Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/505755-c4ab-4905-8b48-bbd1ad53da43/1/lwGMRMBaZgwKwbbOd3FQiPVSaMY.roa
File: lwGMRMBaZgwKwbbOd3FQiPVSaMY.roa (raw, json)
Hash identifier: 4jNXri7evz696e2uhRRDeEc11E0UJ+bTdfyQyuXgzYo=
Subject key identifier: 97:01:8C:44:C0:5A:66:0C:0A:C1:B6:CE:77:71:50:88:F5:52:68:C6
Certificate issuer: /CN=39374019a54d4bde23f0da28a252150d5cb473ad
Certificate serial: 0185720C3BBC7BD3534E1BEB0DCCD03E3D2F
Authority key identifier: 39:37:40:19:A5:4D:4B:DE:23:F0:DA:28:A2:52:15:0D:5C:B4:73:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTdAGaVNS94j8NooolIVDVy0c60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/505755-c4ab-4905-8b48-bbd1ad53da43/1/lwGMRMBaZgwKwbbOd3FQiPVSaMY.roa
Signing time: Mon 02 Jan 2023 10:34:42 +0000
ROA not before: Mon 02 Jan 2023 10:34:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211752
IP address blocks: 195.8.125.0/24 maxlen: 24
2a0a:fcc0::/29 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:0c:3b:bc:7b:d3:53:4e:1b:eb:0d:cc:d0:3e:3d:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39374019a54d4bde23f0da28a252150d5cb473ad
Validity
Not Before: Jan 2 10:34:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=97018c44c05a660c0ac1b6ce77715088f55268c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:50:0e:b6:4a:d2:f5:03:a9:a0:98:ba:be:66:
76:8d:4c:0e:3c:fc:bf:86:40:64:bf:d7:6f:93:41:
a8:a5:92:93:ad:6f:51:64:b1:70:64:24:8b:18:6e:
88:2c:b8:d3:c0:f4:9e:df:56:27:42:10:a3:c4:67:
7f:e9:89:0a:12:f6:91:19:1f:1b:64:15:e5:08:d1:
87:a0:02:74:92:7d:19:c7:30:0c:a2:18:29:a6:5f:
1f:6f:1c:5e:f7:4e:3a:2d:8f:18:5f:74:d5:41:0c:
85:1b:f0:23:7d:e4:76:53:1b:11:75:da:b4:7e:b8:
df:f1:d0:31:85:19:4f:69:33:f0:e8:48:38:66:19:
5b:9f:85:ff:c9:85:74:be:88:d8:97:e3:6c:c3:be:
48:0f:5b:be:77:0f:ca:63:6b:09:41:74:9d:85:a1:
58:01:9d:e5:b6:7f:fc:36:f9:c1:f4:36:cf:e1:ae:
c4:f6:e5:ba:a5:af:5d:20:19:90:16:b4:40:e3:0f:
f2:3f:6a:29:93:9d:f0:3d:29:4f:2d:08:1f:58:7c:
a6:20:38:17:b2:38:bb:88:6f:88:77:35:fa:06:f3:
d5:75:2b:eb:b7:dc:a0:17:bb:a8:a9:cf:32:27:76:
fb:2e:f7:40:f8:d4:79:49:56:20:0a:c0:48:ca:d4:
03:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:01:8C:44:C0:5A:66:0C:0A:C1:B6:CE:77:71:50:88:F5:52:68:C6
X509v3 Authority Key Identifier:
keyid:39:37:40:19:A5:4D:4B:DE:23:F0:DA:28:A2:52:15:0D:5C:B4:73:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTdAGaVNS94j8NooolIVDVy0c60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/505755-c4ab-4905-8b48-bbd1ad53da43/1/lwGMRMBaZgwKwbbOd3FQiPVSaMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/505755-c4ab-4905-8b48-bbd1ad53da43/1/OTdAGaVNS94j8NooolIVDVy0c60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.8.125.0/24
IPv6:
2a0a:fcc0::/29
Signature Algorithm: sha256WithRSAEncryption
cb:be:7d:42:6e:12:4c:75:81:b2:7c:44:7c:3b:09:3b:c6:6b:
23:6a:76:17:bb:bc:2e:fe:fb:13:2f:2b:e1:1d:7a:ae:d2:af:
7d:97:e9:b7:13:4a:3f:d5:a3:9f:d6:e3:8c:a4:a7:b4:a2:29:
9c:8c:0f:b9:c9:10:d7:dc:c8:62:39:ac:f8:bb:af:7f:a1:43:
c7:cd:a2:fa:35:ed:d3:7b:80:9e:1a:fd:98:22:56:75:22:43:
5f:80:96:8e:d0:f8:16:a6:c0:c4:a0:ce:f6:cb:01:38:4a:5e:
ed:26:5e:70:bd:39:aa:63:5a:8a:de:f5:26:3d:ac:71:3f:82:
8a:09:2e:88:76:fe:47:a7:7d:69:1c:0a:df:56:dc:ee:6b:62:
86:9f:77:3c:fe:12:1e:e4:9f:04:ba:79:5c:7c:27:1a:3e:45:
fa:cc:52:49:6c:76:cd:a3:b7:62:ab:6d:41:1f:d3:9f:92:34:
64:13:30:b7:2d:4c:94:fa:79:81:d0:fa:41:85:98:71:14:1f:
53:6f:17:0f:7d:28:83:79:5a:9a:30:74:bb:49:30:fc:3c:f4:
4f:ab:ce:9c:ae:fb:dc:2e:21:fe:e5:d7:09:7b:c7:a5:21:c3:
2a:ee:14:7f:73:63:be:74:3e:6b:6f:c2:9a:75:c5:b8:74:e5:
d8:4a:11:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:46 2024 by rpki-client on console-fra.rpki-client.org