Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/LiVIKbTdEd-QhUP5GR3dhx5X_IY.roa
File: LiVIKbTdEd-QhUP5GR3dhx5X_IY.roa (raw, json)
Hash identifier: PWZZIagvQJXSWswVLFf1xKHHYlUBgTkm1Z2fGjsLZMg=
Subject key identifier: 2E:25:48:29:B4:DD:11:DF:90:85:43:F9:19:1D:DD:87:1E:57:FC:86
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 0188206D3AB6AA2A3926F43AB57B7F878FE9
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/LiVIKbTdEd-QhUP5GR3dhx5X_IY.roa
Signing time: Mon 15 May 2023 17:20:09 +0000
ROA not before: Mon 15 May 2023 17:20:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 77.36.120.0/21 maxlen: 21
185.55.4.0/22 maxlen: 23
176.103.240.0/21 maxlen: 22
81.161.0.0/22 maxlen: 22
185.55.140.0/22 maxlen: 22
185.55.140.0/23 maxlen: 23
185.55.142.0/23 maxlen: 23
64.43.112.0/22 maxlen: 22
64.43.124.0/22 maxlen: 22
176.110.216.0/22 maxlen: 22
176.110.216.0/21 maxlen: 21
176.110.220.0/22 maxlen: 22
176.102.120.0/21 maxlen: 21
176.102.120.0/22 maxlen: 22
176.102.124.0/22 maxlen: 22
193.36.204.0/22 maxlen: 22
176.96.88.0/22 maxlen: 22
109.207.136.0/22 maxlen: 22
176.116.232.0/22 maxlen: 22
91.246.176.0/21 maxlen: 21
46.173.240.0/21 maxlen: 21
93.120.16.0/21 maxlen: 21
178.212.184.0/22 maxlen: 22
178.212.184.0/21 maxlen: 21
178.212.188.0/22 maxlen: 22
91.233.0.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 15 May 2023 17:26:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:20:6d:3a:b6:aa:2a:39:26:f4:3a:b5:7b:7f:87:8f:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: May 15 17:20:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2e254829b4dd11df908543f9191ddd871e57fc86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b0:45:df:7f:b6:45:61:b4:8f:25:3f:d6:9b:
32:c9:17:b6:63:1e:d0:09:f2:3f:9c:2c:87:c6:f2:
0b:95:83:48:67:4b:97:69:0a:b8:8c:68:4b:79:f2:
b9:fc:f7:01:0f:19:01:22:fa:1b:67:c5:bb:54:44:
dd:f8:60:89:84:82:1f:43:a6:04:33:f9:5e:15:1c:
49:9a:ef:f0:c4:88:83:a9:84:51:9a:73:a0:ca:f1:
3b:5e:9a:c0:c5:d3:0d:56:d6:1c:a8:38:6b:e4:db:
0a:84:69:8d:b2:01:64:5e:9a:20:a3:0f:1f:ff:11:
e3:1a:6f:d3:28:cb:5f:aa:08:55:b5:ab:69:a4:98:
29:28:9d:d3:e2:9e:fb:65:79:3e:02:c9:6c:de:d5:
d1:b6:60:c0:2a:01:bb:a6:fa:3f:d8:95:fd:06:15:
1a:19:15:16:c6:ec:94:a3:70:4a:28:db:d8:72:5a:
66:fe:46:5d:ae:5a:dc:fa:8c:97:0f:c9:61:ec:c8:
03:90:0d:7b:3d:9c:d9:ba:f9:9a:60:f1:46:29:e4:
a4:dd:14:e0:79:7c:05:47:57:25:f3:f8:9f:a5:46:
96:6c:8c:b6:f6:85:2f:e2:df:e1:98:13:b3:ad:e6:
17:8d:12:0f:9e:fb:db:d6:1a:59:8d:bb:49:d2:f5:
2c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:25:48:29:B4:DD:11:DF:90:85:43:F9:19:1D:DD:87:1E:57:FC:86
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/LiVIKbTdEd-QhUP5GR3dhx5X_IY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.173.240.0/21
64.43.112.0/22
64.43.124.0/22
77.36.120.0/21
81.161.0.0/22
91.233.0.0/23
91.246.176.0/21
93.120.16.0/21
109.207.136.0/22
176.96.88.0/22
176.102.120.0/21
176.103.240.0/21
176.110.216.0/21
176.116.232.0/22
178.212.184.0/21
185.55.4.0/22
185.55.140.0/22
193.36.204.0/22
Signature Algorithm: sha256WithRSAEncryption
43:c7:bf:98:28:fb:ca:02:1e:bf:aa:a4:ea:c4:d6:52:ca:8b:
44:2e:82:34:39:3f:c7:c4:d0:aa:c0:bf:bf:dc:e2:2e:66:10:
e4:19:cf:ef:0d:60:a4:ec:83:b8:92:ed:62:59:f5:2c:85:c0:
78:9e:3f:84:92:91:29:04:68:54:73:2d:a7:8a:97:b1:f2:80:
d9:7b:51:0c:15:40:1b:c6:b4:50:9c:57:78:45:16:5a:91:80:
33:a9:4b:c8:98:8c:c3:a2:84:d5:ca:b8:0e:03:82:7f:aa:83:
5d:73:88:6d:83:8c:bf:20:f8:aa:ce:d1:a8:24:86:ea:30:93:
8c:23:4e:25:48:60:8b:3c:65:f4:74:88:d5:43:a3:5d:05:f4:
0f:94:50:60:2f:6c:ac:90:3b:ee:bb:5e:d1:33:17:a1:f8:83:
50:e7:dc:fd:0a:3e:15:1a:22:db:d5:f6:36:72:0a:af:3a:fa:
07:11:85:28:50:fa:45:88:51:e3:59:6e:0a:57:46:91:65:08:
ab:99:7d:bf:06:6f:de:7b:38:77:91:0e:14:17:7e:6c:1a:d2:
3e:7d:d4:27:d0:31:1e:c7:65:ca:bd:3f:66:6a:eb:37:02:e9:
ff:71:ef:55:79:ea:33:ce:09:94:78:a5:69:75:b9:74:1b:d2:
5b:d6:d3:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:57 2024 by rpki-client on console-fra.rpki-client.org