Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/LcPzz6oC3SU7FczKD70cIoq_fOc.roa
File: LcPzz6oC3SU7FczKD70cIoq_fOc.roa (raw, json)
Hash identifier: xQu5bg5nzxYCKhp2nNsMlLvS5YE7bC2BgcOWrdEOL44=
Subject key identifier: 2D:C3:F3:CF:AA:02:DD:25:3B:15:CC:CA:0F:BD:1C:22:8A:BF:7C:E7
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 018CC64B37E36FFBF8CEF8335FED572E3E44
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/LcPzz6oC3SU7FczKD70cIoq_fOc.roa
Signing time: Mon 01 Jan 2024 18:31:07 +0000
ROA not before: Mon 01 Jan 2024 18:31:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43212
IP address blocks: 217.60.192.0/22 maxlen: 22
217.60.188.0/22 maxlen: 22
217.60.196.0/22 maxlen: 22
217.60.200.0/22 maxlen: 22
217.60.203.0/24 maxlen: 24
217.60.201.0/24 maxlen: 24
94.182.14.0/24 maxlen: 24
217.60.202.0/24 maxlen: 24
217.60.200.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 13 Apr 2024 10:18:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:37:e3:6f:fb:f8:ce:f8:33:5f:ed:57:2e:3e:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: Jan 1 18:31:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2dc3f3cfaa02dd253b15ccca0fbd1c228abf7ce7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f7:17:d9:88:c8:99:d9:34:95:da:59:62:ca:
ba:7c:d9:33:a1:f7:58:85:5f:5c:60:b4:10:56:b5:
ee:50:63:2d:a2:17:d2:c6:90:db:f3:a4:19:76:66:
8d:fb:22:5b:f8:6d:bd:67:12:f7:9c:44:a5:33:b4:
38:a9:f5:62:4b:fa:9b:55:1c:78:1e:50:4c:c2:a6:
ac:dc:c5:40:fe:a2:bf:62:f2:74:1d:3b:89:57:9c:
70:f7:6b:92:3a:ca:01:11:84:dd:0d:1a:9b:14:d2:
77:53:86:36:ac:a3:dc:db:18:10:9d:4f:7b:e0:09:
fc:3f:ea:24:6e:1b:c7:20:53:dd:8c:6b:b4:b3:8e:
06:23:c2:a8:c1:cb:e0:9b:94:f5:fb:7f:92:bd:7b:
52:b9:1b:54:7b:16:a9:a1:f7:9a:11:10:97:9f:19:
c0:07:f9:f4:eb:a0:e7:55:00:da:37:90:4a:3c:55:
49:9c:f7:73:3f:ef:00:7f:82:a0:8f:a4:20:33:55:
17:f5:7d:ba:14:d2:22:9e:a5:d9:62:39:1e:c3:8f:
bb:65:6e:b7:28:69:96:72:4d:44:9a:fd:ac:9a:aa:
66:12:7f:0c:ca:d2:32:aa:27:bf:bd:12:06:19:e4:
45:59:ca:0a:43:b8:37:59:01:1b:3a:e4:e2:1f:54:
18:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:C3:F3:CF:AA:02:DD:25:3B:15:CC:CA:0F:BD:1C:22:8A:BF:7C:E7
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/LcPzz6oC3SU7FczKD70cIoq_fOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.182.14.0/24
217.60.188.0-217.60.203.255
Signature Algorithm: sha256WithRSAEncryption
0e:24:29:89:41:b9:ab:7b:d3:cf:47:ee:c5:50:7c:0f:52:25:
1e:6f:23:0e:63:13:b5:a0:44:6a:9e:59:07:07:82:60:fb:ae:
8e:1e:0e:d3:25:5a:5d:05:09:68:b9:4d:36:6f:45:ac:a1:06:
e6:41:73:fb:94:4c:11:54:be:0a:6b:51:47:6d:10:81:a7:0d:
b5:0f:c4:e2:69:fc:b4:dc:f6:d5:72:4b:89:17:b7:6e:90:6b:
a0:68:74:07:98:c3:b9:e4:a2:20:4e:14:45:88:38:03:35:cf:
24:25:8f:52:3d:71:d0:1f:28:3d:0a:5f:a3:03:33:90:ac:45:
1b:f7:d5:6c:80:15:e1:3c:82:b8:ff:5e:a8:58:3f:7e:ff:53:
0d:3b:6b:27:c3:4d:29:da:6c:90:c8:b5:4a:f1:4c:70:03:94:
c7:55:8c:51:c5:a5:15:04:bd:02:2a:52:64:08:08:02:d7:7a:
18:1e:d5:fa:70:f0:83:ac:f9:5c:3f:db:b3:57:13:05:9a:2d:
18:22:50:93:ee:97:78:c8:bf:10:a8:cb:b9:6f:b5:73:a0:e5:
cf:02:53:31:4c:2c:91:fa:35:ef:9e:fc:de:d8:0e:32:1b:27:
d9:06:95:b6:60:46:14:c8:84:53:49:d3:d0:78:c0:37:48:cf:
e8:93:e7:f0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 13 11:04:57 2024 by rpki-client on console-fra.rpki-client.org