Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/lrnijbIiTbnvLVRGpjWrFIBb4is.roa
File: lrnijbIiTbnvLVRGpjWrFIBb4is.roa (raw, json)
Hash identifier: Qkm57kJVdT5AV/cXUkVi01V6qexyJYBm3Dy4k7Lm0IA=
Subject key identifier: 96:B9:E2:8D:B2:22:4D:B9:EF:2D:54:46:A6:35:AB:14:80:5B:E2:2B
Certificate issuer: /CN=bbca3f25d54620b50ef8520657634d3b096bac57
Certificate serial: 0187A522E99C909B8686CC444B7F6EE3DD8A
Authority key identifier: BB:CA:3F:25:D5:46:20:B5:0E:F8:52:06:57:63:4D:3B:09:6B:AC:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u8o_JdVGILUO-FIGV2NNOwlrrFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/lrnijbIiTbnvLVRGpjWrFIBb4is.roa
Signing time: Fri 21 Apr 2023 18:45:41 +0000
ROA not before: Fri 21 Apr 2023 18:45:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58212
IP address blocks: 194.48.217.0/24 maxlen: 24
185.254.96.0/22 maxlen: 22
185.94.29.0/24 maxlen: 24
193.41.237.0/24 maxlen: 24
94.143.231.0/24 maxlen: 24
193.42.11.0/24 maxlen: 24
193.42.12.0/24 maxlen: 24
45.157.232.0/22 maxlen: 22
176.96.136.0/22 maxlen: 24
2.59.132.0/22 maxlen: 24
193.41.226.0/24 maxlen: 24
62.192.153.0/24 maxlen: 24
2a0d:5940::/29 maxlen: 29
2a0c:4ac0:1200::/40 maxlen: 40
2a0c:4ac0:1100::/40 maxlen: 40
Validation: Failed, certificate revoked on Thu 01 Jun 2023 21:39:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:a5:22:e9:9c:90:9b:86:86:cc:44:4b:7f:6e:e3:dd:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbca3f25d54620b50ef8520657634d3b096bac57
Validity
Not Before: Apr 21 18:45:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=96b9e28db2224db9ef2d5446a635ab14805be22b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f1:7b:c8:ab:2f:e3:6e:57:30:60:1a:3d:94:
8f:b9:0a:44:5c:ae:81:ed:c8:9a:72:9b:dc:82:93:
1a:8d:07:b3:71:36:09:a5:02:e4:f3:d1:c3:3e:db:
5c:be:67:22:6a:6f:45:d7:41:27:67:2a:19:a8:2a:
c5:26:eb:14:0a:7a:c3:1e:2c:4b:75:a2:b1:a0:9c:
28:06:9e:34:32:7f:dd:b1:59:dc:66:87:8a:44:26:
28:09:44:ac:3e:53:e1:d2:65:05:16:e6:93:0e:4c:
0a:53:fe:50:7e:5e:ee:a9:4a:25:fd:a6:68:61:12:
e2:7d:b8:ac:21:c9:02:89:33:2e:61:59:dc:31:a5:
85:67:1c:c9:d0:50:56:1b:de:4c:be:ff:73:89:de:
f8:5c:a6:da:2e:cf:62:98:82:11:9a:64:24:37:56:
f0:9e:de:33:a3:59:73:d0:a0:32:dc:76:dc:4c:6c:
a9:33:78:7f:46:06:97:39:8f:2f:d7:20:8e:49:ea:
47:ad:09:26:c5:bc:68:75:ab:9e:67:24:19:0b:7b:
11:3b:91:09:1d:51:93:44:69:e5:54:79:2b:89:fb:
b8:23:80:ca:70:15:c3:c3:86:e4:22:a1:a7:99:2e:
5b:a0:1e:55:4f:18:9b:1e:e1:8c:0d:2a:51:56:fe:
4a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:B9:E2:8D:B2:22:4D:B9:EF:2D:54:46:A6:35:AB:14:80:5B:E2:2B
X509v3 Authority Key Identifier:
keyid:BB:CA:3F:25:D5:46:20:B5:0E:F8:52:06:57:63:4D:3B:09:6B:AC:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u8o_JdVGILUO-FIGV2NNOwlrrFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/lrnijbIiTbnvLVRGpjWrFIBb4is.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/561d24-e921-4ec8-a611-4dc20c5b6268/1/u8o_JdVGILUO-FIGV2NNOwlrrFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.132.0/22
45.157.232.0/22
62.192.153.0/24
94.143.231.0/24
176.96.136.0/22
185.94.29.0/24
185.254.96.0/22
193.41.226.0/24
193.41.237.0/24
193.42.11.0-193.42.12.255
194.48.217.0/24
IPv6:
2a0c:4ac0:1100::-2a0c:4ac0:12ff:ffff:ffff:ffff:ffff:ffff
2a0d:5940::/29
Signature Algorithm: sha256WithRSAEncryption
68:26:2b:71:d9:ff:94:e2:d2:8d:67:29:48:16:a3:97:85:81:
06:c6:1b:22:f3:0c:4f:5c:a0:94:13:7a:39:4b:3c:17:b9:9e:
85:c6:cc:92:e8:dd:39:95:8e:5a:cc:18:d8:21:07:17:9f:e0:
ed:8d:82:2e:eb:a5:ee:61:65:c8:b4:be:42:3a:ac:89:1e:cf:
61:5e:45:85:d3:d4:98:4f:6e:40:ec:47:f8:8c:f6:c3:7e:eb:
33:4b:bb:81:04:e8:45:72:26:95:76:8c:91:60:93:8e:21:41:
49:a3:a7:60:9f:6b:95:4d:6c:42:bb:1a:0b:33:5b:d0:7f:84:
aa:72:5a:c9:7a:40:71:6c:bc:d5:47:3f:9b:0f:d2:cb:fa:e1:
1b:25:d4:22:ca:73:ae:8c:7d:c3:c7:e7:28:33:0e:3d:30:b4:
13:c1:e2:bf:dd:c9:f6:b0:e0:24:f4:90:48:00:37:62:e9:64:
3f:e1:e1:47:ae:15:9c:41:c6:58:e0:d9:15:57:5e:53:24:da:
b7:69:47:41:de:dd:85:41:e5:44:89:1b:98:6f:89:a7:06:fd:
b0:f0:61:54:28:a1:8f:46:a5:f8:11:e3:e5:4d:d1:cd:fd:3e:
58:31:98:e9:72:3e:7c:ef:be:77:1a:2b:76:ed:dd:a7:56:3b:
f4:16:2c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:43 2024 by rpki-client on console-ams.rpki-client.org