Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/Lm-8wnI2sbLYXANaSWHz9h0Tv0Q.roa
File: Lm-8wnI2sbLYXANaSWHz9h0Tv0Q.roa (raw, json)
Hash identifier: fOGo3VGdgEYC9/WyQx0qCuQ+JWAXKodLBjxjBaZ7RjM=
Subject key identifier: 2E:6F:BC:C2:72:36:B1:B2:D8:5C:03:5A:49:61:F3:F6:1D:13:BF:44
Certificate issuer: /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial: 018CEA9EBF0780A998B7876347B851955E57
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/Lm-8wnI2sbLYXANaSWHz9h0Tv0Q.roa
Signing time: Mon 08 Jan 2024 19:48:41 +0000
ROA not before: Mon 08 Jan 2024 19:48:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210147
IP address blocks: 217.113.22.0/23 maxlen: 24
217.113.31.0/24 maxlen: 24
217.113.9.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Feb 2024 11:44:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ea:9e:bf:07:80:a9:98:b7:87:63:47:b8:51:95:5e:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Validity
Not Before: Jan 8 19:48:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2e6fbcc27236b1b2d85c035a4961f3f61d13bf44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b6:c9:13:b9:2e:f1:3a:28:a4:a5:ff:5b:a9:
3a:a3:bf:9a:57:37:b1:62:7b:f6:83:3b:13:ca:15:
b6:ed:eb:d2:e4:df:f5:fa:91:83:69:82:7e:03:55:
df:20:32:8f:77:b7:71:d7:8b:75:c8:24:c0:1f:d9:
aa:78:df:03:55:dc:17:6b:e9:5a:14:8e:2a:06:83:
50:a0:54:6f:fb:ec:41:b6:d8:ce:de:18:3b:9c:29:
03:15:c0:89:56:b8:79:e9:e1:3c:93:d4:00:c8:3b:
16:9e:05:a0:88:6d:0d:ae:ba:b3:a5:b1:97:98:02:
d3:09:46:87:50:ff:b0:7e:bd:88:1d:f2:09:a2:21:
55:3c:cf:28:20:31:fd:35:bf:a3:eb:96:c2:6d:48:
14:39:30:c8:53:28:96:53:52:57:8c:34:b4:d1:5c:
99:50:f0:a6:c2:6d:7f:59:fe:c0:77:11:63:b0:64:
15:56:27:0b:65:56:36:0e:b0:64:73:e4:bc:2a:9e:
ba:d7:f3:e1:83:58:cd:cb:f9:f6:05:4f:cd:e6:21:
69:aa:83:39:a3:9b:a4:d9:b7:ad:cd:a1:85:69:8f:
51:87:25:74:78:24:39:e0:74:ba:2e:0c:e9:10:c9:
70:0c:e6:b8:88:82:2c:26:57:c5:10:2d:3a:8c:75:
3c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:6F:BC:C2:72:36:B1:B2:D8:5C:03:5A:49:61:F3:F6:1D:13:BF:44
X509v3 Authority Key Identifier:
keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/Lm-8wnI2sbLYXANaSWHz9h0Tv0Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.113.9.0/24
217.113.22.0/23
217.113.31.0/24
Signature Algorithm: sha256WithRSAEncryption
65:3f:9e:8a:c8:38:5d:d1:a6:a5:5c:da:12:27:a5:c8:01:48:
41:20:e2:7e:99:b0:36:81:80:1c:5e:f4:bb:3d:2a:38:72:ee:
79:9c:4b:de:19:af:c5:05:c8:db:da:4a:7f:51:41:c4:41:2e:
dc:54:27:4d:48:3e:18:89:0a:70:db:49:0b:b9:2e:ef:61:ea:
c7:46:d9:43:c6:a6:6c:52:47:6b:7e:91:e6:b6:66:19:22:a8:
c7:4d:75:09:33:02:c0:45:08:6c:87:c8:15:68:fa:e1:c8:9f:
45:cf:ae:85:78:f8:17:f9:49:a6:66:2b:d5:b6:e5:97:e9:46:
9c:e5:6c:96:dc:c4:9b:b7:34:36:a6:16:06:91:48:10:6b:e6:
07:f6:b3:eb:e7:f3:51:ef:b7:68:18:47:b9:18:58:fb:b0:be:
4b:e6:2e:05:ed:f6:76:70:7e:53:5d:b9:3d:71:f7:f8:37:0a:
42:3a:35:42:30:09:cf:20:86:2c:48:66:fe:cf:89:67:ed:d7:
cb:f9:26:40:08:56:e6:42:b6:92:cf:49:74:a2:1a:72:31:62:
c7:da:60:b8:48:f3:c2:21:07:be:d2:85:fe:07:62:30:f6:a5:
c6:29:a2:9f:53:74:4d:cb:c7:f4:4d:49:eb:1b:96:82:fd:84:
1f:31:e4:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 5 14:22:07 2024 by rpki-client on console-ams.rpki-client.org