Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/06-JjGSPIQbJKbzX5X27R5C_LZI.roa
File: 06-JjGSPIQbJKbzX5X27R5C_LZI.roa (raw, json)
Hash identifier: I3zOb/B/of605Du26xounRcmDzHVgheFZAQTy2+yZ5Y=
Subject key identifier: D3:AF:89:8C:64:8F:21:06:C9:29:BC:D7:E5:7D:BB:47:90:BF:2D:92
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 018571F10BD38C4CA66C7D8B45DE8EAE2DEC
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/06-JjGSPIQbJKbzX5X27R5C_LZI.roa
Signing time: Mon 02 Jan 2023 10:05:00 +0000
ROA not before: Mon 02 Jan 2023 10:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212949
IP address blocks: 176.227.157.0/24 maxlen: 24
88.148.18.0/24 maxlen: 24
84.232.88.0/23 maxlen: 23
84.236.140.0/23 maxlen: 23
88.148.42.0/23 maxlen: 23
94.176.142.0/24 maxlen: 24
84.232.40.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:f1:0b:d3:8c:4c:a6:6c:7d:8b:45:de:8e:ae:2d:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Jan 2 10:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d3af898c648f2106c929bcd7e57dbb4790bf2d92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:41:7c:6d:d0:d7:48:21:0f:44:90:ce:eb:fc:
bb:1b:0b:95:97:ed:3c:9c:21:e1:4b:ad:23:98:11:
67:9b:7e:a7:9e:16:44:68:1d:a5:ec:0b:eb:a5:0b:
97:8f:e9:cc:c8:5a:33:30:b2:15:93:06:c1:91:18:
25:c6:b5:88:eb:ea:37:4c:3b:ad:fe:3e:ad:14:58:
2d:af:b8:ed:15:fd:72:26:6c:83:8a:bb:b7:6e:da:
05:bd:e0:42:9a:51:f1:22:d7:4a:9d:cb:7e:df:a3:
5a:7b:8f:fd:45:8b:f1:47:ef:83:4d:ee:5f:35:0d:
99:d3:2c:4d:aa:2d:58:26:27:d2:c2:c4:80:38:f0:
c8:3d:96:5d:76:0a:86:17:1d:60:3a:98:5f:13:2f:
61:d5:25:1d:ed:cf:37:30:d0:cc:b0:a1:8d:38:d5:
c7:16:60:38:e7:76:fd:79:f2:25:03:6f:ec:73:04:
44:64:47:0d:05:e7:1c:ae:2f:56:c2:0e:48:5e:83:
52:0a:e1:61:f1:ad:47:25:06:fa:2b:3c:41:b4:37:
fe:f8:d5:0a:a6:86:dd:3b:e3:a7:2e:2a:ab:2a:70:
13:3b:db:79:f5:e5:bb:64:bd:46:be:23:62:9e:f5:
5f:84:28:ad:31:a4:b7:78:e8:30:b1:66:47:53:42:
fe:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:AF:89:8C:64:8F:21:06:C9:29:BC:D7:E5:7D:BB:47:90:BF:2D:92
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/06-JjGSPIQbJKbzX5X27R5C_LZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.232.40.0/21
84.232.88.0/23
84.236.140.0/23
88.148.18.0/24
88.148.42.0/23
94.176.142.0/24
176.227.157.0/24
Signature Algorithm: sha256WithRSAEncryption
32:ca:36:97:5b:97:b3:1d:85:89:77:df:28:e5:a6:6b:10:15:
cf:7d:75:85:65:e5:48:02:d1:04:8b:46:91:89:aa:79:86:58:
ac:99:fd:c8:ff:67:81:67:fc:79:76:43:4c:eb:f3:ba:c2:87:
b8:02:b1:b3:4d:3e:ee:fb:3e:62:7a:37:0d:d2:f4:cb:e2:af:
28:70:ac:db:b2:96:00:ca:bf:d8:ee:1c:03:f9:8e:b8:94:24:
1e:d5:74:7d:39:24:3b:75:f9:3e:6b:dc:01:9e:47:4c:10:3b:
51:20:8e:54:6c:58:35:ae:a2:87:cf:0b:27:7a:5a:67:bf:e9:
8c:32:3c:41:86:86:b7:5b:3f:32:7b:64:ea:7a:b7:b6:8d:aa:
40:43:63:ca:3e:42:08:a6:40:38:71:6b:73:a3:55:d0:70:6c:
0e:39:03:ce:c3:a5:bb:4f:5c:fa:89:4c:27:81:2d:33:f7:5f:
d3:3d:a6:18:ab:f9:5e:eb:e4:f3:78:1e:a3:1f:29:6e:8c:d8:
e2:51:7c:6e:8e:8c:0e:1a:07:b4:c2:2c:c4:34:fe:10:a8:54:
6f:bd:f3:48:d5:dd:87:b6:70:60:ed:20:d5:3a:62:c6:ef:1a:
cd:69:95:1a:54:fe:df:2b:41:b7:24:18:42:f5:fd:e8:01:60:
c3:31:9d:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 27 10:47:48 2023 by rpki-client on console-ams.rpki-client.org