Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/Lc-ZmUg3AxlH7T41byCtYf7MORU.roa
File: Lc-ZmUg3AxlH7T41byCtYf7MORU.roa (raw, json)
Hash identifier: Czae3+uHwyRe1BTn6dRFNHk7OVmPW9balu/LUsn2hBc=
Subject key identifier: 2D:CF:99:99:48:37:03:19:47:ED:3E:35:6F:20:AD:61:FE:CC:39:15
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 0186175100DAB3B84EA0E7313FE5D0B52FDE
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/Lc-ZmUg3AxlH7T41byCtYf7MORU.roa
Signing time: Fri 03 Feb 2023 12:47:09 +0000
ROA not before: Fri 03 Feb 2023 12:47:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 264825
IP address blocks: 185.181.32.0/23 maxlen: 23
185.181.34.0/23 maxlen: 23
Validation: Failed, certificate revoked on Sat 05 Aug 2023 07:12:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:17:51:00:da:b3:b8:4e:a0:e7:31:3f:e5:d0:b5:2f:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Feb 3 12:47:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2dcf99994837031947ed3e356f20ad61fecc3915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3d:ad:fc:a8:1b:b7:f7:5e:65:a7:1e:52:1e:
d5:ab:52:30:3c:88:aa:cf:01:9d:f6:0c:10:43:b2:
17:fe:64:65:77:eb:20:d1:1f:93:08:b6:3b:60:0a:
05:25:29:a1:83:17:9b:1e:c1:65:dd:96:56:5a:ad:
3e:01:46:e9:51:3b:5e:b0:22:80:8f:af:b6:37:92:
66:56:ba:37:25:46:6b:54:81:f8:c8:9f:81:83:4f:
6a:1d:d7:53:85:1b:d6:44:c3:83:5b:56:f7:00:fb:
8d:17:53:1a:90:d5:f3:b4:6f:91:02:2d:1d:c2:7e:
16:a1:1d:56:f9:60:4c:10:52:ff:2f:c7:59:96:c9:
63:e2:8a:ae:3f:b0:a1:be:b4:1e:33:16:fc:61:89:
71:ae:af:7e:93:c2:e7:46:39:c5:77:8f:3d:0d:42:
2d:ca:f1:98:96:f5:a1:51:3a:94:7d:55:7c:52:fb:
e7:10:2f:99:cc:9b:73:7f:59:a3:71:b8:b7:da:1a:
12:c6:4c:03:37:50:1d:3d:36:0b:5e:f4:53:60:af:
c5:a6:a7:94:8d:c2:4d:37:8e:ca:b7:07:98:64:08:
ba:26:0d:38:f5:07:16:fb:0d:7b:03:3b:70:57:6c:
a3:a4:f4:33:0a:2a:f3:a5:61:be:c4:c7:fa:c3:5b:
d4:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:CF:99:99:48:37:03:19:47:ED:3E:35:6F:20:AD:61:FE:CC:39:15
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/Lc-ZmUg3AxlH7T41byCtYf7MORU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.181.32.0/22
Signature Algorithm: sha256WithRSAEncryption
99:61:2e:f7:21:3c:3e:95:d9:dc:f4:3e:65:5e:78:c5:96:21:
e5:0e:31:e0:e0:6e:71:9c:d0:47:78:69:af:4d:46:f5:d3:4a:
0e:67:f7:e1:1f:68:5d:0d:06:12:5d:6f:d3:80:5c:b0:c1:cf:
2f:24:6b:a2:65:b7:b1:a8:61:95:9a:08:01:34:bb:2e:52:f8:
1f:2c:4d:c4:8f:93:ac:12:5c:fa:ed:c7:8b:22:f6:a4:9d:db:
aa:eb:77:19:ab:78:c0:bb:0b:86:25:95:a9:af:79:84:1e:fe:
ad:e6:b8:10:a5:75:73:ef:cc:ec:f0:d7:dc:7e:5e:23:3b:8c:
30:4e:38:22:96:48:e7:d9:06:4f:27:46:81:80:83:2b:ea:1c:
0f:75:5c:a8:3c:be:0c:2c:29:43:66:76:f1:75:6a:c1:d4:f6:
6c:a9:0e:d5:cd:55:80:61:29:4c:09:28:a4:fa:68:e3:b5:e3:
25:63:d2:24:21:c6:6d:6e:59:bb:b4:5c:6d:01:97:f5:9a:71:
0a:68:b9:a6:3f:89:34:16:de:a7:de:a9:4e:a0:ef:7c:5e:a7:
a9:e7:0a:57:62:b6:b3:16:d9:08:3c:9e:ae:b0:c9:bc:b4:f3:
92:7f:4f:fd:a1:5c:49:60:95:ab:94:9a:38:59:17:b6:e1:7a:
60:4d:bd:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:56 2024 by rpki-client on console-fra.rpki-client.org