Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/LdFtx0p6Bnz6KbcdxlcMOCJiR7o.roa
File: LdFtx0p6Bnz6KbcdxlcMOCJiR7o.roa (raw, json)
Hash identifier: wS/e+dV+zHtwzlE0Tv33t/5d6Prw0f1Vl0rHjE6Mg9Y=
Subject key identifier: 2D:D1:6D:C7:4A:7A:06:7C:FA:29:B7:1D:C6:57:0C:38:22:62:47:BA
Certificate issuer: /CN=aca1f4713024804c445403af63fa644b2a935d24
Certificate serial: 0185707972CA502DF045FD21B2E67D0AEB53
Authority key identifier: AC:A1:F4:71:30:24:80:4C:44:54:03:AF:63:FA:64:4B:2A:93:5D:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKH0cTAkgExEVAOvY_pkSyqTXSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/LdFtx0p6Bnz6KbcdxlcMOCJiR7o.roa
Signing time: Mon 02 Jan 2023 03:14:45 +0000
ROA not before: Mon 02 Jan 2023 03:14:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12902
IP address blocks: 185.240.112.0/22 maxlen: 24
217.77.128.0/19 maxlen: 19
217.77.144.0/24 maxlen: 24
79.98.168.0/21 maxlen: 21
79.98.170.0/24 maxlen: 24
2001:9c0::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:79:72:ca:50:2d:f0:45:fd:21:b2:e6:7d:0a:eb:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca1f4713024804c445403af63fa644b2a935d24
Validity
Not Before: Jan 2 03:14:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2dd16dc74a7a067cfa29b71dc6570c38226247ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ed:d6:7b:e2:b0:6c:9e:db:48:74:91:24:50:
88:c9:60:0d:66:fa:fe:e1:d8:c2:60:2f:a8:bd:b8:
3d:14:39:02:60:73:02:e4:3e:f5:0f:07:39:67:6c:
41:b0:56:0f:df:58:f5:d8:84:17:fc:7a:66:ba:31:
89:3b:5f:ac:df:9d:d4:1a:68:e8:9f:9e:d5:3d:1e:
ba:e1:9b:4b:ed:b3:44:20:a9:b1:59:59:c2:da:51:
77:b9:d6:bb:d0:61:89:80:33:1d:b9:af:bf:2d:d9:
50:2e:38:81:20:bf:eb:cb:a2:d9:d8:3a:ca:3c:b6:
17:2e:c1:4b:94:ee:d2:c2:f6:0c:bc:fa:86:86:12:
30:82:3b:38:98:da:0a:1a:60:43:28:49:0e:02:5f:
7e:80:a2:47:6b:12:e4:be:32:77:cc:80:22:3c:3e:
c6:3b:fb:b4:6b:95:23:b0:b8:cb:c1:06:86:58:e5:
73:96:dd:f9:16:a0:3d:ad:c3:d5:be:14:9a:a9:e9:
ec:b4:9a:5a:fb:bb:8d:71:59:df:84:9b:39:7a:9c:
9e:f2:e5:58:53:2f:c4:a8:66:9c:0a:38:1e:c9:de:
04:c8:71:15:2a:25:1e:c5:ff:99:89:2b:9a:79:48:
59:1e:15:53:42:3c:06:fd:55:ab:76:b8:22:75:2c:
a3:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:D1:6D:C7:4A:7A:06:7C:FA:29:B7:1D:C6:57:0C:38:22:62:47:BA
X509v3 Authority Key Identifier:
keyid:AC:A1:F4:71:30:24:80:4C:44:54:03:AF:63:FA:64:4B:2A:93:5D:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKH0cTAkgExEVAOvY_pkSyqTXSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/LdFtx0p6Bnz6KbcdxlcMOCJiR7o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/rKH0cTAkgExEVAOvY_pkSyqTXSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.98.168.0/21
185.240.112.0/22
217.77.128.0/19
IPv6:
2001:9c0::/32
Signature Algorithm: sha256WithRSAEncryption
0e:d6:ae:71:b9:45:ac:0c:9d:cf:57:8c:e7:eb:7d:f3:29:d6:
bf:d1:94:bd:35:b5:8b:6e:0a:92:56:9a:77:ca:dd:d6:25:a1:
12:5d:56:79:7f:69:b7:cc:84:39:8f:00:7f:bb:38:a6:34:ac:
b6:12:29:59:50:20:ea:f6:b2:e2:aa:06:d1:fd:06:68:07:5e:
80:a7:c2:c1:dd:52:fb:1c:19:ed:98:bd:36:75:ed:c7:ae:06:
54:c3:7f:5f:8d:f4:f7:d4:5c:58:bf:39:df:ba:a7:dc:f5:8f:
d7:cb:c2:c1:a0:1f:f7:a3:cd:44:46:dc:13:9b:41:2f:2e:85:
53:14:14:fc:ef:62:21:03:a2:93:94:bf:b3:a0:9f:44:b5:91:
58:01:3c:64:51:19:21:bb:d3:4e:28:69:f3:76:64:4e:bc:49:
14:db:56:3d:43:5b:c0:91:92:23:bb:88:71:51:f5:15:a9:05:
9b:6e:18:f3:c0:b5:f5:fa:5e:14:0b:19:73:13:04:e3:dc:d9:
2e:e6:b7:16:e5:57:4c:f6:ea:46:ba:21:ec:b2:bf:64:c8:17:
08:9b:cf:08:10:1a:e3:82:9c:0d:e6:56:89:6b:61:79:ab:b5:
3c:28:20:c9:0d:f3:93:dc:a9:e4:5b:0e:d8:97:e5:45:21:f6:
4b:19:0f:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:15:58 2024 by rpki-client on console-ams.rpki-client.org