Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/LawmC0Pmuc5DVNmDrihMYuvGKBQ.roa
File: LawmC0Pmuc5DVNmDrihMYuvGKBQ.roa (raw, json)
Hash identifier: r0ZjebMuK+zZ1CFmoh2qwTkD9xwfJBzfQ+NjfhyHL8g=
Subject key identifier: 2D:AC:26:0B:43:E6:B9:CE:43:54:D9:83:AE:28:4C:62:EB:C6:28:14
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 01864BD5D873667CA5697D6BBB12AC2B30BD
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/LawmC0Pmuc5DVNmDrihMYuvGKBQ.roa
Signing time: Mon 13 Feb 2023 17:32:31 +0000
ROA not before: Mon 13 Feb 2023 17:32:31 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56361
IP address blocks: 95.46.172.0/22 maxlen: 24
95.46.166.0/23 maxlen: 24
95.46.168.0/22 maxlen: 24
31.148.192.0/22 maxlen: 24
31.148.104.0/21 maxlen: 24
93.171.36.0/22 maxlen: 24
93.171.34.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 19 Jul 2023 11:56:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:4b:d5:d8:73:66:7c:a5:69:7d:6b:bb:12:ac:2b:30:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Feb 13 17:32:31 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2dac260b43e6b9ce4354d983ae284c62ebc62814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c1:b9:a7:31:a1:7d:cd:ee:12:a5:01:55:6d:
5e:e0:5a:ed:b9:ab:45:a5:b2:2d:8b:b0:93:45:88:
bd:47:5f:40:17:fb:b9:13:3d:b0:17:9f:4c:bb:0e:
d0:47:ec:74:62:2c:8a:cd:a6:9b:67:25:3f:54:9a:
e8:e6:a1:64:3e:a7:77:76:04:bf:27:db:d0:13:2f:
54:9e:2a:f0:fd:6d:73:b9:86:3f:7a:85:59:8a:a4:
8b:ff:52:e9:c5:d0:95:8e:59:ec:71:42:49:14:58:
e5:6f:5d:ec:e1:fb:60:62:1f:3b:5b:5a:4f:15:c9:
c0:39:df:bc:81:2c:38:76:55:7d:c9:8a:8a:6c:02:
c9:8d:21:7f:0d:c1:47:e1:4b:75:e3:50:cc:c4:18:
ec:b3:6f:83:77:b5:1d:e5:a8:9e:b7:cb:e2:63:2e:
dd:d4:cf:32:f7:79:bd:75:cd:26:ae:f5:da:5b:5a:
d7:dc:cd:ff:2b:27:d3:88:e4:dd:79:23:01:ec:58:
fa:15:19:a1:00:f5:40:08:67:b3:20:db:97:e4:f1:
a5:4f:2e:77:69:75:27:7a:37:4d:72:eb:9c:75:00:
83:00:74:ed:5d:70:79:f3:53:42:88:e2:ff:00:93:
1e:04:e2:51:17:15:73:8e:52:5b:02:1d:c6:36:fd:
5f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:AC:26:0B:43:E6:B9:CE:43:54:D9:83:AE:28:4C:62:EB:C6:28:14
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/LawmC0Pmuc5DVNmDrihMYuvGKBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.104.0/21
31.148.192.0/22
93.171.34.0-93.171.39.255
95.46.166.0-95.46.175.255
Signature Algorithm: sha256WithRSAEncryption
4d:ce:e1:74:47:fd:34:f4:f4:41:0b:cc:c1:30:49:50:26:69:
dc:b5:12:9b:ae:8e:f3:50:91:59:f4:c1:b0:89:c3:d1:c6:12:
6f:08:27:cf:85:15:7b:6b:df:9b:de:90:b8:b0:02:6b:54:94:
46:cd:f1:74:79:f2:63:31:26:67:69:34:e0:dc:9b:22:fe:2f:
28:dc:1f:1c:eb:d7:3c:ac:68:45:36:c2:a4:fb:cf:59:bb:a8:
b4:c2:48:cf:9e:5a:45:ba:ff:ed:a3:56:80:bb:70:b9:c6:a5:
5e:ac:52:7f:a3:b8:c8:08:2c:38:cc:3a:1c:ce:fe:18:1c:ea:
d8:07:d4:11:94:11:ec:84:fb:80:d7:be:50:ff:a0:59:ea:00:
8d:cc:65:83:c1:05:d2:01:95:9f:f2:20:91:ee:82:60:75:b3:
fd:65:21:0d:b0:85:c2:da:c5:0e:94:35:af:9b:ce:14:68:ac:
63:76:ab:a2:f5:65:f7:9b:a5:41:cd:b0:d6:f8:f6:b6:49:45:
00:aa:ac:d8:71:82:bb:a0:41:1e:e4:da:03:2b:f4:58:e6:f5:
16:09:cd:50:de:44:5b:ba:cf:2a:b1:b6:13:96:b2:44:43:35:
71:45:2a:94:f8:80:df:b0:d6:8d:5a:04:67:38:31:f4:82:0d:
a6:8d:92:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:36 2024 by rpki-client on console-fra.rpki-client.org