Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/lVTMCJSrt7GH0juPfCJCMhrN6U0.roa
File: lVTMCJSrt7GH0juPfCJCMhrN6U0.roa (raw, json)
Hash identifier: vDS6YSKqvAcz0zOd1Wf2bPKESbv/dnpkoXewcqMPsDQ=
Subject key identifier: 95:54:CC:08:94:AB:B7:B1:87:D2:3B:8F:7C:22:42:32:1A:CD:E9:4D
Certificate issuer: /CN=c59bd1e8c58f641bd944305f11c54efe5f3a0ce2
Certificate serial: 0189ABDC47F3DF0BE21A5CC4703D5DCAA027
Authority key identifier: C5:9B:D1:E8:C5:8F:64:1B:D9:44:30:5F:11:C5:4E:FE:5F:3A:0C:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/lVTMCJSrt7GH0juPfCJCMhrN6U0.roa
Signing time: Mon 31 Jul 2023 12:11:27 +0000
ROA not before: Mon 31 Jul 2023 12:11:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48011
IP address blocks: 185.217.143.0/24 maxlen: 24
213.232.203.0/24 maxlen: 24
185.227.139.0/24 maxlen: 24
185.227.137.0/24 maxlen: 24
185.227.138.0/24 maxlen: 24
185.227.136.0/24 maxlen: 24
45.93.168.0/22 maxlen: 24
45.89.236.0/22 maxlen: 24
213.217.31.0/24 maxlen: 24
193.163.72.0/24 maxlen: 24
185.211.79.0/24 maxlen: 24
185.182.105.0/24 maxlen: 24
2a0c:6600:1::/48 maxlen: 48
2a0c:6600::/48 maxlen: 48
2a0c:6600:3::/48 maxlen: 48
2a0c:6600:4::/48 maxlen: 48
2a0c:6600:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 31 Jul 2023 12:53:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ab:dc:47:f3:df:0b:e2:1a:5c:c4:70:3d:5d:ca:a0:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c59bd1e8c58f641bd944305f11c54efe5f3a0ce2
Validity
Not Before: Jul 31 12:11:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9554cc0894abb7b187d23b8f7c2242321acde94d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:49:b8:43:d5:f6:af:51:7a:3a:e1:22:6c:8a:
66:67:63:b9:53:58:90:65:01:85:61:f9:65:bb:c8:
54:1b:87:7b:92:7f:38:5b:ef:0f:53:75:42:1e:e7:
ad:9a:3c:fb:49:be:ba:f9:ac:d6:cd:d5:fd:ba:df:
5a:e2:fa:90:53:0d:bc:eb:c5:7a:c2:49:0c:2c:77:
4c:bb:ef:c7:e6:fa:94:f7:b3:f2:39:ca:4f:13:5d:
da:0a:d9:f6:a3:48:ac:56:d7:93:3a:d1:03:f1:de:
79:31:f6:0e:6b:23:5d:33:f3:48:fe:0b:d3:f8:11:
87:28:ca:2c:3a:f0:19:e0:9c:a0:80:6a:f3:6e:4e:
64:f9:3e:b0:5c:f5:a2:d3:dc:6d:3b:b2:f5:c8:34:
a8:7c:f7:fa:a2:57:11:63:bf:b4:6f:d8:08:63:fa:
88:5f:be:75:b4:05:a3:73:71:4d:ad:9b:13:23:e0:
17:92:bd:e5:72:2a:83:b6:4d:ed:10:c8:0a:f8:24:
1e:f1:ed:c0:be:5c:65:63:a4:6b:6f:45:4c:b0:77:
80:85:f9:c6:5d:b6:c6:bd:3d:53:d7:33:7a:0a:a9:
45:14:56:d0:ed:aa:b5:cc:88:a1:e6:1b:2d:66:de:
03:06:fa:88:19:8e:f6:c3:0d:9b:1f:2a:5b:82:d9:
25:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:54:CC:08:94:AB:B7:B1:87:D2:3B:8F:7C:22:42:32:1A:CD:E9:4D
X509v3 Authority Key Identifier:
keyid:C5:9B:D1:E8:C5:8F:64:1B:D9:44:30:5F:11:C5:4E:FE:5F:3A:0C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/lVTMCJSrt7GH0juPfCJCMhrN6U0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.236.0/22
45.93.168.0/22
185.182.105.0/24
185.211.79.0/24
185.217.143.0/24
185.227.136.0/22
193.163.72.0/24
213.217.31.0/24
213.232.203.0/24
IPv6:
2a0c:6600::-2a0c:6600:4:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
80:3a:90:8b:d8:4b:a6:b5:e5:1a:cc:44:11:c9:1e:6c:81:a6:
1d:91:08:4a:cc:21:df:4d:9e:63:fd:17:d1:dd:5d:7b:52:e7:
c5:e3:d2:27:2f:47:49:32:25:83:79:c7:58:7c:a7:8c:67:0a:
e3:29:39:f6:67:0d:75:0a:eb:58:91:59:02:47:88:cf:27:6b:
2a:5f:75:e8:f8:4d:d7:45:38:13:33:ce:37:08:a6:7d:9d:a6:
c8:05:61:99:19:bf:e6:b9:ed:34:a2:fb:47:99:f1:c5:5c:d9:
38:37:e3:76:8a:99:8a:74:e0:86:c9:b0:0d:3a:d3:7f:d2:7f:
8c:c7:c3:ca:8c:84:7d:f4:aa:a8:a4:46:a4:35:e6:99:51:b1:
a9:b9:92:eb:e1:d7:49:ed:0e:0c:3a:4a:e5:4c:dd:7d:0e:87:
5a:43:3e:0f:8d:53:c7:f8:2a:7f:0d:e7:df:88:68:a1:63:79:
dd:a4:69:31:f7:cc:fb:9d:6e:70:1a:66:3e:63:b1:bf:8a:9a:
9b:fa:16:8d:93:47:d5:48:7f:cb:cb:c2:51:6c:e7:d5:e5:e6:
0c:12:7b:9d:cb:9b:7f:f8:2d:6b:fb:7a:51:d0:34:e0:b7:62:
b4:da:01:1e:bc:27:6d:a4:47:f9:c9:b0:44:07:71:93:20:e7:
9e:49:18:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:13 2024 by rpki-client on console-ams.rpki-client.org