Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/lxUa-0Bhcor45KrVzDt_fn5Yi-o.roa
File: lxUa-0Bhcor45KrVzDt_fn5Yi-o.roa (raw, json)
Hash identifier: t61NDUc0CAr8/1eWZ/jQe5AVXFgxQSv2pHEEtD6Ccok=
Subject key identifier: 97:15:1A:FB:40:61:72:8A:F8:E4:AA:D5:CC:3B:7F:7E:7E:58:8B:EA
Certificate issuer: /CN=ed6da82dbc7d7e2818f96680b66efcedb1087947
Certificate serial: 01860BF022B66357EC3238F270AC67EAA6CD
Authority key identifier: ED:6D:A8:2D:BC:7D:7E:28:18:F9:66:80:B6:6E:FC:ED:B1:08:79:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/lxUa-0Bhcor45KrVzDt_fn5Yi-o.roa
Signing time: Wed 01 Feb 2023 07:45:32 +0000
ROA not before: Wed 01 Feb 2023 07:45:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29551
IP address blocks: 80.66.204.0/22 maxlen: 22
109.71.24.0/21 maxlen: 21
83.141.0.0/18 maxlen: 18
109.71.31.0/24 maxlen: 24
83.141.10.0/24 maxlen: 24
82.149.233.0/24 maxlen: 24
82.149.232.0/24 maxlen: 24
82.149.235.0/24 maxlen: 24
82.149.234.0/24 maxlen: 24
195.225.196.0/22 maxlen: 22
178.19.64.0/20 maxlen: 20
46.253.112.0/20 maxlen: 20
82.149.224.0/19 maxlen: 19
83.141.16.0/24 maxlen: 24
83.141.15.0/24 maxlen: 24
83.141.29.0/24 maxlen: 24
83.141.28.0/24 maxlen: 24
83.141.27.0/24 maxlen: 24
83.141.26.0/24 maxlen: 24
83.141.57.0/24 maxlen: 24
83.141.62.0/24 maxlen: 24
83.141.60.0/24 maxlen: 24
83.141.60.0/22 maxlen: 22
2a01:440::/29 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:0b:f0:22:b6:63:57:ec:32:38:f2:70:ac:67:ea:a6:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed6da82dbc7d7e2818f96680b66efcedb1087947
Validity
Not Before: Feb 1 07:45:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=97151afb4061728af8e4aad5cc3b7f7e7e588bea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b2:90:12:5a:7e:df:92:f6:ed:9d:bf:79:44:
2c:54:ab:6f:94:1e:0a:74:e4:c1:48:2b:90:f4:b9:
fd:0a:eb:a3:10:e5:bb:df:e3:be:a8:e6:92:fa:c2:
ee:56:25:7a:cb:d9:76:fc:37:9e:96:1c:ba:bd:24:
24:a4:25:58:b5:4b:1b:d5:6e:38:96:51:5f:b1:af:
e8:06:a0:6e:04:23:74:d2:7a:dd:8c:e3:78:86:83:
26:64:ab:eb:91:74:5c:51:af:da:c9:a8:6f:88:1f:
28:0a:26:98:c4:be:42:e5:9c:db:cd:17:d8:27:59:
36:4b:7d:4d:a3:b7:7a:7b:ec:79:a6:b2:01:31:8a:
6b:c0:0b:65:76:a9:94:94:69:e8:29:91:c9:79:13:
e3:be:a9:7a:c5:38:3a:91:ea:d6:44:47:7f:e3:32:
91:7a:8f:6b:45:4e:a7:7e:f0:85:a8:50:ff:9a:84:
02:8d:de:46:54:34:e0:fd:aa:da:45:34:7e:60:63:
8b:ad:21:25:2d:b8:1f:00:d7:e4:da:01:dd:4b:bf:
f9:b6:21:55:c9:82:39:6d:18:93:16:fe:61:57:5a:
1c:8c:48:c0:19:65:12:94:c8:ac:2d:aa:ef:70:32:
a6:73:26:19:af:53:eb:80:23:8e:50:88:82:de:8d:
a3:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:15:1A:FB:40:61:72:8A:F8:E4:AA:D5:CC:3B:7F:7E:7E:58:8B:EA
X509v3 Authority Key Identifier:
keyid:ED:6D:A8:2D:BC:7D:7E:28:18:F9:66:80:B6:6E:FC:ED:B1:08:79:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/lxUa-0Bhcor45KrVzDt_fn5Yi-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.253.112.0/20
80.66.204.0/22
82.149.224.0/19
83.141.0.0/18
109.71.24.0/21
178.19.64.0/20
195.225.196.0/22
IPv6:
2a01:440::/29
Signature Algorithm: sha256WithRSAEncryption
6e:95:c7:e2:85:cb:e4:a7:cc:a3:c3:9d:a3:37:a1:da:70:57:
b3:66:28:d1:c4:c6:93:06:ee:3d:76:2a:6f:38:9c:ce:8e:a1:
68:f4:2a:36:a5:3e:f5:80:4c:a2:7f:d2:51:6c:52:6f:b0:3a:
eb:bf:9e:0b:1a:ab:f0:ff:f4:df:07:6f:3d:0e:8e:28:06:df:
b0:fe:aa:6d:6b:71:ef:4b:bf:4e:51:38:be:3e:6a:7e:4f:73:
50:e5:01:8b:a7:89:ac:d9:37:bd:2a:16:19:ea:7b:9d:7f:b2:
9c:50:be:ec:91:58:73:e6:21:3c:69:28:8f:c0:12:21:59:a6:
94:cd:b6:d0:84:19:73:81:81:f5:a7:b2:ff:89:37:83:f3:53:
35:96:ac:88:5b:73:41:ba:c1:72:1f:f0:64:9d:8a:cb:d1:fb:
33:0c:b3:01:38:70:81:83:34:a5:9d:cd:c0:9e:e9:4a:f8:e3:
c6:5a:01:4c:47:3d:65:bf:2a:8b:e3:55:05:13:cb:06:67:5a:
1e:93:da:43:3f:9b:b2:8d:dc:2a:e4:13:4e:d0:c3:9a:05:0b:
5a:50:a8:4c:7c:e9:88:26:1c:3f:83:57:31:6a:ea:2f:49:97:
88:c8:8a:0b:6b:42:db:52:0d:a8:47:cb:db:a0:df:fb:92:22:
51:8e:e8:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:27:30 2024 by rpki-client on console-fra.rpki-client.org