Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/LiCKa19efOX76qKf0VcredtYqbc.roa
File: LiCKa19efOX76qKf0VcredtYqbc.roa (raw, json)
Hash identifier: D7hEdwE2GE6wOhL2wK87gJYcMbXmJxAG8L/LQ1eFz6E=
Subject key identifier: 2E:20:8A:6B:5F:5E:7C:E5:FB:EA:A2:9F:D1:57:2B:79:DB:58:A9:B7
Certificate issuer: /CN=335ca521362226d03c1829003d81d498aa838f33
Certificate serial: 018C0717ADCD9D85E2DC661D7904597F692A
Authority key identifier: 33:5C:A5:21:36:22:26:D0:3C:18:29:00:3D:81:D4:98:AA:83:8F:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M1ylITYiJtA8GCkAPYHUmKqDjzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/LiCKa19efOX76qKf0VcredtYqbc.roa
Signing time: Sat 25 Nov 2023 15:27:21 +0000
ROA not before: Sat 25 Nov 2023 15:27:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209257
IP address blocks: 185.186.222.0/24 maxlen: 24
185.186.221.0/24 maxlen: 24
2a11:1e40:ba5e::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:07:17:ad:cd:9d:85:e2:dc:66:1d:79:04:59:7f:69:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=335ca521362226d03c1829003d81d498aa838f33
Validity
Not Before: Nov 25 15:27:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2e208a6b5f5e7ce5fbeaa29fd1572b79db58a9b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:52:fd:45:b5:5b:0a:e9:f9:35:fe:41:0a:e7:
a3:99:68:96:46:77:08:42:c3:ad:16:d3:ab:56:e4:
30:c0:f8:c7:90:ae:38:07:d3:3d:b7:04:cd:0c:9a:
0b:e2:c2:04:14:d3:bc:ee:a3:b4:72:11:c7:f2:b3:
c5:91:0d:a2:b0:fc:4d:68:6f:b7:2c:1b:ab:f4:fd:
de:75:7f:ac:92:80:01:6d:fd:b6:35:2b:54:af:6a:
ad:80:4f:5c:2f:c5:5a:64:93:bd:3b:69:a9:f6:ce:
ef:2a:b6:dd:9c:16:3f:16:0c:78:e1:ff:38:b3:f0:
3b:ba:5f:51:66:05:c8:53:e3:5c:f2:a8:aa:18:d6:
39:d3:66:6f:c1:8b:35:2a:2a:b7:87:7c:8c:e0:ca:
db:90:83:48:47:44:3e:2b:bd:f0:61:9f:93:ba:a8:
0a:98:68:70:ce:ce:25:08:a4:31:a4:6f:23:24:e0:
08:8b:75:3d:9c:7f:ac:54:4a:80:ee:cb:87:5d:4c:
d6:76:60:b4:e2:0c:bb:c9:89:0d:bd:23:22:50:09:
ee:13:a5:96:c7:16:cc:f3:b8:22:10:5e:cb:b7:ba:
83:e3:54:07:6e:d8:64:c4:69:15:9b:98:c7:39:aa:
b2:54:07:e5:e6:dc:7b:8b:4a:56:60:f2:dd:47:c8:
b0:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:20:8A:6B:5F:5E:7C:E5:FB:EA:A2:9F:D1:57:2B:79:DB:58:A9:B7
X509v3 Authority Key Identifier:
keyid:33:5C:A5:21:36:22:26:D0:3C:18:29:00:3D:81:D4:98:AA:83:8F:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1ylITYiJtA8GCkAPYHUmKqDjzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/LiCKa19efOX76qKf0VcredtYqbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.186.221.0-185.186.222.255
IPv6:
2a11:1e40:ba5e::/48
Signature Algorithm: sha256WithRSAEncryption
6a:69:28:7c:7a:5a:cd:03:a3:74:86:91:fa:ac:a6:2b:73:a9:
e0:cc:1b:e5:7a:b5:c5:79:5f:25:2a:06:c8:d5:84:8b:4d:1a:
16:1b:7b:09:51:3b:e6:c0:ea:4d:07:d9:cf:14:08:e5:66:ae:
16:a7:de:f2:40:34:93:cd:93:b5:c5:cb:5f:6a:33:1f:67:bd:
5e:fc:92:73:37:c6:26:69:c5:61:16:54:22:21:51:54:6e:26:
77:b7:3a:75:0a:d6:33:f7:8e:f5:7c:a6:cb:26:37:f2:81:55:
3a:cc:5a:7e:e0:49:59:b9:e2:8b:f7:02:38:e5:33:1a:80:16:
33:be:8e:23:ec:e8:0f:c8:c1:b5:ce:58:e5:dc:b9:cd:00:63:
93:82:cc:f9:88:99:27:20:9a:b2:55:2d:06:a8:6d:13:6b:c9:
02:a1:b2:db:b3:ef:29:c5:a6:3c:27:e1:22:15:bf:d0:09:9b:
30:f1:cf:8e:f8:d4:f7:68:09:94:92:b7:bc:d0:63:d5:8b:87:
13:09:ed:38:0c:a7:2f:5a:84:c0:1e:56:12:c0:98:2e:09:9c:
c3:06:12:23:5a:20:47:1c:d2:a2:4c:e9:35:d2:b9:53:84:b1:
ad:d2:c4:04:1b:eb:7c:e0:ce:c6:76:e6:77:3f:40:e6:e7:8d:
f4:42:aa:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:49 2024 by rpki-client on console-ams.rpki-client.org