Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/LhPhiVp3XLYYPuGqh3jtgjrqsn4.roa
File: LhPhiVp3XLYYPuGqh3jtgjrqsn4.roa (raw, json)
Hash identifier: 6zdBiAZE+OyiUoj96gcnUDymEdPzi7lJJnVBGW6Qwuk=
Subject key identifier: 2E:13:E1:89:5A:77:5C:B6:18:3E:E1:AA:87:78:ED:82:3A:EA:B2:7E
Certificate issuer: /CN=779fbaaac6541ab318529eb025613c6520e47646
Certificate serial: 018F4D89F08461221E956BBFA76A444C418A
Authority key identifier: 77:9F:BA:AA:C6:54:1A:B3:18:52:9E:B0:25:61:3C:65:20:E4:76:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/LhPhiVp3XLYYPuGqh3jtgjrqsn4.roa
Signing time: Mon 06 May 2024 10:53:56 +0000
ROA not before: Mon 06 May 2024 10:53:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20836
IP address blocks: 185.142.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 07 May 2024 05:05:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:4d:89:f0:84:61:22:1e:95:6b:bf:a7:6a:44:4c:41:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=779fbaaac6541ab318529eb025613c6520e47646
Validity
Not Before: May 6 10:53:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2e13e1895a775cb6183ee1aa8778ed823aeab27e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f9:12:58:0d:cf:93:22:be:37:83:e1:e9:f8:
c9:6b:14:8e:60:8d:72:69:d8:18:59:ff:7d:22:39:
e1:9e:99:d7:0e:bb:3c:64:e6:a5:4e:80:52:86:e7:
2b:78:63:4c:f8:8c:5a:18:a6:9e:9e:29:d2:81:fe:
09:37:12:57:cd:a4:b5:35:be:48:52:ed:04:a4:1c:
0b:d1:56:29:66:2c:24:da:96:af:4c:cf:ad:a9:b2:
19:76:64:96:a3:39:c2:97:89:2e:ae:7d:1a:9d:c0:
9c:34:34:f9:2d:c4:e4:24:49:f1:2e:c9:e3:5d:f1:
96:ef:8f:ac:6e:f8:b1:d6:ec:85:78:a1:82:5e:62:
12:dd:27:0d:d3:28:e6:d1:15:0d:ca:be:23:e8:87:
3a:33:da:5b:e9:91:f9:e7:f5:61:55:5f:5b:be:d4:
8d:22:05:c5:a4:8e:c0:73:54:7d:2d:bd:ef:ac:73:
4a:e3:88:e0:2f:b3:60:2c:14:c7:eb:04:5a:7a:9d:
8a:1f:23:01:11:45:52:84:1c:9b:b9:24:12:c4:7f:
08:09:a8:fa:e4:aa:9f:8b:28:36:04:34:39:af:f2:
8f:0e:58:75:c2:d4:8d:55:00:45:b1:8b:ca:5c:71:
37:af:0c:a3:09:dd:98:1a:cc:87:a5:db:5d:3d:ee:
ad:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:13:E1:89:5A:77:5C:B6:18:3E:E1:AA:87:78:ED:82:3A:EA:B2:7E
X509v3 Authority Key Identifier:
keyid:77:9F:BA:AA:C6:54:1A:B3:18:52:9E:B0:25:61:3C:65:20:E4:76:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/LhPhiVp3XLYYPuGqh3jtgjrqsn4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.142.120.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:6c:6e:f8:d3:22:f1:3e:4d:ba:82:6b:1b:8a:bb:cb:f8:b7:
92:55:e2:8f:bf:70:72:3b:35:d4:58:52:17:f6:9c:49:2e:75:
d7:0a:42:55:e9:f7:c3:c1:d6:e4:9a:60:80:cd:59:cf:96:c6:
f5:d7:81:42:2e:a5:49:93:d2:51:fa:6a:6d:ec:ad:91:0d:63:
dd:0c:b5:31:92:27:d4:7a:22:3f:55:fc:22:01:17:c2:2a:cd:
d1:dc:8b:e5:5a:07:c4:d5:24:27:aa:56:af:83:6e:18:5e:d7:
5b:7a:03:a4:ec:d6:c1:d2:0b:77:fe:de:a9:63:7b:1c:07:0c:
d1:a1:04:99:5b:7a:21:d7:06:81:cd:20:7a:74:67:39:71:a0:
8b:c0:a4:f6:c0:66:43:f7:5e:12:22:23:ad:a2:7c:37:49:0d:
fb:70:d8:ba:e9:f8:2b:77:cf:3c:74:94:13:2c:6f:95:bc:ae:
5c:4b:c3:fc:f0:6b:b6:6d:c9:34:70:c2:b9:12:a0:ca:04:56:
60:ec:a4:28:7d:77:f1:27:79:33:88:2c:3f:11:62:e7:c7:da:
d1:69:40:a9:75:47:82:50:00:8a:36:fb:80:ba:48:31:78:47:
af:b4:70:7b:6e:b3:c5:9b:e1:09:77:2d:f9:ee:a7:94:ed:3b:
cb:6a:2f:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:09 2024 by rpki-client on console-ams.rpki-client.org