Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/1af625-c6ba-49db-af64-34928f9a1c4f/1/lGrDIIHgzgas_lmz4T6wl5LnH8w.roa
File: lGrDIIHgzgas_lmz4T6wl5LnH8w.roa (raw, json)
Hash identifier: /qKWK3Xqc5ftFl42zT5n5Ly45+bpZr9MnOU9x23xow8=
Subject key identifier: 94:6A:C3:20:81:E0:CE:06:AC:FE:59:B3:E1:3E:B0:97:92:E7:1F:CC
Certificate issuer: /CN=c191a7bf2f03a67fdffcb7144bd2f8114dcdd3b3
Certificate serial: 018CC5DC16391A701C0B13A524706C14B19F
Authority key identifier: C1:91:A7:BF:2F:03:A6:7F:DF:FC:B7:14:4B:D2:F8:11:4D:CD:D3:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wZGnvy8Dpn_f_LcUS9L4EU3N07M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/1af625-c6ba-49db-af64-34928f9a1c4f/1/lGrDIIHgzgas_lmz4T6wl5LnH8w.roa
Signing time: Mon 01 Jan 2024 16:29:44 +0000
ROA not before: Mon 01 Jan 2024 16:29:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202208
IP address blocks: 185.42.252.0/22 maxlen: 22
185.42.252.0/24 maxlen: 24
185.42.254.0/23 maxlen: 23
2a01:66a0::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 02 Jan 2025 03:49:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:16:39:1a:70:1c:0b:13:a5:24:70:6c:14:b1:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c191a7bf2f03a67fdffcb7144bd2f8114dcdd3b3
Validity
Not Before: Jan 1 16:29:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=946ac32081e0ce06acfe59b3e13eb09792e71fcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e6:81:b1:70:14:a4:a2:69:58:6f:12:c3:e1:
25:84:02:22:c2:26:55:e1:2d:d9:79:04:e3:93:70:
c4:dd:f4:5b:61:33:2a:1f:02:76:8a:56:d3:5d:2d:
57:bf:f2:02:6c:59:70:d0:bc:0b:e5:f0:24:10:e5:
f0:43:59:bc:d4:09:6a:f9:c1:3d:ff:8e:70:2c:3f:
1a:76:97:80:15:e9:61:ff:22:e9:fa:c8:6a:d2:66:
08:e5:a9:6a:2e:3a:5a:b2:2a:41:bb:88:81:4a:a6:
ff:e6:9c:4c:42:50:18:d8:d9:b8:41:08:f5:76:3e:
8e:3d:ab:49:7b:df:96:b2:c9:1e:64:1d:0c:a9:e7:
32:73:01:83:9e:61:42:5e:e3:be:f0:f8:3d:7f:0b:
a7:e8:3b:27:74:a8:38:23:8e:ec:51:ee:88:6d:e5:
cf:6d:72:4b:a8:bc:57:4f:93:ef:fa:4c:6b:12:1b:
7b:28:9f:57:61:23:02:ae:7b:8a:27:07:25:af:6a:
f9:83:9b:fc:04:04:5c:56:f6:bb:be:02:90:5d:25:
57:d0:64:ad:67:6b:05:ca:11:84:cc:38:8c:30:3b:
9e:e0:01:f2:c8:2f:0c:88:79:d2:ce:5c:fa:e6:39:
02:4c:0b:be:4f:e9:38:70:6e:6e:fb:fe:04:00:f9:
f5:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:6A:C3:20:81:E0:CE:06:AC:FE:59:B3:E1:3E:B0:97:92:E7:1F:CC
X509v3 Authority Key Identifier:
keyid:C1:91:A7:BF:2F:03:A6:7F:DF:FC:B7:14:4B:D2:F8:11:4D:CD:D3:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wZGnvy8Dpn_f_LcUS9L4EU3N07M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1af625-c6ba-49db-af64-34928f9a1c4f/1/lGrDIIHgzgas_lmz4T6wl5LnH8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1af625-c6ba-49db-af64-34928f9a1c4f/1/wZGnvy8Dpn_f_LcUS9L4EU3N07M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.42.252.0/22
IPv6:
2a01:66a0::/32
Signature Algorithm: sha256WithRSAEncryption
ab:f2:d4:6f:5b:f6:3d:c6:4a:3a:cc:27:f5:3a:f2:d7:c2:b1:
8b:01:0a:7a:19:d5:dc:7b:1b:2b:bc:11:76:0f:aa:b7:e1:05:
a3:6a:cb:0b:00:07:7f:46:58:38:50:0e:e3:b3:99:5b:e7:f3:
ad:35:4e:8d:b4:c4:a7:59:9c:87:d4:8c:e6:6f:51:76:b4:ba:
41:9a:4f:3b:27:08:d2:59:6e:6e:96:5b:7f:d7:ec:7d:79:19:
4b:0e:c5:8e:07:bc:a5:e5:75:91:be:bb:ef:37:12:75:70:40:
6e:05:88:a5:be:fc:0f:38:90:3f:f0:48:3f:7f:e4:4b:57:95:
2e:08:0a:5c:0a:1c:2a:95:02:a2:09:1a:24:31:e6:d7:6d:ef:
d9:fc:d3:61:67:fc:cb:f3:28:49:9a:23:80:e4:06:83:11:57:
8b:ee:59:6d:1d:72:76:7c:d2:eb:d6:94:26:2b:c0:42:80:15:
fc:ae:2b:b2:4d:83:c5:33:18:5c:3e:7f:aa:03:08:cd:78:e3:
8a:86:18:16:83:d8:ae:d2:ff:a9:a3:d2:ca:62:7e:5f:96:6c:
21:c1:18:b9:d2:e8:c4:a9:87:39:ab:b2:b2:5c:7c:be:d7:dc:
fa:a0:d1:f2:d9:b6:5a:e0:1b:86:03:d4:e6:6c:b6:a7:46:04:
b2:10:25:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:21:14 2025 by rpki-client