Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/c937be-f5b1-43c6-9587-4e06621bd98a/1/lWXYls1hNUDS11pCKYmp0MiG80Q.roa
File: lWXYls1hNUDS11pCKYmp0MiG80Q.roa (raw, json)
Hash identifier: V84nM6MXmnbiyHWxEwGfaQ6b35uDAphEpzOZif90Pvc=
Subject key identifier: 95:65:D8:96:CD:61:35:40:D2:D7:5A:42:29:89:A9:D0:C8:86:F3:44
Certificate issuer: /CN=9a92d30708b9d4e8c7c28c97f8037c8027144c47
Certificate serial: 01891394117D797EF3A5C246AED22BF7971A
Authority key identifier: 9A:92:D3:07:08:B9:D4:E8:C7:C2:8C:97:F8:03:7C:80:27:14:4C:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mpLTBwi51OjHwoyX-AN8gCcUTEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/c937be-f5b1-43c6-9587-4e06621bd98a/1/lWXYls1hNUDS11pCKYmp0MiG80Q.roa
Signing time: Sat 01 Jul 2023 22:30:18 +0000
ROA not before: Sat 01 Jul 2023 22:30:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29170
IP address blocks: 185.67.177.201/32 maxlen: 32
178.132.216.0/24 maxlen: 24
82.114.81.0/24 maxlen: 24
178.132.217.0/24 maxlen: 24
82.114.84.0/24 maxlen: 24
82.114.79.0/24 maxlen: 24
178.132.216.0/21 maxlen: 21
178.132.220.0/24 maxlen: 24
82.114.88.0/24 maxlen: 24
46.19.224.0/24 maxlen: 24
46.19.224.0/21 maxlen: 24
46.19.225.0/24 maxlen: 24
46.19.230.0/24 maxlen: 24
82.114.64.0/19 maxlen: 19
82.114.64.0/24 maxlen: 24
82.114.70.0/24 maxlen: 24
82.114.65.0/24 maxlen: 24
82.114.66.0/24 maxlen: 24
82.114.67.0/24 maxlen: 24
82.114.74.0/24 maxlen: 24
82.114.77.0/24 maxlen: 24
82.114.78.0/24 maxlen: 24
82.114.85.19/32 maxlen: 32
185.67.176.0/22 maxlen: 22
185.67.176.0/24 maxlen: 24
185.67.177.0/24 maxlen: 24
185.67.178.0/24 maxlen: 24
185.67.179.0/24 maxlen: 24
185.67.177.175/32 maxlen: 32
185.190.132.0/22 maxlen: 22
185.190.132.0/24 maxlen: 24
185.67.177.176/32 maxlen: 32
2a04:3080::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:13:94:11:7d:79:7e:f3:a5:c2:46:ae:d2:2b:f7:97:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a92d30708b9d4e8c7c28c97f8037c8027144c47
Validity
Not Before: Jul 1 22:30:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9565d896cd613540d2d75a422989a9d0c886f344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:9b:7a:f5:4d:72:89:72:9c:62:72:38:04:62:
37:1e:48:98:43:c7:60:64:cc:88:4e:a3:45:d2:50:
e8:99:68:46:8f:ad:b9:b1:81:27:24:d5:c2:2d:6e:
35:af:e6:c0:df:60:6e:9a:3d:c2:54:ac:13:60:83:
67:a1:b6:d2:39:e3:5d:9e:5a:60:1f:93:e4:4d:c7:
fe:6a:ce:fb:15:8b:d8:ca:96:1d:3d:11:55:6f:c2:
30:76:13:e7:2b:0e:ca:1f:de:90:c5:5d:3b:36:db:
57:ab:41:31:df:fc:d1:51:5d:a3:6b:2e:0a:c9:32:
87:3e:43:3a:3e:32:38:bc:f4:12:48:34:f1:c0:89:
b4:b3:11:24:0e:b7:23:e5:14:70:ea:ad:51:30:16:
fd:04:77:17:c2:a4:e6:e6:54:2d:71:04:09:ae:98:
6a:01:18:57:5c:ef:fc:9b:70:93:40:79:7c:16:87:
04:36:bb:a1:b9:c0:d7:ba:0b:c0:14:ce:65:f6:b5:
6f:cd:3d:1b:c7:e7:cd:9b:f6:27:5a:58:aa:31:7a:
29:67:f4:ed:c9:ba:8d:53:03:a2:10:c6:97:b4:4b:
37:ab:d5:68:c0:ae:d9:f0:b5:a9:70:f1:52:19:d9:
55:8f:0b:07:99:2e:4f:aa:e0:e9:6b:3f:44:b7:1d:
ae:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:65:D8:96:CD:61:35:40:D2:D7:5A:42:29:89:A9:D0:C8:86:F3:44
X509v3 Authority Key Identifier:
keyid:9A:92:D3:07:08:B9:D4:E8:C7:C2:8C:97:F8:03:7C:80:27:14:4C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpLTBwi51OjHwoyX-AN8gCcUTEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c937be-f5b1-43c6-9587-4e06621bd98a/1/lWXYls1hNUDS11pCKYmp0MiG80Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c937be-f5b1-43c6-9587-4e06621bd98a/1/mpLTBwi51OjHwoyX-AN8gCcUTEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.19.224.0/21
82.114.64.0/19
178.132.216.0/21
185.67.176.0/22
185.190.132.0/22
IPv6:
2a04:3080::/29
Signature Algorithm: sha256WithRSAEncryption
2c:46:7e:00:1a:50:c8:3c:d9:ff:e2:a4:7e:3a:17:3b:c5:b3:
9f:fa:b8:cc:23:8b:d5:f3:0e:48:79:fe:34:a9:03:a8:5f:33:
38:a2:c1:4b:d6:ba:fb:32:d5:f3:84:a2:8d:71:35:8d:7c:7d:
10:82:6b:9a:00:f4:de:0d:3f:8c:7f:97:ea:f6:b8:0c:c9:e5:
95:7e:d8:e8:67:44:ae:65:1e:f2:43:3c:f0:28:fa:86:8a:86:
b2:10:7c:01:5d:ec:e5:f5:c1:c5:1e:f1:64:97:e3:6d:32:60:
8d:34:8b:64:0b:a0:78:d1:ea:5b:d6:b3:3f:a0:56:54:07:18:
30:74:7e:8a:be:f3:73:43:7d:df:32:47:3d:10:5c:ea:40:9c:
ed:a0:c0:88:86:94:e1:5d:48:11:cf:95:b0:b2:4b:72:66:1f:
ee:d1:27:50:24:55:08:3d:32:e7:c4:6c:84:45:f8:7f:a6:6d:
eb:a6:49:5c:71:71:54:8c:32:f8:2a:d1:fa:fb:2b:1f:b0:89:
9d:4f:22:87:d7:33:64:13:34:99:39:b3:89:9a:0f:d5:70:ed:
d2:57:a2:b9:e2:47:64:4c:ea:92:6a:0e:32:88:6e:01:b7:66:
f1:7e:af:dd:06:6f:f8:60:0d:57:6f:3e:ed:ff:be:f5:57:85:
97:a0:17:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:12 2024 by rpki-client on console-fra.rpki-client.org