Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/LC1L6mi93_mYy22U7lP7GZ2DYes.roa
File: LC1L6mi93_mYy22U7lP7GZ2DYes.roa (raw, json)
Hash identifier: NMklCbiFnpkmu9WIp7Tchu2UDHTNk77Omuhjg++MiZM=
Subject key identifier: 2C:2D:4B:EA:68:BD:DF:F9:98:CB:6D:94:EE:53:FB:19:9D:83:61:EB
Certificate issuer: /CN=87be093097097c4457ff5aa3e5893c8c15432612
Certificate serial: 018BA05DFD94916B4742B6BCFC8D81EF1502
Authority key identifier: 87:BE:09:30:97:09:7C:44:57:FF:5A:A3:E5:89:3C:8C:15:43:26:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/LC1L6mi93_mYy22U7lP7GZ2DYes.roa
Signing time: Sun 05 Nov 2023 16:43:16 +0000
ROA not before: Sun 05 Nov 2023 16:43:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39409
IP address blocks: 37.153.156.0/24 maxlen: 24
185.216.8.0/24 maxlen: 24
2001:678:d58::/48 maxlen: 48
2001:678:20c::/48 maxlen: 48
2a10:9906::/48 maxlen: 48
2a10:9906:1002::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 07 Nov 2023 09:49:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a0:5d:fd:94:91:6b:47:42:b6:bc:fc:8d:81:ef:15:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87be093097097c4457ff5aa3e5893c8c15432612
Validity
Not Before: Nov 5 16:43:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2c2d4bea68bddff998cb6d94ee53fb199d8361eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a4:8f:bb:2a:41:cc:68:89:48:9a:30:8f:d1:
70:9d:a9:be:13:04:9f:e7:7f:48:b2:63:66:5a:56:
d2:68:64:7f:b1:d6:da:d9:13:7c:97:98:bb:39:d2:
43:5f:40:e3:c0:f9:f0:dd:24:34:11:43:fe:27:e7:
ff:03:23:9a:b5:1a:98:ee:d2:f1:20:44:dc:af:26:
7d:9c:ae:bb:41:fe:89:8e:59:ac:91:bf:85:a8:6c:
70:ec:c4:8d:cb:56:38:e7:4d:3a:f1:b7:80:c8:14:
b8:21:e9:d1:99:7c:44:7c:e1:e9:09:94:7f:50:02:
91:1e:69:6a:ff:0f:28:9d:e1:bd:27:90:6c:17:b0:
6c:ff:d8:00:39:c1:92:4c:09:6e:a9:03:29:d9:75:
c7:35:31:4a:69:a0:8b:9c:5a:1f:c3:a6:07:ed:0e:
f9:d7:5c:7c:90:95:a9:fe:62:ac:c0:cd:fb:53:6a:
6a:f1:9a:30:04:49:1d:0c:38:2f:11:80:64:e5:19:
d9:17:2b:95:d3:51:82:30:79:c3:43:a2:c9:80:21:
e9:4f:d0:a3:c8:5c:e5:d5:f3:19:8f:92:59:6b:a4:
b4:9a:43:84:74:e6:fc:ba:56:7a:fd:a4:cf:b4:e4:
e4:c0:e5:41:20:a9:e6:5b:26:88:cf:7c:69:af:f9:
fb:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:2D:4B:EA:68:BD:DF:F9:98:CB:6D:94:EE:53:FB:19:9D:83:61:EB
X509v3 Authority Key Identifier:
keyid:87:BE:09:30:97:09:7C:44:57:FF:5A:A3:E5:89:3C:8C:15:43:26:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/LC1L6mi93_mYy22U7lP7GZ2DYes.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.153.156.0/24
185.216.8.0/24
IPv6:
2001:678:20c::/48
2001:678:d58::/48
2a10:9906::/48
2a10:9906:1002::/48
Signature Algorithm: sha256WithRSAEncryption
71:d4:fc:42:25:a6:9c:f5:7c:f8:cd:52:34:3b:f6:b7:c8:6b:
76:5b:dd:81:d1:04:01:db:f9:64:a2:f9:c8:21:cb:a8:ee:18:
3c:8e:c3:d2:00:01:2e:41:1a:64:2c:8c:01:25:3e:17:00:34:
86:03:f9:06:4b:02:c1:a7:44:8d:0f:40:14:d4:d3:4e:f6:f4:
22:0d:c3:29:a0:73:7e:e2:95:50:bc:98:4d:1d:f3:43:00:da:
ff:c1:09:7d:a3:af:76:62:58:af:02:80:aa:81:a9:09:be:21:
d7:af:7a:23:44:00:b9:14:47:c0:fc:2e:db:74:4d:0c:28:8a:
6c:39:53:1e:70:5c:11:e4:86:4e:12:b6:16:96:96:ec:ed:20:
aa:04:3c:e7:73:06:08:c1:06:a7:24:3e:78:ff:4d:a3:8d:6b:
e5:86:dd:06:a3:fe:66:9d:d9:40:f1:e4:0d:d7:a9:3e:15:5d:
91:0e:32:c3:f0:07:15:0e:9e:0e:e9:8e:24:2f:41:f0:3b:f5:
d7:64:c4:17:00:7c:07:40:12:5a:4a:92:cb:77:d8:93:ab:99:
5e:72:4f:a3:e6:35:22:66:33:ab:cc:0b:54:48:f2:7a:64:f2:
8f:dd:95:26:f8:79:21:fc:1a:c5:60:d8:57:b2:3c:b7:3c:8f:
86:1c:f1:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:45 2024 by rpki-client on console-ams.rpki-client.org