Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/0LGW3I3c33GarNzKsTDHbVXDKPc.roa
File: 0LGW3I3c33GarNzKsTDHbVXDKPc.roa (raw, json)
Hash identifier: zGPT+0ZsSr+LLS4rjb8r4HOs89HcQY3OMl1B57TRYiM=
Subject key identifier: D0:B1:96:DC:8D:DC:DF:71:9A:AC:DC:CA:B1:30:C7:6D:55:C3:28:F7
Certificate issuer: /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial: 018634F67E3922EA274CD8087ADEA5E8FF05
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/0LGW3I3c33GarNzKsTDHbVXDKPc.roa
Signing time: Thu 09 Feb 2023 06:56:54 +0000
ROA not before: Thu 09 Feb 2023 06:56:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2856
IP address blocks: 147.78.68.0/22 maxlen: 22
5.133.124.0/22 maxlen: 22
193.187.132.0/22 maxlen: 22
83.171.244.0/22 maxlen: 22
193.187.140.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 13 Feb 2023 14:49:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:34:f6:7e:39:22:ea:27:4c:d8:08:7a:de:a5:e8:ff:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Validity
Not Before: Feb 9 06:56:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d0b196dc8ddcdf719aacdccab130c76d55c328f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:33:77:30:30:5e:62:42:af:7e:6c:97:35:13:
6e:23:a8:81:38:b6:ce:35:f1:c4:6b:95:4e:bd:64:
65:01:13:7b:3f:ea:9b:bf:f8:1d:c9:f9:af:89:c7:
6c:df:24:9f:2b:cc:30:40:12:39:10:82:52:60:e5:
8d:c5:41:90:95:54:4c:cb:b6:8a:89:40:7f:a4:2e:
20:0a:61:70:5a:9c:29:0c:a6:f0:e8:4a:95:6b:55:
a1:c6:37:b6:b0:26:e4:f0:f7:e0:57:c0:1b:f7:fc:
d2:a5:37:38:25:70:f5:84:23:04:1f:8c:af:46:5b:
c4:60:fb:a9:fe:ec:0f:68:6d:5d:8c:ce:56:15:29:
73:62:f9:2c:58:49:5f:df:55:11:20:49:c5:7b:11:
82:66:37:3c:c2:87:1d:03:87:f7:df:b8:1d:b6:c7:
a0:b3:71:19:8b:52:51:a1:3e:4a:7b:da:15:c3:df:
6c:40:d7:5b:6f:30:74:4c:34:aa:b5:93:0c:ce:d8:
d6:2a:92:36:fa:13:18:c0:76:f3:a7:0f:59:23:b8:
74:50:65:d7:5d:29:c9:ff:cf:99:76:00:cb:7b:72:
08:e2:63:e9:5f:4b:bb:08:1d:58:59:de:bc:98:54:
18:03:a8:8a:ec:26:c2:ff:6f:ae:2b:ba:13:43:10:
09:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:B1:96:DC:8D:DC:DF:71:9A:AC:DC:CA:B1:30:C7:6D:55:C3:28:F7
X509v3 Authority Key Identifier:
keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/0LGW3I3c33GarNzKsTDHbVXDKPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.124.0/22
83.171.244.0/22
147.78.68.0/22
193.187.132.0/22
193.187.140.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:89:f9:bf:f4:a9:c9:0f:90:41:da:df:d3:d5:ed:9f:b3:d4:
c6:2a:8a:e4:7c:77:e3:95:cd:02:28:cb:c1:29:5d:67:9c:53:
7f:43:9f:06:9b:13:62:64:1a:46:92:ec:a3:6b:58:e0:21:5d:
6e:9d:02:3d:3e:82:18:f0:56:ea:2d:2a:3b:76:c8:2a:7c:f0:
e4:f8:8f:73:68:f6:6b:af:8d:2d:41:92:fd:ad:3a:db:99:c2:
74:98:d9:53:25:05:c4:55:4e:c2:e4:fd:9c:13:ee:0a:da:5c:
7f:74:26:bb:f6:53:25:37:de:45:ac:d8:66:4a:cc:bf:6a:d3:
2e:33:4b:d1:5a:b8:b1:a0:1d:d6:43:1e:68:1f:d4:4c:f5:db:
14:9d:5d:e8:06:9e:c7:95:15:7b:b4:e0:d4:84:2e:9e:36:35:
9a:73:b7:e4:5b:50:bd:29:77:1f:0f:78:a0:8f:11:5d:93:37:
26:94:a3:09:c5:b6:ba:87:76:be:40:a4:a0:11:f1:ed:0b:6a:
7f:b3:91:d6:10:bf:3a:96:ac:79:de:62:09:9d:d1:51:76:17:
33:c6:de:41:7e:00:94:c2:06:74:df:94:4a:37:dc:20:e9:bd:
da:6c:47:9d:27:80:0c:7a:8b:ff:dd:cc:93:1b:9a:c5:95:8f:
f9:d4:bf:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:49 2024 by rpki-client on console-ams.rpki-client.org