Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/31c056-6a8a-4226-803c-583fbe64a955/1/LfLIU8IwaS-yhi1E9_cKoeHKNZU.roa
File: LfLIU8IwaS-yhi1E9_cKoeHKNZU.roa (raw, json)
Hash identifier: 4rWPLygPEtRLiuuZe391BKS/Ei6w/X8FnfjeUzEQaXg=
Subject key identifier: 2D:F2:C8:53:C2:30:69:2F:B2:86:2D:44:F7:F7:0A:A1:E1:CA:35:95
Certificate issuer: /CN=5949698bbcd24fc9e1a9f5f41486c31af19a4bc8
Certificate serial: 018571830BB0014FECAFB411195D76D7FDA0
Authority key identifier: 59:49:69:8B:BC:D2:4F:C9:E1:A9:F5:F4:14:86:C3:1A:F1:9A:4B:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WUlpi7zST8nhqfX0FIbDGvGaS8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/31c056-6a8a-4226-803c-583fbe64a955/1/LfLIU8IwaS-yhi1E9_cKoeHKNZU.roa
Signing time: Mon 02 Jan 2023 08:04:51 +0000
ROA not before: Mon 02 Jan 2023 08:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49985
IP address blocks: 188.120.192.0/19 maxlen: 19
185.172.252.0/22 maxlen: 22
176.62.224.0/20 maxlen: 20
2a02:c60::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:83:0b:b0:01:4f:ec:af:b4:11:19:5d:76:d7:fd:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5949698bbcd24fc9e1a9f5f41486c31af19a4bc8
Validity
Not Before: Jan 2 08:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2df2c853c230692fb2862d44f7f70aa1e1ca3595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c8:55:1b:02:0a:82:c2:70:fa:4e:10:dd:48:
49:b9:ca:a7:ae:7b:8d:d1:7a:3e:e5:11:94:b6:06:
31:8e:a9:c5:d1:f6:41:5c:35:11:79:0a:c4:a8:00:
96:73:1c:d5:90:c0:54:aa:2b:1a:36:b8:6f:79:49:
7c:6f:13:aa:e8:7c:84:3c:0d:ca:f1:53:2a:e3:9b:
4a:bb:47:18:b6:6b:22:72:c0:fc:ac:5f:19:27:aa:
45:79:27:6d:ac:31:ca:3d:4f:e0:3c:41:ab:e5:01:
ee:f3:2b:0a:d7:fc:e5:ec:f2:68:c4:e0:e8:d4:b3:
83:15:ac:13:f3:89:ea:92:d9:05:1a:42:3e:34:2e:
a8:7a:b4:47:10:63:1b:0d:2b:bd:d0:4f:b2:56:fc:
d7:f8:ff:ff:1c:77:eb:36:8d:1d:68:3f:10:2a:7f:
7c:1c:0f:54:88:97:fe:dc:40:fe:03:e9:e4:24:bc:
26:ec:d4:59:23:e7:4d:a7:f9:92:79:c7:7f:80:d2:
13:05:15:09:ff:7b:53:9d:48:2b:fd:71:e9:13:c1:
b2:92:b5:4d:74:41:fa:03:4b:7a:60:94:a5:b3:05:
b2:11:59:44:fb:10:e6:5e:0c:01:44:67:94:cd:e7:
71:4c:d4:0a:58:95:c0:05:13:d1:2e:b9:42:84:6b:
2b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:F2:C8:53:C2:30:69:2F:B2:86:2D:44:F7:F7:0A:A1:E1:CA:35:95
X509v3 Authority Key Identifier:
keyid:59:49:69:8B:BC:D2:4F:C9:E1:A9:F5:F4:14:86:C3:1A:F1:9A:4B:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WUlpi7zST8nhqfX0FIbDGvGaS8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/31c056-6a8a-4226-803c-583fbe64a955/1/LfLIU8IwaS-yhi1E9_cKoeHKNZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/31c056-6a8a-4226-803c-583fbe64a955/1/WUlpi7zST8nhqfX0FIbDGvGaS8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.62.224.0/20
185.172.252.0/22
188.120.192.0/19
IPv6:
2a02:c60::/32
Signature Algorithm: sha256WithRSAEncryption
5b:0a:49:98:c8:57:24:53:fe:ca:d8:5a:a7:28:43:33:6f:01:
97:de:14:a0:df:ca:82:74:ea:51:5f:f8:4c:5b:fc:e2:4e:65:
a7:bb:fb:21:c7:73:2b:53:fa:2c:df:92:02:3e:a1:70:ba:f0:
84:19:b2:74:b0:15:fc:1d:5f:e8:87:e4:81:74:15:fb:ae:a6:
ce:56:da:69:0b:04:01:cf:c3:6f:08:5a:87:a6:4d:ba:82:f9:
9b:4f:0c:43:bf:35:76:af:ae:bf:d6:f3:88:42:8d:a0:d1:93:
d3:5c:91:53:67:c6:2f:60:3b:b0:0a:d6:e6:26:2a:2e:a0:0e:
32:99:55:75:23:8b:36:55:77:f4:45:27:d6:29:cf:8d:65:c4:
52:b0:3a:24:ea:da:ae:ea:a2:c6:82:9e:50:23:77:2c:25:8d:
5b:af:6e:7c:d1:d4:62:c5:39:79:7c:30:9c:b4:6c:08:4d:12:
fe:aa:35:3d:9b:7a:27:be:b7:d9:ab:84:b4:f4:01:f5:bd:a0:
48:fa:6f:33:0c:38:ff:e9:1d:ec:0c:60:e3:12:72:5a:8c:be:
24:0e:b3:62:af:3f:28:72:46:85:b6:2b:00:03:b1:ab:ed:f5:
cc:0d:5e:02:6c:88:12:d3:a1:6f:c2:1c:04:76:84:29:85:c9:
9e:53:b6:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:00 2024 by rpki-client on console-fra.rpki-client.org