Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/Lt0yVW2mSPLoafM5dTmFPzQw884.roa
File: Lt0yVW2mSPLoafM5dTmFPzQw884.roa (raw, json)
Hash identifier: QJe1vkh9kh1iSmVWlUsI3/AvWcU57ztGqn8efau4yjo=
Subject key identifier: 2E:DD:32:55:6D:A6:48:F2:E8:69:F3:39:75:39:85:3F:34:30:F3:CE
Certificate issuer: /CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0
Certificate serial: 0185C84ABDF6C89C73DBEF2643FF923AD776
Authority key identifier: 9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/Lt0yVW2mSPLoafM5dTmFPzQw884.roa
Signing time: Thu 19 Jan 2023 04:30:19 +0000
ROA not before: Thu 19 Jan 2023 04:30:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25198
IP address blocks: 195.74.93.0/24 maxlen: 24
46.229.243.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 28 Apr 2023 13:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:c8:4a:bd:f6:c8:9c:73:db:ef:26:43:ff:92:3a:d7:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0
Validity
Not Before: Jan 19 04:30:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2edd32556da648f2e869f3397539853f3430f3ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:68:55:22:cb:dc:7c:25:e8:a5:43:38:de:dd:
cd:7c:2d:5e:78:b5:a1:d2:32:df:bc:f2:bd:e7:75:
21:50:1e:9e:e2:72:da:0d:cc:01:f0:ed:e2:88:43:
d4:5b:de:ad:9d:ae:6e:c0:0a:0d:29:f6:07:f4:90:
aa:11:4a:f0:32:c3:4c:26:6c:4e:f6:b4:90:d0:b3:
22:52:08:df:65:98:e7:07:73:f2:2a:cd:11:9b:81:
16:d8:85:0d:d5:6b:da:f0:a8:02:64:c5:fd:64:1c:
91:57:9c:05:04:0d:d0:a5:49:14:9b:02:4e:6b:2a:
98:6c:62:1b:1a:dd:d9:15:37:bf:4b:c7:87:8c:20:
80:87:82:24:7e:7d:4d:c7:09:24:40:4f:b8:5f:56:
a5:f3:67:bd:95:ed:5c:bf:fe:96:e3:ce:dd:9f:5a:
c7:7f:4e:56:39:dc:32:56:3c:21:0b:5a:90:31:ea:
2e:0b:2c:c5:ed:ee:60:c9:58:7a:f5:b9:2f:e5:8c:
26:1b:dc:6b:14:54:c9:43:1a:a3:0b:97:ba:36:76:
24:60:77:cb:b2:6b:70:9f:15:45:94:b6:b3:25:8d:
25:15:b4:67:82:85:4c:4e:88:33:17:c2:f4:b3:78:
fc:38:47:d5:71:5b:2f:94:a3:07:8e:fc:1b:d9:35:
2d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:DD:32:55:6D:A6:48:F2:E8:69:F3:39:75:39:85:3F:34:30:F3:CE
X509v3 Authority Key Identifier:
keyid:9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/Lt0yVW2mSPLoafM5dTmFPzQw884.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.229.243.0/24
195.74.93.0/24
Signature Algorithm: sha256WithRSAEncryption
e9:4f:5a:b8:54:56:1b:2b:11:76:0b:25:56:3d:2e:48:ac:d2:
5e:77:ef:49:4f:5b:aa:23:d7:23:15:72:48:f5:9c:c1:90:0c:
44:4e:57:25:28:c2:79:f3:5b:7a:73:99:e8:e1:81:3d:7b:be:
5b:7e:15:26:d2:65:0c:1c:64:2a:68:b5:ab:be:86:7e:d1:88:
2a:45:df:c2:bc:b5:08:ef:81:01:db:5d:54:30:52:71:a7:37:
2c:5b:e4:1f:b7:8b:c7:f8:89:0c:20:20:d9:6e:88:03:5a:2b:
0b:c0:1c:95:af:d8:08:5d:d1:b8:40:61:30:9b:6f:04:56:e5:
e7:ba:70:24:57:31:ae:2f:f9:94:58:b9:12:0a:ff:85:22:a0:
8a:2b:92:46:19:4e:8d:d8:e1:eb:69:87:4b:bb:af:40:08:9b:
6f:49:f7:79:83:66:f5:d0:71:fa:0f:23:86:9a:b1:1a:98:7d:
c1:eb:77:4c:fe:42:8f:3a:01:70:8f:73:ad:5f:62:51:39:d7:
e3:65:a7:24:c3:4f:4a:7a:18:30:d8:36:e3:16:5e:1e:c3:f8:
38:1b:37:12:49:bb:be:ac:c8:96:1b:51:dd:48:ca:4c:b6:5a:
d1:0c:a4:18:f0:91:c6:17:d6:a0:d9:dc:de:20:8e:b8:74:04:
35:ac:6f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:15 2024 by rpki-client on console-ams.rpki-client.org