Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/lZZOun7Ue5oUd4iyBaBBXnPlMtA.roa
File: lZZOun7Ue5oUd4iyBaBBXnPlMtA.roa (raw, json)
Hash identifier: DH+4AufCskoRy1jTqpcbESvf7Xxi0PqF4asf9FBjlrQ=
Subject key identifier: 95:96:4E:BA:7E:D4:7B:9A:14:77:88:B2:05:A0:41:5E:73:E5:32:D0
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 01856ED4DD4B08517E045510464EAEF80E60
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/lZZOun7Ue5oUd4iyBaBBXnPlMtA.roa
Signing time: Sun 01 Jan 2023 19:35:22 +0000
ROA not before: Sun 01 Jan 2023 19:35:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212097
IP address blocks: 178.19.39.0/24 maxlen: 24
185.227.102.0/24 maxlen: 24
178.19.36.0/22 maxlen: 22
178.19.36.0/24 maxlen: 24
178.19.37.0/24 maxlen: 24
178.19.38.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:dd:4b:08:51:7e:04:55:10:46:4e:ae:f8:0e:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 1 19:35:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=95964eba7ed47b9a147788b205a0415e73e532d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:cf:d6:02:e9:ff:ee:91:dc:37:c4:18:d8:a1:
41:ba:41:30:b2:4e:bd:1e:dc:28:dc:4d:a9:c7:ed:
f7:89:81:9a:ee:ec:1c:0e:b9:f5:f6:bc:ce:4a:cd:
41:18:95:a7:39:c1:0c:31:32:28:fd:cb:48:5a:2f:
25:66:36:6a:f1:07:68:c2:cf:06:c5:13:21:56:e4:
52:28:2a:d4:42:13:51:ee:48:21:80:d3:58:3c:08:
74:99:44:fe:84:f9:c1:22:9f:de:14:68:72:8b:66:
28:42:de:63:f5:b5:28:07:92:5e:4e:04:39:59:b5:
2c:4b:d8:1b:18:4a:44:bc:1b:ba:76:7d:67:4f:be:
4b:db:41:21:13:6e:23:e0:9e:9c:3b:b5:60:c6:1f:
32:b4:9e:3d:b8:28:95:71:e2:55:58:5d:f4:3e:d1:
08:ca:8d:50:b9:4a:47:b0:3a:f2:3f:c2:cd:dd:07:
46:5d:f8:69:e1:76:60:9a:f1:00:fc:35:24:d3:89:
34:5a:85:e8:99:12:95:48:8e:7f:31:1c:0d:7c:fb:
0b:74:ea:98:d6:c5:c4:51:9b:c7:a8:66:ef:2e:59:
11:ba:69:3c:64:e2:8c:6a:de:48:3e:b6:bf:61:c2:
f6:8b:42:09:c0:a5:af:5f:ec:35:36:bc:31:12:41:
e6:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:96:4E:BA:7E:D4:7B:9A:14:77:88:B2:05:A0:41:5E:73:E5:32:D0
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/lZZOun7Ue5oUd4iyBaBBXnPlMtA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.19.36.0/22
185.227.102.0/24
Signature Algorithm: sha256WithRSAEncryption
80:98:48:a0:3d:fb:ba:c0:ed:f4:0a:a8:ad:74:87:60:df:68:
6e:bc:38:51:1d:19:f0:57:ef:4f:38:82:27:92:32:84:84:d5:
0a:aa:e4:55:72:07:9d:2b:86:68:a7:31:cd:57:11:4b:18:bd:
a5:99:7e:20:e4:88:b3:57:31:36:a8:6f:99:c7:5f:7c:95:5c:
c7:83:71:c4:49:24:d7:e9:a9:97:14:d5:36:db:ee:2e:cf:e6:
18:95:bf:71:dd:e1:ea:be:f4:97:e1:f7:ab:c4:09:4c:e5:c3:
8f:e6:ed:dc:3b:8e:c4:5f:5d:c2:2c:24:90:4b:2f:50:36:ce:
26:ce:d9:9d:42:fd:c8:a8:52:cc:ab:a4:6e:05:f1:0f:f2:e7:
5d:1f:90:b9:45:2a:95:bb:3c:55:d4:25:af:3b:6f:65:2e:dc:
4a:a9:10:e5:f2:9d:3d:3d:40:94:4c:9a:f7:66:ce:56:7d:ee:
0a:2d:95:87:0a:7d:e1:ed:e9:aa:97:d5:94:84:ec:fe:27:5a:
57:8f:b7:e9:24:ac:6b:69:42:69:42:50:0d:38:31:7b:16:bc:
82:02:53:99:8b:b8:99:cb:4a:36:8f:f9:e4:eb:31:9c:2e:d6:
bb:7f:b0:79:b7:d2:92:65:ad:ac:e5:9e:f1:56:1b:43:6d:d4:
c6:4e:6b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:36 2023 by rpki-client on console-ams.rpki-client.org