Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/LjkPOjqBASTwpKrCi8plpzcDgdM.roa
File: LjkPOjqBASTwpKrCi8plpzcDgdM.roa (raw, json)
Hash identifier: agwycf0fKhMPp5Rd8Rn3XqxPrAdOfiU7Ed5SPmWYyhU=
Subject key identifier: 2E:39:0F:3A:3A:81:01:24:F0:A4:AA:C2:8B:CA:65:A7:37:03:81:D3
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018D86F0F7B28D90BE0C5D570585841D3B2E
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/LjkPOjqBASTwpKrCi8plpzcDgdM.roa
Signing time: Thu 08 Feb 2024 04:19:15 +0000
ROA not before: Thu 08 Feb 2024 04:19:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 37.140.247.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
89.34.202.0/24 maxlen: 24
89.34.219.0/24 maxlen: 24
89.35.129.0/24 maxlen: 24
89.35.131.0/24 maxlen: 24
89.37.192.0/24 maxlen: 24
89.40.215.0/24 maxlen: 24
91.132.51.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
128.0.41.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 13 Feb 2024 04:49:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:86:f0:f7:b2:8d:90:be:0c:5d:57:05:85:84:1d:3b:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Feb 8 04:19:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2e390f3a3a810124f0a4aac28bca65a7370381d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:34:d0:0e:a8:26:6a:25:cb:7d:82:74:5a:6c:
17:3f:e4:a1:a0:33:cd:cc:35:eb:7d:fb:51:d1:e7:
e0:f8:ef:e8:cc:5c:05:22:ef:e4:26:de:c3:51:c0:
54:03:58:51:36:43:ff:d8:22:d4:b1:d3:8f:fb:70:
8f:4a:43:68:3d:ef:99:b3:6c:1c:08:9b:51:d2:7d:
f8:d6:4e:a4:d5:e4:56:b5:bd:d5:c8:38:0d:72:80:
d9:05:a3:38:d9:c0:db:f7:f2:60:3b:4e:59:cd:8d:
e5:fa:a1:3e:f0:2b:8c:b1:82:c8:c3:53:5f:81:b7:
d6:60:db:dc:64:14:86:c1:c7:f8:b9:c7:df:08:85:
32:b6:c0:54:cb:fa:80:38:95:d4:33:50:8e:3c:ba:
0b:b1:ff:c2:a6:e2:c5:6a:6e:36:a2:d8:0a:f8:b5:
92:96:66:ca:c8:c2:09:60:a0:de:38:02:a0:48:dc:
0d:8c:b0:f7:7c:42:20:36:43:94:31:cc:a2:a1:8a:
c5:c9:fd:49:ac:b2:7f:a7:56:e3:06:a3:a8:e2:89:
93:c9:55:91:0a:43:26:4a:e1:de:bb:d3:a4:e6:9a:
13:c6:6c:11:c2:91:1b:d5:b9:8d:a3:31:83:3f:0b:
05:97:11:f3:69:26:e3:7f:1d:0a:f7:95:53:e1:36:
78:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:39:0F:3A:3A:81:01:24:F0:A4:AA:C2:8B:CA:65:A7:37:03:81:D3
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/LjkPOjqBASTwpKrCi8plpzcDgdM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.140.247.0/24
89.34.106.0/24
89.34.202.0/24
89.34.219.0/24
89.35.129.0/24
89.35.131.0/24
89.37.192.0/24
89.40.215.0/24
91.132.51.0/24
93.114.183.0/24
128.0.41.0/24
Signature Algorithm: sha256WithRSAEncryption
10:aa:2f:81:fd:df:25:fa:bb:94:d1:4f:e4:34:d5:17:b6:0b:
3c:e3:71:22:1e:50:26:fa:29:b3:6d:8a:2c:5a:31:76:8f:d5:
56:be:e2:ff:61:40:3e:48:1a:60:d4:34:df:6a:3a:ab:c1:fa:
72:7a:ba:3a:e8:ec:ca:7e:a6:99:7b:d8:0d:82:db:4d:f1:17:
3b:90:73:12:a6:7e:ca:6b:cf:69:f9:38:b9:30:50:fb:10:3a:
d3:72:95:1b:1a:0a:be:35:74:87:ae:b1:57:0a:b3:9c:53:85:
b9:60:a1:43:1a:c6:b9:f3:b7:aa:e2:ef:73:8d:c7:6c:ec:57:
f4:46:2a:48:f7:4e:5a:f7:57:5c:06:75:79:06:e6:c9:5a:13:
1b:bb:de:dd:cd:a6:85:6b:a0:e5:7d:6c:7b:4b:61:a0:b1:91:
47:95:9f:5b:a9:94:d8:8d:1e:00:3c:a5:2d:e7:a6:0b:e0:aa:
ac:17:e5:48:25:aa:4c:2f:77:94:c4:d1:61:b7:e0:fb:ad:5d:
8b:c9:ea:3a:af:ba:7b:ec:54:23:8e:e0:f8:d5:3e:21:0c:6a:
8e:fc:46:6d:46:8b:c9:57:6d:35:7d:cf:b3:07:cf:1c:5b:a9:
a3:31:01:02:49:07:c8:25:61:e5:28:c9:f4:06:fd:73:94:af:
0a:6c:ff:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:12 2024 by rpki-client on console-ams.rpki-client.org