c:01:
de:4a:de:ac:8f:01:82:1b:a3:0c:26:d1:bb:a4:6f:
95:48:dd:6b:07:d3:94:cf:91:03:4e:c6:91:4f:dd:
b3:c8:06:6e:e3:8c:f2:21:84:e9:02:be:2e:20:02:
ba:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:E5:1C:A9:42:F3:83:82:B3:EB:EB:D1:91:1D:5D:D8:0B:B0:16:64
X509v3 Authority Key Identifier:
keyid:74:88:AC:3C:E7:E9:1E:24:0C:AF:F2:19:CB:E3:8F:CF:02:3B:F2:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dIisPOfpHiQMr_IZy-OPzwI78rY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e2e3d6-f226-4a7e-840d-d5763fecd605/1/luUcqULzg4Kz6-vRkR1d2AuwFmQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e2e3d6-f226-4a7e-840d-d5763fecd605/1/dIisPOfpHiQMr_IZy-OPzwI78rY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.45.0/24
185.212.185.0/24
IPv6:
2a0f:a040::/29
Signature Algorithm: sha256WithRSAEncryption
9d:45:3b:0e:39:26:e2:13:5a:2a:83:94:e4:67:81:30:77:7a:
59:ea:71:5c:ab:67:d4:b8:34:ea:31:19:17:dc:12:75:8a:33:
0d:4f:e5:25:6c:af:4d:c4:07:89:a9:86:e2:ae:5a:2c:40:8c:
97:f7:3e:f9:42:ac:e1:b2:12:aa:de:35:ea:d4:5a:f6:ab:98:
9e:43:78:9d:ee:33:36:da:41:2c:31:b1:7d:29:cd:f7:69:09:
c0:2e:d3:ad:fc:ca:1a:06:97:7d:cc:b9:75:48:5f:d1:b5:9a:
17:13:e6:a8:62:98:4a:e4:f8:26:40:9e:fa:41:13:5d:55:d8:
6a:a9:45:64:4a:f6:93:d7:3e:cc:01:12:51:be:17:fd:5c:82:
16:dc:dc:52:82:f0:fc:05:c9:b5:ba:fc:62:3c:ce:8d:25:1e:
6a:ea:5f:19:6d:21:63:4c:57:d6:ed:84:b8:b2:1b:4e:27:85:
ee:f4:d3:c9:44:fb:58:20:5e:51:18:c1:c7:fa:7d:a1:51:99:
92:8e:04:28:1e:05:f6:a3:fa:1b:85:9d:47:d9:3c:f7:a3:82:
02:4d:e5:b8:79:b9:2c:af:9e:88:a7:37:b4:ac:15:21:86:96:
53:81:f2:db:30:24:0d:16:1d:69:0e:6e:d5:78:fe:3d:2b:7b:
57:98:68:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:41 2024 by rpki-client on console-ams.rpki-client.org