Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/Lsw93UlLkaW3syxlZFEg9HpDUPo.roa
File: Lsw93UlLkaW3syxlZFEg9HpDUPo.roa (raw, json)
Hash identifier: ox3nmWOnkqlbWQWIR0vaAY8yVYqbUvvw6a3OZhdXG7M=
Subject key identifier: 2E:CC:3D:DD:49:4B:91:A5:B7:B3:2C:65:64:51:20:F4:7A:43:50:FA
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 018CE3D70356C448649F8F8703099AD7EFA4
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/Lsw93UlLkaW3syxlZFEg9HpDUPo.roa
Signing time: Sun 07 Jan 2024 12:12:48 +0000
ROA not before: Sun 07 Jan 2024 12:12:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60808
IP address blocks: 188.253.96.0/19 maxlen: 24
5.34.216.0/21 maxlen: 21
185.215.246.0/24 maxlen: 24
188.253.12.0/22 maxlen: 22
91.247.177.0/24 maxlen: 24
146.19.135.0/24 maxlen: 24
2a05:ec80::/29 maxlen: 48
Validation: Failed, certificate revoked on Tue 09 Jan 2024 08:19:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e3:d7:03:56:c4:48:64:9f:8f:87:03:09:9a:d7:ef:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jan 7 12:12:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2ecc3ddd494b91a5b7b32c65645120f47a4350fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a7:e7:b0:ed:a6:62:63:73:3f:68:71:78:f9:
e8:bc:23:72:b7:46:e3:95:e4:e6:fb:e3:af:bd:76:
0d:38:cc:73:11:89:a1:3a:8e:de:58:91:4e:e3:4d:
ef:96:4b:18:fe:3e:bc:fc:d0:88:ba:2d:2f:6d:0e:
df:0a:a2:41:5f:77:7a:ee:f7:e4:79:5d:e7:21:54:
ce:58:f1:92:6a:f4:e3:9e:0a:99:8d:d8:d5:eb:1a:
43:e2:83:03:76:97:f3:20:d4:51:1c:fa:b9:bb:14:
91:48:18:05:a1:84:83:46:06:1b:92:d0:03:55:0a:
ad:77:c0:68:c7:24:11:61:27:8b:7c:98:ca:35:0c:
a9:7a:10:be:b5:aa:cc:45:ab:bc:f8:f1:48:4b:4d:
74:2d:18:00:bf:be:fc:71:ca:8c:40:be:12:39:45:
81:80:b9:1e:2f:a1:2b:9c:a6:b3:39:fc:dd:19:de:
5a:de:d6:46:e5:5e:2d:c5:e7:85:34:9b:19:c1:1a:
d8:39:17:a8:2d:88:e2:97:0f:41:c3:d2:3b:12:df:
bf:e7:b6:45:fa:17:6a:2f:a1:5e:06:4b:c0:50:a4:
24:51:45:2a:ff:a9:f1:1c:9f:1b:bd:ed:36:4a:dd:
25:3f:d5:dc:8f:6c:36:2b:0e:39:c9:bf:ab:1e:53:
7d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:CC:3D:DD:49:4B:91:A5:B7:B3:2C:65:64:51:20:F4:7A:43:50:FA
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/Lsw93UlLkaW3syxlZFEg9HpDUPo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.34.216.0/21
91.247.177.0/24
146.19.135.0/24
185.215.246.0/24
188.253.12.0/22
188.253.96.0/19
IPv6:
2a05:ec80::/29
Signature Algorithm: sha256WithRSAEncryption
1e:f2:5c:ec:c7:a3:78:cc:e9:58:e9:e7:91:82:2a:c7:fd:e7:
1b:d5:87:48:05:44:5d:0f:b7:97:75:9e:22:d7:df:40:e8:02:
85:63:12:ca:26:bc:3d:7b:1c:9f:33:f0:f8:81:34:aa:98:6c:
94:7f:94:b7:f7:b1:ec:89:3c:c6:07:5d:0f:57:a3:32:ce:96:
c0:02:e5:9c:67:c1:76:d1:a5:3d:e0:f8:03:41:84:3f:fc:d8:
83:f8:38:ca:4b:5b:f8:43:03:05:a0:44:41:29:da:01:61:a2:
59:1b:5b:5d:42:65:de:23:35:39:23:f8:71:44:fa:fd:04:1c:
49:70:f6:06:8b:18:32:a6:15:69:08:a3:e8:e0:7c:2a:f8:5a:
06:6d:d1:32:57:ca:95:dc:37:c8:0f:50:8f:79:21:68:cf:89:
0f:36:80:c7:e5:46:92:b4:1d:6f:60:39:d1:e1:72:ab:99:df:
71:27:bb:da:fb:cf:ad:84:bc:f1:80:4b:b4:9d:da:34:80:fc:
d0:79:7f:12:ca:43:70:b3:0c:bb:9d:e5:e7:85:8a:d9:fc:f8:
b7:bb:92:e8:eb:68:28:da:ab:c5:44:19:cb:76:d0:b2:e4:cf:
55:cf:8e:cb:26:3e:41:2c:71:69:6b:28:86:8f:90:eb:65:46:
c2:68:b0:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 11:02:44 2024 by rpki-client on console-ams.rpki-client.org