Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5615ec-51c5-4a4d-b6f9-e407e6025a43/1/LCufc26nOz-pt8DaJeGtJhhm0s4.roa
File: LCufc26nOz-pt8DaJeGtJhhm0s4.roa (raw, json)
Hash identifier: 9fyNAJUIhl1y/U0Gv3QzsHH9PnZUZcAL7R8z5CjkQPw=
Subject key identifier: 2C:2B:9F:73:6E:A7:3B:3F:A9:B7:C0:DA:25:E1:AD:26:18:66:D2:CE
Certificate issuer: /CN=1f00b0aa8924c377889e3d3b996093b87a73d0e1
Certificate serial: 018CC2DB408016909D70D40284AE8F6B2226
Authority key identifier: 1F:00:B0:AA:89:24:C3:77:88:9E:3D:3B:99:60:93:B8:7A:73:D0:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HwCwqokkw3eInj07mWCTuHpz0OE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5615ec-51c5-4a4d-b6f9-e407e6025a43/1/LCufc26nOz-pt8DaJeGtJhhm0s4.roa
Signing time: Mon 01 Jan 2024 02:29:57 +0000
ROA not before: Mon 01 Jan 2024 02:29:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50264
IP address blocks: 185.165.22.0/24 maxlen: 24
185.165.21.0/24 maxlen: 24
185.165.20.0/24 maxlen: 24
185.165.23.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 15 Mar 2024 19:03:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:40:80:16:90:9d:70:d4:02:84:ae:8f:6b:22:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f00b0aa8924c377889e3d3b996093b87a73d0e1
Validity
Not Before: Jan 1 02:29:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2c2b9f736ea73b3fa9b7c0da25e1ad261866d2ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:81:d7:45:b9:54:80:aa:66:52:c4:6b:f5:e8:
9b:8d:15:c7:10:58:87:c9:16:ba:dc:ed:67:23:db:
03:81:01:55:a6:9b:33:4c:86:42:ac:91:c1:b1:0a:
58:f2:9a:ae:cc:1c:73:4f:60:31:98:3b:f0:bd:e8:
8d:d8:28:ad:5c:77:62:6d:5a:6f:f6:78:be:05:d1:
2f:f4:a9:2c:bf:e9:14:8d:75:72:dc:40:0e:d8:9a:
35:b7:d5:8f:ef:f9:ba:2b:4b:8e:a6:63:48:ca:6e:
6d:1c:45:78:6a:7d:9f:ec:c9:05:0a:e2:af:ef:12:
ee:c5:e4:a6:3a:6c:80:16:22:3c:4f:79:cd:d2:d4:
6e:d8:17:0a:80:d9:ac:82:51:99:78:0c:1d:40:eb:
11:9f:35:4e:ea:10:5c:96:65:04:41:f5:49:e8:d1:
64:5c:c4:db:fd:90:7c:51:e1:e9:3b:17:30:93:38:
fd:11:85:c2:5e:02:30:c8:e7:26:cd:1b:fd:df:c0:
af:0e:30:0d:44:7c:04:77:05:60:cb:8c:6a:a5:79:
ed:a7:9a:30:47:56:33:8e:73:57:c7:89:54:c4:79:
1f:e8:13:93:cb:a1:ca:db:7c:ba:ce:02:c8:ca:db:
77:72:ff:26:33:66:9c:94:72:8d:92:40:27:30:34:
74:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:2B:9F:73:6E:A7:3B:3F:A9:B7:C0:DA:25:E1:AD:26:18:66:D2:CE
X509v3 Authority Key Identifier:
keyid:1F:00:B0:AA:89:24:C3:77:88:9E:3D:3B:99:60:93:B8:7A:73:D0:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HwCwqokkw3eInj07mWCTuHpz0OE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5615ec-51c5-4a4d-b6f9-e407e6025a43/1/LCufc26nOz-pt8DaJeGtJhhm0s4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5615ec-51c5-4a4d-b6f9-e407e6025a43/1/HwCwqokkw3eInj07mWCTuHpz0OE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.165.20.0/22
Signature Algorithm: sha256WithRSAEncryption
57:e5:6c:8b:2c:6d:22:80:eb:1d:1a:b5:dd:f5:63:70:7b:40:
9a:ba:bb:ef:6f:77:f6:a3:f7:bb:f1:c1:44:8e:9a:ef:b6:b9:
7e:fd:23:36:5f:7d:1e:51:18:4b:65:e6:f8:ab:ef:f8:7f:8e:
d8:84:85:02:33:c7:66:dd:56:f8:c6:83:ca:94:6d:c5:11:df:
de:ce:48:f1:a6:e8:2d:6f:2b:9a:79:fa:8d:de:87:3a:9f:d1:
ab:d4:ca:90:57:6a:ce:50:cd:f8:c4:17:40:e8:75:c5:38:8d:
22:36:31:ad:23:b7:74:5e:7c:fd:3f:e5:c3:4e:65:54:59:a6:
a0:b4:62:67:15:5b:f0:d9:35:f9:77:88:37:cb:0a:95:0c:14:
69:05:dd:aa:67:5c:f6:19:fa:55:99:1c:a2:6c:b3:2f:f1:84:
3b:24:53:01:78:f9:87:83:60:30:1f:39:a2:15:91:8d:2a:6d:
4c:de:57:43:e1:e4:49:d4:7b:36:4e:ae:ce:52:db:23:66:b0:
8c:4b:ae:00:f4:7b:55:a2:c6:da:0e:a5:a3:a6:63:cf:2d:cb:
82:f9:e8:5b:75:5c:0a:58:d7:b6:f4:0a:3b:a1:57:e5:bd:4b:
fa:07:98:79:06:cb:06:07:fa:b8:56:aa:6f:e0:24:8a:06:d2:
f7:38:49:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 15 21:23:10 2024 by rpki-client on console-fra.rpki-client.org