Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/LA9wljZLo_lLcZnC7i-LOXrbhDI.roa
File: LA9wljZLo_lLcZnC7i-LOXrbhDI.roa (raw, json)
Hash identifier: Wg3vPWAPqxml3DDqGwpa0zMw4d2QIGn0V53l6m8ExFI=
Subject key identifier: 2C:0F:70:96:36:4B:A3:F9:4B:71:99:C2:EE:2F:8B:39:7A:DB:84:32
Certificate issuer: /CN=4f8122b0945ecccb1f2fb9912fbd86aa04a61987
Certificate serial: 018571D78B0EE52A36EDA606D7DF3732DDF2
Authority key identifier: 4F:81:22:B0:94:5E:CC:CB:1F:2F:B9:91:2F:BD:86:AA:04:A6:19:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4EisJRezMsfL7mRL72GqgSmGYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/LA9wljZLo_lLcZnC7i-LOXrbhDI.roa
Signing time: Mon 02 Jan 2023 09:37:09 +0000
ROA not before: Mon 02 Jan 2023 09:37:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197289
IP address blocks: 95.215.132.0/22 maxlen: 22
185.18.160.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:8b:0e:e5:2a:36:ed:a6:06:d7:df:37:32:dd:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8122b0945ecccb1f2fb9912fbd86aa04a61987
Validity
Not Before: Jan 2 09:37:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2c0f7096364ba3f94b7199c2ee2f8b397adb8432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d1:38:2c:a7:32:56:d2:c8:88:e2:d7:99:69:
a1:fc:ca:e4:43:ee:25:04:fa:95:25:eb:b8:58:63:
ac:9c:0e:2c:92:8b:aa:46:63:c2:60:4b:f1:6e:0c:
aa:11:df:8c:e5:df:3f:50:b3:1c:a3:c7:74:37:68:
4a:ff:da:23:d6:24:4e:d0:bf:83:ee:48:ff:a7:c4:
d8:aa:56:2e:96:c4:2a:41:dd:be:a8:d4:90:36:99:
b3:a3:1e:86:f0:e1:80:e5:72:78:66:40:6c:c3:26:
1e:2b:d8:ed:c6:88:70:38:c7:da:87:f7:6b:20:4b:
4b:2d:27:91:5e:16:e5:d4:d0:6a:7c:85:eb:80:e4:
7c:7a:85:e2:63:05:03:20:61:5d:e7:59:91:f6:31:
1e:a1:00:0c:39:dc:8e:e6:31:f2:6a:ae:ff:db:37:
99:10:09:07:80:bb:f2:fb:2b:8d:e1:49:df:df:de:
a5:75:8f:08:eb:8f:2c:de:8e:db:bb:d7:e2:83:6c:
9b:1f:2d:c3:30:e9:a0:72:b3:cf:06:c6:5f:e5:02:
de:cf:44:e6:9f:37:c7:8e:c4:1f:25:a5:a4:89:6a:
61:07:6f:4a:21:af:d9:19:70:ca:c2:39:fe:72:56:
3b:18:5e:6d:2b:08:cc:97:0c:4b:54:98:d6:82:60:
17:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:0F:70:96:36:4B:A3:F9:4B:71:99:C2:EE:2F:8B:39:7A:DB:84:32
X509v3 Authority Key Identifier:
keyid:4F:81:22:B0:94:5E:CC:CB:1F:2F:B9:91:2F:BD:86:AA:04:A6:19:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4EisJRezMsfL7mRL72GqgSmGYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/LA9wljZLo_lLcZnC7i-LOXrbhDI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.215.132.0/22
185.18.160.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:f8:0f:1a:65:ff:eb:80:35:48:b6:64:f8:8a:ff:ff:f0:e4:
84:1c:6e:44:8c:fd:9a:e1:9d:65:b0:94:6c:61:78:76:01:64:
c4:92:34:c3:99:91:f4:01:8c:83:46:79:7c:52:61:eb:9c:79:
d1:de:83:05:ce:8e:83:36:1e:2d:ce:09:08:de:25:c7:88:fe:
14:3c:9f:a1:3d:b7:2c:7c:af:b3:f1:3f:27:d0:53:c9:de:aa:
a4:14:f1:f3:78:2b:ee:b5:91:ec:03:b1:70:e7:c2:4b:9f:71:
0f:35:e1:a8:94:f8:53:10:dc:fb:32:08:65:28:6c:4a:4d:94:
8b:6e:eb:31:85:b0:a1:cc:97:9c:66:4c:d5:33:33:e2:7a:bd:
1e:68:cd:c3:a4:eb:b2:a8:2e:c4:b2:99:ea:0c:09:5a:2d:8c:
a7:3d:67:ec:a9:ee:91:ad:f5:61:74:11:3b:ad:ad:88:86:65:
52:50:df:d1:d6:9c:7e:7a:ef:53:ad:20:0b:b8:10:c4:04:1e:
f6:86:1c:b9:98:30:6a:66:bf:45:9e:fb:b7:ad:09:26:5d:d5:
07:37:fd:58:82:9e:40:35:18:c1:e7:2a:bb:d8:ce:b0:ef:0e:
dd:a7:2b:02:ed:46:d3:26:a7:e1:9a:ea:8c:05:1f:b9:ac:88:
b5:c5:78:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:51 2024 by rpki-client on console-ams.rpki-client.org