Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/lBbMxDEWaG2ESXlcKxwPEkMgrmU.roa
File: lBbMxDEWaG2ESXlcKxwPEkMgrmU.roa (raw, json)
Hash identifier: 1tcBvMuhVmTPWZWS1ZiPItAwIMX+eVVwc6Y/fEuYtys=
Subject key identifier: 94:16:CC:C4:31:16:68:6D:84:49:79:5C:2B:1C:0F:12:43:20:AE:65
Certificate issuer: /CN=1acbdd00d27b8a8befc866caf378f19027684769
Certificate serial: 018D0F0FF72FE1A6F3BA582F363A692E4FAA
Authority key identifier: 1A:CB:DD:00:D2:7B:8A:8B:EF:C8:66:CA:F3:78:F1:90:27:68:47:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GsvdANJ7iovvyGbK83jxkCdoR2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/lBbMxDEWaG2ESXlcKxwPEkMgrmU.roa
Signing time: Mon 15 Jan 2024 21:38:40 +0000
ROA not before: Mon 15 Jan 2024 21:38:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35717
IP address blocks: 185.12.48.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 30 Jan 2024 09:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:0f:0f:f7:2f:e1:a6:f3:ba:58:2f:36:3a:69:2e:4f:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1acbdd00d27b8a8befc866caf378f19027684769
Validity
Not Before: Jan 15 21:38:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9416ccc43116686d8449795c2b1c0f124320ae65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:13:f0:26:70:8c:bf:3f:a9:98:38:f3:4f:82:
37:f4:db:4d:e6:0b:05:f3:e7:ad:ae:fc:9d:cd:bf:
74:07:56:ea:dd:05:77:c2:c5:21:4f:4f:51:99:78:
ae:4b:bd:60:be:52:27:99:3c:71:e9:78:26:e0:02:
e9:35:3a:a9:ae:c7:9d:6b:af:1b:4c:1e:47:bd:e1:
1a:d4:fb:b7:d1:68:71:b0:25:58:60:c7:74:de:e2:
a1:a1:c0:c1:4e:f4:f4:17:a7:2c:bb:63:24:bd:45:
36:7f:7f:0b:a8:3f:a2:51:cd:cc:d6:c3:f3:69:20:
95:81:fe:39:72:59:6d:2e:ab:fb:2f:b1:91:15:43:
55:d5:94:49:10:15:8d:b3:1a:e8:9f:5b:09:5e:8e:
ad:d6:1a:c5:f4:cb:4f:5a:25:08:43:98:5e:07:f0:
0a:f8:43:c2:a2:50:b0:77:f0:8d:64:48:53:e7:0d:
ad:9e:dc:a6:b8:27:d4:62:22:66:a6:ea:75:d4:1c:
69:ea:38:a7:5d:9b:e0:80:0a:c4:1f:77:85:84:e3:
4e:44:49:b2:25:3c:01:31:bb:84:4d:2f:0c:d9:95:
bf:d3:1a:fa:75:10:18:9e:93:0a:64:2d:81:7b:2c:
35:33:c3:86:b1:b8:e4:ec:ed:61:fd:32:83:61:15:
c6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:16:CC:C4:31:16:68:6D:84:49:79:5C:2B:1C:0F:12:43:20:AE:65
X509v3 Authority Key Identifier:
keyid:1A:CB:DD:00:D2:7B:8A:8B:EF:C8:66:CA:F3:78:F1:90:27:68:47:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GsvdANJ7iovvyGbK83jxkCdoR2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/lBbMxDEWaG2ESXlcKxwPEkMgrmU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/db4205-d57c-4ca2-8894-9f9536bb2c37/1/GsvdANJ7iovvyGbK83jxkCdoR2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.12.48.0/22
Signature Algorithm: sha256WithRSAEncryption
19:46:00:4f:46:c5:19:af:08:c2:00:ef:8f:6c:fb:21:10:80:
b8:c4:19:a4:50:7b:71:9a:bb:a9:da:61:86:0a:34:55:3d:3c:
91:5b:11:5b:26:f0:92:cd:55:a0:ea:96:cc:4c:5f:ba:0f:8f:
80:60:1b:99:50:b2:5b:41:1e:c3:56:09:54:59:94:ef:d8:26:
dc:c7:39:ed:3c:be:65:e1:e1:8b:38:c4:27:3b:72:b5:44:da:
e8:d0:76:40:cf:ae:d9:86:31:37:88:30:3d:e5:6d:4a:d6:a2:
a4:63:51:90:c3:55:72:c4:3b:5c:41:7d:40:79:e4:4d:ca:ef:
39:1b:e1:e4:19:fd:17:2c:ef:a2:c0:9e:22:bf:86:65:83:4f:
99:b6:f4:26:8c:d9:d7:cf:f7:e5:b4:81:74:4d:0f:fc:84:a8:
11:63:c0:4a:da:8b:fc:3f:51:62:02:3a:00:62:8d:57:97:45:
ec:7a:d3:66:4d:79:0c:d9:02:9d:4e:f2:ac:9a:cd:30:f0:03:
24:57:c8:96:3d:8f:30:20:84:52:bd:a1:78:44:9b:43:c2:b0:
f5:3b:34:cc:a3:03:b3:67:68:e8:21:77:34:2d:1a:44:f7:51:
ac:fd:3f:d6:46:d3:05:06:f7:fd:fd:d1:97:53:ae:ef:6d:13:
21:1b:13:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 30 13:50:32 2024 by rpki-client on console-fra.rpki-client.org