Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/Lgs9-CGdI1nWTA2QiK3RogTF2BY.roa
File: Lgs9-CGdI1nWTA2QiK3RogTF2BY.roa (raw, json)
Hash identifier: HNZOSWMyY2RL28mczptbZmF3KOXvtP60I96tYPMONU8=
Subject key identifier: 2E:0B:3D:F8:21:9D:23:59:D6:4C:0D:90:88:AD:D1:A2:04:C5:D8:16
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 018CC2DB2DAB193587F8F32DEE0DEF405D5D
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/Lgs9-CGdI1nWTA2QiK3RogTF2BY.roa
Signing time: Mon 01 Jan 2024 02:29:53 +0000
ROA not before: Mon 01 Jan 2024 02:29:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60581
IP address blocks: 91.242.118.0/24 maxlen: 24
91.242.119.0/24 maxlen: 24
185.173.244.0/22 maxlen: 24
185.173.246.0/24 maxlen: 24
185.173.245.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 16 May 2024 16:05:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:2d:ab:19:35:87:f8:f3:2d:ee:0d:ef:40:5d:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jan 1 02:29:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2e0b3df8219d2359d64c0d9088add1a204c5d816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ce:55:2b:51:6c:95:26:be:06:b8:2c:e7:b8:
5e:8c:f3:d5:41:16:3a:8d:9a:46:f7:25:b0:18:5e:
80:b5:bd:42:43:62:de:f7:d7:04:63:62:67:33:5c:
4b:75:7b:55:50:e0:4b:ac:18:40:72:0c:4d:37:07:
9c:7f:d5:70:6b:a0:5f:27:86:4c:fc:04:41:b9:47:
ad:ba:ad:76:5e:dd:77:15:72:98:35:b3:42:75:db:
b6:87:bc:7e:be:5b:f0:22:21:2b:d1:a1:4f:e9:be:
eb:03:37:e3:ff:a5:ae:7f:52:9d:d1:c7:96:7b:e8:
af:d6:70:13:3f:d4:0f:33:fc:9b:12:06:a0:08:bc:
5e:39:99:c0:33:d9:de:ae:fc:c7:9e:33:3a:3b:34:
1a:28:f4:85:d5:fd:82:9b:b9:08:0f:74:54:9f:98:
94:37:37:1c:aa:62:9e:28:76:f5:ef:ec:3e:28:8e:
25:19:0e:4c:01:b3:67:58:98:f2:ca:54:84:a7:25:
c5:27:63:67:87:fa:97:be:49:b2:ef:97:78:cc:07:
88:59:b6:1c:4c:3b:c6:38:17:a6:2e:87:08:92:df:
14:c6:9e:34:62:b6:ca:fe:ec:71:9a:9e:d0:08:27:
81:42:dc:33:f1:be:2c:37:75:94:f6:b5:87:91:56:
03:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:0B:3D:F8:21:9D:23:59:D6:4C:0D:90:88:AD:D1:A2:04:C5:D8:16
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/Lgs9-CGdI1nWTA2QiK3RogTF2BY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.118.0/23
185.173.244.0/22
Signature Algorithm: sha256WithRSAEncryption
84:3d:8f:9f:cf:30:67:40:b8:50:61:97:b8:2f:1b:e4:bf:89:
46:cf:0d:59:14:3d:9f:b5:2b:c1:2f:bd:ca:7a:96:81:9e:6c:
bb:60:9d:92:71:5f:86:9a:d6:6f:c7:b8:3d:9b:21:1b:99:12:
4a:a4:6a:a8:7e:5e:8c:83:11:0d:3a:f0:f9:35:a9:f5:eb:cf:
cb:65:21:a6:cb:5d:11:d7:e8:88:60:47:5b:41:cf:80:30:1d:
bd:57:74:b6:c3:94:94:ff:15:9e:99:f4:bf:25:31:ca:36:9d:
fc:3d:8d:e5:93:32:c8:51:02:7d:f9:ee:7e:4d:5b:e7:d8:e2:
cf:a9:cc:6c:f7:c6:43:20:e1:38:f5:5e:7f:b8:a6:72:22:e1:
6e:75:90:27:c8:96:c1:dd:19:de:2f:51:ba:25:c6:d4:f0:a8:
a6:d2:f1:29:a4:9e:3d:cb:60:59:09:37:d2:28:d0:25:fb:37:
95:5e:d5:01:20:2c:44:36:37:d6:ab:c3:23:8f:bd:3d:34:c8:
6f:c3:ee:22:15:75:64:1c:60:6f:bc:26:e2:ba:5c:a0:b9:3b:
31:65:5f:f1:76:fa:4d:3d:d0:fb:24:23:66:56:d9:7c:46:25:
d9:9d:58:e3:4d:3c:f2:d0:7f:c1:14:3e:3e:1a:5b:78:1e:7c:
1a:9c:c7:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:41 2024 by rpki-client on console-fra.rpki-client.org