Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/lLV2aHomtHtrDda9-gia5WOW-cI.roa
File: lLV2aHomtHtrDda9-gia5WOW-cI.roa (raw, json)
Hash identifier: kupfcN64wWZL3j0kqLKMDcSO5/ogxfTk/od0GKNmsN4=
Subject key identifier: 94:B5:76:68:7A:26:B4:7B:6B:0D:D6:BD:FA:08:9A:E5:63:96:F9:C2
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 0185BB4A8746E29B8407654D969813C1DCE1
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/lLV2aHomtHtrDda9-gia5WOW-cI.roa
Signing time: Mon 16 Jan 2023 15:55:01 +0000
ROA not before: Mon 16 Jan 2023 15:55:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29066
IP address blocks: 185.233.18.0/24 maxlen: 24
185.233.19.0/24 maxlen: 24
45.155.88.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Apr 2023 08:31:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:bb:4a:87:46:e2:9b:84:07:65:4d:96:98:13:c1:dc:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Jan 16 15:55:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=94b576687a26b47b6b0dd6bdfa089ae56396f9c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:18:0d:7c:0c:c8:80:d7:2a:c7:3b:39:73:8d:
b6:81:2d:e9:70:53:3a:fd:79:30:e0:99:6b:2d:0d:
8e:bd:65:c1:0e:3d:d4:25:e8:23:50:63:d5:3b:0c:
40:79:af:a9:74:dd:f7:52:18:5f:82:37:c3:d3:43:
9d:34:df:12:90:cc:89:9e:27:8f:a7:1f:8f:8c:5a:
f7:5b:18:37:ae:4f:c8:4b:ad:0d:f1:c7:f4:ee:ef:
c8:f6:0c:76:61:ba:06:63:cd:e3:b0:12:3c:d0:a0:
23:57:5e:c1:68:1b:36:68:ac:f6:34:3c:07:08:20:
53:a1:52:44:25:4a:d8:d4:71:60:44:88:67:1d:a1:
0d:88:9a:09:1a:60:76:1b:9c:3e:62:de:b2:9a:3f:
e7:76:6f:60:86:4f:24:57:a2:00:06:9f:23:ff:cd:
47:eb:50:a0:81:33:1d:c4:8a:b9:ce:04:d1:34:a8:
33:86:30:87:1a:5e:13:6d:83:f5:75:5a:93:09:0a:
f0:23:6e:af:b7:65:3e:9e:8c:96:f1:bc:b7:83:49:
c4:09:30:10:b3:7e:7e:d0:7b:f6:9c:33:5e:30:70:
10:35:25:a5:52:4d:99:71:22:6d:bb:a8:64:3c:f9:
a7:30:43:85:d0:d1:32:d2:93:38:9d:fa:32:49:bb:
73:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:B5:76:68:7A:26:B4:7B:6B:0D:D6:BD:FA:08:9A:E5:63:96:F9:C2
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/lLV2aHomtHtrDda9-gia5WOW-cI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.88.0/24
185.233.18.0/23
Signature Algorithm: sha256WithRSAEncryption
af:b6:75:c1:77:0b:39:18:ed:18:09:7b:85:2c:6d:a4:f7:60:
53:92:22:c9:48:8e:54:4a:7d:f5:19:2c:ca:90:7e:e8:c6:ba:
93:41:04:ec:bf:af:55:ba:f0:b2:0f:4a:e1:c6:b1:ad:6c:d8:
39:3f:90:9c:51:d0:98:52:12:6c:55:2d:1a:ec:59:ce:4b:14:
45:55:06:be:b4:41:70:b9:8c:a9:1e:13:0d:04:fe:96:f7:9a:
02:da:ac:a1:c7:ba:69:35:76:c9:b6:27:3a:ed:e7:7d:bd:36:
34:f8:75:1f:95:5e:f8:d0:39:e1:26:2a:6a:2b:21:90:a1:b0:
50:26:b2:4b:10:59:4c:07:51:72:cd:8d:ca:96:ee:18:94:fe:
d7:03:89:6e:04:11:13:db:38:c4:ad:be:73:3b:23:b1:80:9a:
c3:f7:72:7b:d8:5c:18:6b:ff:73:84:bd:a4:1d:9e:d3:8c:e5:
ed:40:c4:da:5c:c4:33:62:f6:7f:4e:dd:4f:cf:be:31:50:7f:
91:e3:4b:ad:35:ec:4c:83:45:84:8b:a6:97:83:b2:d7:01:68:
ef:f1:19:2f:95:9a:23:62:af:72:4c:8f:82:b5:47:72:91:d0:
b7:3c:70:b1:9d:8a:60:95:0f:01:b7:b4:84:7e:8d:52:e7:31:
66:9b:a3:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:50 2024 by rpki-client on console-fra.rpki-client.org