Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/Ls-jWptezzlMHOuOXKAXZ_86I7g.roa
File: Ls-jWptezzlMHOuOXKAXZ_86I7g.roa (raw, json)
Hash identifier: YUVBx6RzfcyEsi5Kmb8PfRlr96Iy94TnLLzIUrjemiM=
Subject key identifier: 2E:CF:A3:5A:9B:5E:CF:39:4C:1C:EB:8E:5C:A0:17:67:FF:3A:23:B8
Certificate issuer: /CN=b3dd35ccff6c2b86a1fad8f103bc20070d09e50d
Certificate serial: 018B38DBBBAB36D240240060A15FBD2AA15A
Authority key identifier: B3:DD:35:CC:FF:6C:2B:86:A1:FA:D8:F1:03:BC:20:07:0D:09:E5:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s901zP9sK4ah-tjxA7wgBw0J5Q0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/Ls-jWptezzlMHOuOXKAXZ_86I7g.roa
Signing time: Mon 16 Oct 2023 14:20:06 +0000
ROA not before: Mon 16 Oct 2023 14:20:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31368
IP address blocks: 185.173.156.0/24 maxlen: 24
185.173.159.0/24 maxlen: 24
89.107.132.0/23 maxlen: 23
89.107.128.0/23 maxlen: 23
185.173.158.0/24 maxlen: 24
89.107.130.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:38:db:bb:ab:36:d2:40:24:00:60:a1:5f:bd:2a:a1:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3dd35ccff6c2b86a1fad8f103bc20070d09e50d
Validity
Not Before: Oct 16 14:20:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2ecfa35a9b5ecf394c1ceb8e5ca01767ff3a23b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:a7:b7:bc:26:19:62:2f:15:f4:62:c6:77:42:
01:8f:be:dd:c6:bb:e2:0e:fc:66:bf:b3:1f:7a:53:
aa:04:da:fd:f2:ea:5a:c6:fd:99:ba:19:43:71:77:
6a:e3:e6:ac:6d:4b:46:62:f8:f3:8c:2d:c6:ee:29:
7f:c1:b3:d5:38:b9:4e:67:7c:e4:fa:d4:2d:45:e6:
c4:06:62:36:0a:17:0b:20:59:2f:cc:7b:c3:db:f9:
09:a6:30:47:ef:74:7e:5d:7d:da:66:f7:20:22:2c:
42:a7:fc:f4:77:ba:ee:e9:c9:99:4e:ea:19:d1:3a:
12:3c:4a:3d:49:3c:5a:55:51:79:51:ca:36:12:42:
87:2d:c6:be:99:e0:49:46:c7:2f:a0:0a:61:18:50:
97:dd:95:0e:70:48:ff:f9:ef:b9:7e:6d:34:a3:f6:
15:ad:d7:b9:90:e4:89:26:68:e9:f4:cc:5c:0d:0c:
55:1d:6e:e8:fa:e4:b5:53:b8:fb:1b:24:a0:71:4b:
32:55:de:8b:96:05:2c:8d:38:2d:5a:2d:19:37:4b:
cf:67:53:8b:8d:51:2b:20:dc:a4:37:a5:49:11:a7:
4f:58:9c:14:bc:e7:7b:94:84:35:b7:80:98:94:b5:
bf:63:14:1e:49:7b:b9:e0:83:8c:1f:5f:95:c8:de:
bf:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:CF:A3:5A:9B:5E:CF:39:4C:1C:EB:8E:5C:A0:17:67:FF:3A:23:B8
X509v3 Authority Key Identifier:
keyid:B3:DD:35:CC:FF:6C:2B:86:A1:FA:D8:F1:03:BC:20:07:0D:09:E5:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s901zP9sK4ah-tjxA7wgBw0J5Q0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/Ls-jWptezzlMHOuOXKAXZ_86I7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.107.128.0-89.107.133.255
185.173.156.0/24
185.173.158.0/23
Signature Algorithm: sha256WithRSAEncryption
0c:21:2c:05:ad:23:fa:c3:ac:7b:c2:8c:34:20:47:91:4c:bb:
e8:86:1d:93:5b:87:bd:31:66:47:03:23:5f:03:45:ed:1f:b0:
b5:05:e6:7f:23:a6:4f:83:48:92:07:34:57:62:07:e1:0b:28:
8e:ef:06:6c:f4:70:92:f1:a3:c7:2e:71:86:4e:c1:8e:e4:5a:
4d:b5:b2:34:77:34:7c:cd:69:5b:20:d4:43:95:62:56:5d:d8:
7f:33:7c:e5:e4:cb:af:79:c0:77:58:87:81:6b:19:b0:7f:cc:
06:32:0e:a0:ed:75:eb:f4:69:f2:96:67:ce:09:89:6b:6a:fd:
78:c7:98:59:21:9c:ce:01:08:88:0e:ff:01:95:f4:d6:6a:e9:
e7:36:ce:7e:a1:d9:d3:d8:f3:eb:75:fc:29:7e:94:65:9d:4f:
d2:0f:4e:97:99:15:49:8a:03:82:c3:0b:27:97:f3:da:fa:85:
41:42:bc:c8:42:3c:50:6f:60:ce:bf:0f:5b:52:0c:c7:94:37:
24:d3:29:05:ed:2a:b2:f6:5d:3d:8a:42:9a:ed:76:6e:13:6b:
09:d7:a4:9a:69:69:8c:de:5a:95:43:4c:21:aa:37:3d:67:da:
fa:a7:be:95:ec:1a:6f:53:10:a7:1f:13:97:96:80:03:24:44:
be:f4:97:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:18 2024 by rpki-client on console-ams.rpki-client.org