Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/Lg48ccYhrTWX5hhUoo2-ZMH0RIs.roa
File: Lg48ccYhrTWX5hhUoo2-ZMH0RIs.roa (raw, json)
Hash identifier: Uxe2xELPT6XEMkW1rfGUR4hYh14v5VXSfY8EuCOkieQ=
Subject key identifier: 2E:0E:3C:71:C6:21:AD:35:97:E6:18:54:A2:8D:BE:64:C1:F4:44:8B
Certificate issuer: /CN=c09fc8a067fa6d2476bdce24afffad17131d9e86
Certificate serial: 01857255929EBDFC27F00A40C4D09D98E940
Authority key identifier: C0:9F:C8:A0:67:FA:6D:24:76:BD:CE:24:AF:FF:AD:17:13:1D:9E:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/Lg48ccYhrTWX5hhUoo2-ZMH0RIs.roa
Signing time: Mon 02 Jan 2023 11:54:48 +0000
ROA not before: Mon 02 Jan 2023 11:54:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211607
IP address blocks: 195.230.103.0/24 maxlen: 24
2a10:b640:3000::/36 maxlen: 48
2001:678:e70::/48 maxlen: 48
2a10:b641::/36 maxlen: 36
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:55:92:9e:bd:fc:27:f0:0a:40:c4:d0:9d:98:e9:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c09fc8a067fa6d2476bdce24afffad17131d9e86
Validity
Not Before: Jan 2 11:54:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2e0e3c71c621ad3597e61854a28dbe64c1f4448b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a2:98:fe:08:39:68:7c:e1:ae:ce:1b:e7:b7:
40:a7:ea:f7:03:7c:b6:9f:18:d0:b3:d6:18:a8:d0:
37:e5:dc:4f:74:08:4d:72:7d:82:e4:d3:b8:51:c0:
ed:83:1d:39:6a:42:c1:29:f3:7b:c6:3e:8c:44:2e:
d7:5e:04:53:c6:7d:54:ff:7e:4c:01:ad:64:43:e3:
a0:bb:c4:db:08:bc:1c:41:be:e2:44:a9:1b:be:51:
5d:d0:f8:a2:6f:41:92:b3:82:62:3b:44:ef:bc:6e:
90:d2:37:dc:c9:b1:80:f8:6d:26:68:86:8c:cc:60:
cd:90:75:e1:9c:5f:b2:e1:e8:5e:91:5b:74:32:0f:
f5:6f:bc:18:ac:3b:e8:2c:16:24:b3:da:b7:9f:5f:
1b:9e:c4:f6:d2:f1:ce:b0:d8:15:ff:0e:63:ca:ac:
a2:e6:7a:ff:14:12:30:6b:f6:3e:56:a9:4c:2f:7a:
07:9e:cc:a8:63:75:a8:b6:e6:dc:23:ca:9a:3c:45:
6c:fc:c8:e5:93:23:4c:c1:5a:c7:89:63:be:2e:45:
f0:0f:69:bf:8c:20:20:6a:61:90:01:2e:89:28:c6:
3d:fc:10:c8:80:8e:f7:7e:c7:69:f4:a4:82:f8:fd:
47:7d:fb:5a:be:b6:90:4a:13:b3:42:dd:75:d2:13:
3c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:0E:3C:71:C6:21:AD:35:97:E6:18:54:A2:8D:BE:64:C1:F4:44:8B
X509v3 Authority Key Identifier:
keyid:C0:9F:C8:A0:67:FA:6D:24:76:BD:CE:24:AF:FF:AD:17:13:1D:9E:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/Lg48ccYhrTWX5hhUoo2-ZMH0RIs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.230.103.0/24
IPv6:
2001:678:e70::/48
2a10:b640:3000::/36
2a10:b641::/36
Signature Algorithm: sha256WithRSAEncryption
44:76:59:1b:9b:2b:d7:a8:28:fc:45:25:ef:0a:20:62:8d:39:
00:07:8c:1a:6c:02:31:2f:56:97:aa:6a:bc:07:2a:a0:56:9f:
23:50:7a:30:99:11:1e:ca:15:07:9b:24:45:2d:50:0c:74:d9:
b6:fd:82:94:57:aa:3a:3c:20:89:20:45:97:22:54:aa:34:dc:
5f:d7:d6:7d:1e:08:8e:a8:01:4b:37:c3:68:1c:5d:39:1b:96:
e9:2d:b3:10:2b:0d:0d:de:36:4e:fd:63:8c:1b:d7:59:84:43:
5f:95:63:26:f8:8d:61:9f:d9:a3:53:26:e4:c9:2b:95:cb:83:
ec:2c:7e:fc:ff:40:dd:ee:b4:88:4d:db:b1:a4:0d:0a:92:1c:
b1:2f:23:38:5a:a9:ca:c7:03:e4:a6:89:a5:07:24:7c:78:fd:
1c:35:4b:a1:11:a1:61:48:aa:69:89:a6:32:f8:98:95:6f:85:
a9:f6:a0:57:3d:6e:50:44:89:94:34:54:35:db:eb:7a:00:7a:
3b:03:b6:d4:e3:76:a8:de:ad:e9:f7:1e:b1:de:07:71:67:a4:
d9:c0:96:d7:22:40:5f:95:25:9a:66:c3:58:f9:de:3e:d9:5c:
06:8b:4a:9e:a3:46:f3:27:42:7f:e9:79:1e:31:8b:45:bf:27:
66:6c:66:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:32 2024 by rpki-client on console-ams.rpki-client.org