Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/bb861d-330f-4a97-9f9c-66c53f2b1f02/1/2Lo8sz1ds_J84ft-MEoapf5YTOo.roa
File: 2Lo8sz1ds_J84ft-MEoapf5YTOo.roa (raw, json)
Hash identifier: NAmSQr8vTyswBDtbWTziFU7AKhgqBtQlMl6/vY/b1wU=
Subject key identifier: D8:BA:3C:B3:3D:5D:B3:F2:7C:E1:FB:7E:30:4A:1A:A5:FE:58:4C:EA
Certificate issuer: /CN=5d8a9fd7c51926e22ea8aa33b3b8838e93e8bedd
Certificate serial: 01860D0D2B64ABC4237A39BA8C5BF7A907E3
Authority key identifier: 5D:8A:9F:D7:C5:19:26:E2:2E:A8:AA:33:B3:B8:83:8E:93:E8:BE:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYqf18UZJuIuqKozs7iDjpPovt0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/bb861d-330f-4a97-9f9c-66c53f2b1f02/1/2Lo8sz1ds_J84ft-MEoapf5YTOo.roa
Signing time: Wed 01 Feb 2023 12:56:52 +0000
ROA not before: Wed 01 Feb 2023 12:56:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15544
IP address blocks: 185.104.144.0/24 maxlen: 24
185.104.144.0/22 maxlen: 22
185.104.145.0/24 maxlen: 24
185.104.146.0/24 maxlen: 24
185.104.147.0/24 maxlen: 24
213.140.132.0/24 maxlen: 24
213.140.131.0/24 maxlen: 24
213.140.128.0/24 maxlen: 24
213.140.130.0/24 maxlen: 24
213.140.128.0/19 maxlen: 19
213.140.129.0/24 maxlen: 24
213.140.133.0/24 maxlen: 24
213.140.135.0/24 maxlen: 24
213.140.134.0/24 maxlen: 24
213.140.137.0/24 maxlen: 24
213.140.136.0/24 maxlen: 24
213.140.139.0/24 maxlen: 24
213.140.138.0/24 maxlen: 24
213.140.143.0/24 maxlen: 24
213.140.146.0/24 maxlen: 24
2a02:2298:4000::/36 maxlen: 36
2a02:2298:8000::/36 maxlen: 36
2a02:2298::/36 maxlen: 36
2a02:2298::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:0d:0d:2b:64:ab:c4:23:7a:39:ba:8c:5b:f7:a9:07:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d8a9fd7c51926e22ea8aa33b3b8838e93e8bedd
Validity
Not Before: Feb 1 12:56:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d8ba3cb33d5db3f27ce1fb7e304a1aa5fe584cea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4e:6a:35:c0:6e:04:df:05:da:70:2f:59:cd:
b1:47:15:33:b8:37:94:a8:32:c2:c1:73:90:0e:b2:
18:90:af:12:33:9b:94:aa:9c:3a:37:46:29:fa:ca:
9f:9d:25:ab:f2:f3:f5:04:db:60:c4:45:fd:e6:e2:
ba:dc:38:6e:d6:37:6d:2c:81:83:7c:c6:94:f2:88:
5e:7f:93:09:1a:8b:42:54:18:d1:68:f9:1e:46:b7:
93:b9:ad:eb:0f:46:15:13:7e:a3:a6:1f:24:33:9f:
c8:76:bd:62:30:bf:22:f0:7d:4b:0f:71:fc:57:ba:
01:38:61:3f:a6:48:d8:bd:0b:5e:0a:26:b5:b7:22:
ec:0a:15:f2:ea:f5:c7:04:eb:b2:3f:94:22:a5:25:
5f:21:12:35:7c:1f:b1:a8:4c:2d:ac:b0:d1:f2:cd:
ea:89:f7:c4:e3:97:a1:2f:82:73:12:e0:8b:b1:59:
e8:e1:bf:2b:be:18:99:f7:a0:78:11:6d:7a:ba:e6:
59:d6:20:9b:d5:34:36:75:42:d2:70:9c:54:9e:4c:
06:aa:b7:f9:a2:41:63:dc:01:37:f6:58:6b:75:d7:
49:80:33:7d:05:81:6c:6e:44:08:1a:5b:83:59:de:
b1:42:63:61:65:e9:81:07:6d:0f:98:53:21:0c:2b:
9a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:BA:3C:B3:3D:5D:B3:F2:7C:E1:FB:7E:30:4A:1A:A5:FE:58:4C:EA
X509v3 Authority Key Identifier:
keyid:5D:8A:9F:D7:C5:19:26:E2:2E:A8:AA:33:B3:B8:83:8E:93:E8:BE:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYqf18UZJuIuqKozs7iDjpPovt0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/bb861d-330f-4a97-9f9c-66c53f2b1f02/1/2Lo8sz1ds_J84ft-MEoapf5YTOo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/bb861d-330f-4a97-9f9c-66c53f2b1f02/1/XYqf18UZJuIuqKozs7iDjpPovt0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.104.144.0/22
213.140.128.0/19
IPv6:
2a02:2298::/32
Signature Algorithm: sha256WithRSAEncryption
9f:04:52:06:af:4b:ae:79:1d:c9:0c:69:1a:c9:a8:a4:99:96:
8e:f7:cb:1a:f1:3a:07:3e:1e:35:ab:d1:b2:00:4d:6c:21:06:
04:64:e4:b5:a1:7f:e9:86:0e:e9:5a:aa:2f:18:52:24:f2:76:
b7:6e:77:a0:9c:9e:2e:c3:60:a8:00:fa:04:dc:83:0a:f5:11:
87:a0:55:90:a5:e4:3c:99:5b:be:72:19:6c:91:42:5b:59:79:
b5:7e:74:49:b4:7d:53:a1:82:ef:ff:19:00:04:12:59:d8:57:
c8:c9:41:bb:0d:28:5c:f0:50:7c:5f:b3:a6:43:a8:61:b7:8a:
f5:e2:10:d1:5f:fb:e6:a4:af:8c:6b:ef:4e:fd:69:e1:2a:7e:
09:cd:74:0b:55:18:52:83:cf:49:0a:8d:2f:ce:39:47:7b:ba:
cd:a9:8d:c8:91:f2:32:30:e3:79:e7:09:4b:70:9d:d6:f8:0f:
00:34:c6:d4:17:43:30:77:17:06:20:3d:5c:e2:b7:d1:30:25:
c3:29:2e:b2:f3:8e:ed:0e:ce:6b:38:e8:3d:ed:fa:8e:97:fe:
98:45:be:23:89:38:b6:1f:ce:48:1b:23:96:79:72:18:1b:7d:
c5:e5:cd:7b:78:fa:14:3b:5b:84:74:e2:f5:7e:66:d9:e6:03:
e2:9c:eb:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:17 2024 by rpki-client on console-ams.rpki-client.org