Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/LCqjrKRtreZ-QLP-ae6djaIV_Kg.roa
File: LCqjrKRtreZ-QLP-ae6djaIV_Kg.roa (raw, json)
Hash identifier: 0qyXjmtt4d2QTYeAEKtnf3PKz/LNZr3quk2vw8VwMw8=
Subject key identifier: 2C:2A:A3:AC:A4:6D:AD:E6:7E:40:B3:FE:69:EE:9D:8D:A2:15:FC:A8
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 018C4AAD9C9DACD279492FA5B5ACAB6AFE7F
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/LCqjrKRtreZ-QLP-ae6djaIV_Kg.roa
Signing time: Fri 08 Dec 2023 18:25:40 +0000
ROA not before: Fri 08 Dec 2023 18:25:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34450
IP address blocks: 93.114.187.0/24 maxlen: 24
86.106.80.0/24 maxlen: 24
89.43.45.0/24 maxlen: 24
86.106.104.0/24 maxlen: 24
89.34.8.0/21 maxlen: 21
89.43.73.0/24 maxlen: 24
89.39.252.0/24 maxlen: 24
188.213.18.0/24 maxlen: 24
188.240.14.0/24 maxlen: 24
85.204.125.0/24 maxlen: 24
85.204.127.0/24 maxlen: 24
93.114.99.0/24 maxlen: 24
93.113.158.0/24 maxlen: 24
89.33.163.0/24 maxlen: 24
89.37.136.0/24 maxlen: 24
93.114.55.0/24 maxlen: 24
188.215.72.0/23 maxlen: 24
188.215.73.0/24 maxlen: 24
2a05:b680:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 20 Dec 2023 11:45:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:4a:ad:9c:9d:ac:d2:79:49:2f:a5:b5:ac:ab:6a:fe:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Dec 8 18:25:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2c2aa3aca46dade67e40b3fe69ee9d8da215fca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d9:d1:65:c5:ab:3a:35:bf:87:90:f5:c5:6c:
51:58:33:a6:86:cf:f9:ac:fb:e8:9d:25:62:c6:fd:
47:12:40:9d:48:2c:66:92:45:c4:ca:c6:89:86:35:
84:6b:a8:da:18:d9:13:cc:95:a2:de:af:da:97:87:
95:e3:39:a6:de:bc:6a:c9:05:ea:1d:08:d9:25:18:
36:f2:b1:e7:01:ef:e6:25:71:19:36:af:7c:96:6e:
fe:9e:e8:71:bd:1b:1b:70:55:7a:87:61:3d:1a:95:
20:a2:17:2c:f6:93:cf:fe:4d:99:96:94:38:e5:15:
90:86:89:60:bb:03:f7:97:ca:e7:5c:1f:ed:a7:3d:
e3:be:2a:67:b2:5b:a3:b7:ea:1b:c2:3e:31:9c:ec:
6b:b7:ed:15:b4:09:5c:33:bd:74:34:81:d4:66:29:
31:a8:08:44:4a:e2:32:38:d9:23:e2:5f:26:0a:9d:
88:ac:b0:db:a5:fd:0a:0a:91:d0:41:c7:b5:89:60:
b2:d2:32:23:27:69:b0:90:5a:de:e6:ab:e6:36:7c:
ad:06:b9:4b:59:09:d7:44:a3:99:5e:cd:65:bd:a5:
a4:7a:08:90:ed:07:a9:cc:9d:cf:70:b3:cd:8d:7a:
9c:93:09:b1:ef:b4:85:6e:42:bb:2f:7e:95:db:9f:
f5:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:2A:A3:AC:A4:6D:AD:E6:7E:40:B3:FE:69:EE:9D:8D:A2:15:FC:A8
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/LCqjrKRtreZ-QLP-ae6djaIV_Kg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.125.0/24
85.204.127.0/24
86.106.80.0/24
86.106.104.0/24
89.33.163.0/24
89.34.8.0/21
89.37.136.0/24
89.39.252.0/24
89.43.45.0/24
89.43.73.0/24
93.113.158.0/24
93.114.55.0/24
93.114.99.0/24
93.114.187.0/24
188.213.18.0/24
188.215.72.0/23
188.240.14.0/24
IPv6:
2a05:b680:1::/48
Signature Algorithm: sha256WithRSAEncryption
d6:3b:d5:53:29:63:f1:9e:4f:4c:da:ab:38:84:c2:cf:ce:c9:
0c:58:ed:4c:86:48:6d:5e:89:66:4f:02:8d:2a:de:cb:58:df:
d5:25:5f:18:bc:24:7f:f7:14:72:21:09:b6:d3:e7:4c:46:4f:
3c:6d:0a:d6:5a:24:bf:eb:88:9e:72:32:09:81:65:1c:b8:db:
af:85:8c:d7:16:95:4f:bd:cf:63:71:08:43:7b:e9:e9:17:4a:
01:31:62:12:80:2c:c9:4b:be:ea:ee:9e:56:9e:f3:98:92:eb:
bf:3d:3e:30:3b:c0:c4:0f:81:b0:59:71:23:06:b9:53:42:4c:
2d:35:00:ea:1c:75:10:57:d4:0d:b2:97:ee:61:5f:b5:c0:3b:
57:91:fa:7e:44:98:c8:55:1c:0e:31:1f:f5:0c:f8:37:92:ff:
58:81:a8:b0:8a:41:29:35:73:77:ab:31:de:c5:01:b9:28:77:
67:78:61:ba:0d:7b:75:ce:7b:a7:70:c5:da:84:14:47:aa:d0:
0f:e6:d6:98:0d:ad:c6:43:2a:7f:eb:fb:49:8a:9d:8a:32:4c:
73:c9:28:fb:72:56:07:4e:99:bb:46:aa:2d:56:b3:bd:91:80:
ca:8c:dd:de:68:75:5b:29:94:fb:5b:24:f1:9f:99:8e:94:06:
c3:2b:0f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:29 2024 by rpki-client on console-fra.rpki-client.org