Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/ldqTgCEN2Du9J8aFQ6UYVhNC2N0.roa
File: ldqTgCEN2Du9J8aFQ6UYVhNC2N0.roa (raw, json)
Hash identifier: Qen9PrL8w6iJWryOnqh+xk+rKYhDT+aevjivWNin9cY=
Subject key identifier: 95:DA:93:80:21:0D:D8:3B:BD:27:C6:85:43:A5:18:56:13:42:D8:DD
Certificate issuer: /CN=7c4b917dc9046a065678ae0df4d3e30369c59c69
Certificate serial: 01856BD339CEA1FD5A1C9CC9CFF9C4E24875
Authority key identifier: 7C:4B:91:7D:C9:04:6A:06:56:78:AE:0D:F4:D3:E3:03:69:C5:9C:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fEuRfckEagZWeK4N9NPjA2nFnGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/ldqTgCEN2Du9J8aFQ6UYVhNC2N0.roa
Signing time: Sun 01 Jan 2023 05:34:42 +0000
ROA not before: Sun 01 Jan 2023 05:34:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42978
IP address blocks: 185.117.13.0/24 maxlen: 24
2a06:8280:10::/44 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:d3:39:ce:a1:fd:5a:1c:9c:c9:cf:f9:c4:e2:48:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c4b917dc9046a065678ae0df4d3e30369c59c69
Validity
Not Before: Jan 1 05:34:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=95da9380210dd83bbd27c68543a518561342d8dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6e:a8:07:95:38:cb:66:6e:74:75:a0:e6:9e:
ab:44:90:1f:be:e3:35:5c:c2:3a:fa:3e:1d:9b:3a:
be:88:40:ab:80:ad:64:5e:08:8c:a6:a9:25:4d:53:
74:08:e5:1c:16:ef:4b:db:1c:1b:b0:6e:1d:75:aa:
4d:ed:24:8e:44:12:dc:51:50:6d:99:ee:0c:51:43:
ad:0f:e7:fb:84:1b:d7:1e:15:ad:4f:37:a8:a5:81:
c9:5c:ec:be:f1:c9:19:bd:a0:36:19:fa:af:8f:7f:
9b:97:68:22:3c:de:15:b2:8b:89:24:05:8b:fb:2a:
f7:52:22:8d:73:f5:84:ab:0a:5a:34:d3:ad:38:bb:
b9:38:99:9f:69:1b:c7:9a:c1:1f:b7:b0:e2:87:a3:
c4:53:f2:74:14:b9:26:25:b8:be:c5:ab:4b:d9:52:
19:90:51:3c:2c:05:bd:15:d6:51:98:cf:61:19:22:
ec:31:00:63:28:f7:38:93:4c:63:01:5f:d4:d8:b2:
75:c3:2b:3d:16:5a:52:2b:b9:38:73:9b:6d:2c:1f:
44:e4:92:52:e2:50:ec:4e:b1:25:99:7f:f9:1a:33:
f6:22:71:06:fe:7a:6b:bb:ab:89:68:44:62:3d:39:
2f:21:41:ba:2c:c8:b1:24:c8:3e:bb:20:31:29:18:
32:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:DA:93:80:21:0D:D8:3B:BD:27:C6:85:43:A5:18:56:13:42:D8:DD
X509v3 Authority Key Identifier:
keyid:7C:4B:91:7D:C9:04:6A:06:56:78:AE:0D:F4:D3:E3:03:69:C5:9C:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fEuRfckEagZWeK4N9NPjA2nFnGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/ldqTgCEN2Du9J8aFQ6UYVhNC2N0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/fEuRfckEagZWeK4N9NPjA2nFnGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.117.13.0/24
IPv6:
2a06:8280:10::/44
Signature Algorithm: sha256WithRSAEncryption
36:77:21:50:e2:9d:cb:9a:1d:2d:fc:52:21:d6:a2:22:54:65:
bf:8c:d1:23:29:d4:88:73:1b:f0:b7:bb:2a:86:79:42:30:1e:
bb:43:7c:94:09:f6:b2:94:b2:ad:c0:54:12:e3:a5:55:dd:29:
41:f2:84:d3:9a:bd:af:df:be:64:2f:ba:56:31:f3:5f:ed:63:
cf:f7:c2:fd:f2:b2:da:0c:1e:45:dd:b2:e4:6d:f2:8f:44:33:
fb:8f:fc:af:8d:a0:94:37:b8:ff:90:a3:6a:91:3a:67:35:34:
3c:34:78:83:c0:79:4a:3b:7e:ae:a5:9b:d2:1f:8c:33:ef:f7:
26:ed:f8:ca:63:9f:00:db:c6:13:75:38:f1:7c:4e:a5:37:2e:
1b:9a:f7:1d:0a:39:ae:b4:db:9e:bc:89:ef:d4:c9:ed:02:c8:
72:8c:66:b4:96:63:75:7b:98:e7:d6:69:d9:da:60:eb:8b:dd:
bb:4a:88:02:54:46:69:88:4e:d6:9f:7b:2c:e8:85:11:01:d9:
64:e0:4e:fb:38:c5:05:e3:92:45:1d:3e:9c:f7:de:92:a6:03:
1a:ce:16:75:ed:e0:fb:62:63:21:8a:b0:54:f6:eb:33:49:c6:
e1:37:0a:2f:7d:ea:32:5b:2a:e0:25:44:5d:a7:07:75:ca:d2:
c5:7f:c2:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:09 2024 by rpki-client on console-fra.rpki-client.org