Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/LajrQbS9GkNNELa9rDTkQhtwyXs.roa
File: LajrQbS9GkNNELa9rDTkQhtwyXs.roa (raw, json)
Hash identifier: jlrLYOP0+U7kcDpwgJ2zfgZIlGPvBGDVngys2HKzz+Y=
Subject key identifier: 2D:A8:EB:41:B4:BD:1A:43:4D:10:B6:BD:AC:34:E4:42:1B:70:C9:7B
Certificate issuer: /CN=acf910f36291c3c224ddb596d956543197f163de
Certificate serial: 01856E1452CC0405C5598A1883A65FFEA171
Authority key identifier: AC:F9:10:F3:62:91:C3:C2:24:DD:B5:96:D9:56:54:31:97:F1:63:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rPkQ82KRw8Ik3bWW2VZUMZfxY94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/LajrQbS9GkNNELa9rDTkQhtwyXs.roa
Signing time: Sun 01 Jan 2023 16:05:03 +0000
ROA not before: Sun 01 Jan 2023 16:05:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14537
IP address blocks: 217.147.124.0/24 maxlen: 24
217.147.125.0/24 maxlen: 24
217.147.124.0/22 maxlen: 22
217.147.121.0/24 maxlen: 24
217.147.120.0/24 maxlen: 24
217.147.126.0/24 maxlen: 24
217.147.127.0/24 maxlen: 24
92.249.5.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:14:52:cc:04:05:c5:59:8a:18:83:a6:5f:fe:a1:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acf910f36291c3c224ddb596d956543197f163de
Validity
Not Before: Jan 1 16:05:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2da8eb41b4bd1a434d10b6bdac34e4421b70c97b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a2:e0:f4:6d:69:d0:13:4f:47:c7:ad:8c:59:
ea:26:d1:6d:fe:81:06:8b:b2:7f:92:58:e7:86:a7:
c0:39:77:73:ff:08:6e:5d:4d:51:cb:16:7f:ac:27:
bb:58:dd:f3:ab:f8:1a:47:d7:25:1a:6c:d6:cc:b5:
e7:58:2e:e1:15:d3:ba:74:f6:d7:0a:5d:5f:5f:65:
2f:48:96:55:3c:2e:7d:f3:e9:8c:5e:86:a4:81:12:
d0:57:53:dd:1e:1d:12:78:28:8a:40:c1:a1:e7:a3:
41:98:ca:d9:bb:87:c9:86:94:f9:86:c6:0f:df:f5:
40:70:55:21:dc:6b:be:64:db:c6:a6:1e:ad:0d:c5:
02:82:dc:9f:06:ae:b9:19:2c:5f:65:00:1d:da:a2:
16:ad:8e:c2:f9:9c:b3:54:96:cc:c8:a2:2f:94:4e:
f8:94:c9:f2:dd:7a:7f:4f:89:e0:eb:30:21:89:17:
e1:38:78:20:d9:82:98:1f:e7:1d:58:a6:aa:a6:90:
46:eb:58:11:d8:a1:4a:d2:01:f8:1c:c2:fb:59:a7:
95:37:ef:cc:61:58:8b:e0:9f:b0:bd:d7:cb:fa:f0:
f1:5e:d0:dc:9a:02:7b:88:0b:b5:f0:dd:e6:cd:6a:
59:82:46:02:9b:b3:21:5c:79:56:42:86:6a:c8:38:
d1:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:A8:EB:41:B4:BD:1A:43:4D:10:B6:BD:AC:34:E4:42:1B:70:C9:7B
X509v3 Authority Key Identifier:
keyid:AC:F9:10:F3:62:91:C3:C2:24:DD:B5:96:D9:56:54:31:97:F1:63:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPkQ82KRw8Ik3bWW2VZUMZfxY94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/LajrQbS9GkNNELa9rDTkQhtwyXs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rPkQ82KRw8Ik3bWW2VZUMZfxY94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.249.5.0/24
217.147.120.0/23
217.147.124.0/22
Signature Algorithm: sha256WithRSAEncryption
ae:e4:14:4d:c2:15:26:47:24:05:66:34:79:ab:d4:42:49:76:
12:fa:d1:73:89:e0:ea:fb:07:55:c0:c3:11:d0:e7:fb:0c:b9:
66:fb:24:d8:b5:59:f3:88:b3:67:4f:17:fb:5f:bf:f3:64:98:
c9:82:c4:e4:f3:79:4c:6a:a0:9c:ac:47:cc:69:1b:6e:44:3e:
1f:96:c2:9f:99:a4:1e:e7:2f:2e:9c:db:c8:bf:63:91:f7:55:
a6:48:9e:f6:27:7f:f9:5b:50:ac:cd:f8:1c:22:33:1f:ba:a8:
40:2b:f3:a3:6f:3e:03:38:55:c9:bb:f4:80:df:91:0c:49:5a:
e9:a4:73:99:c1:5f:37:1b:3a:bd:f6:99:52:4f:f1:85:7d:e4:
74:9b:97:f5:4a:9b:8d:25:24:3e:90:5e:81:92:76:20:74:09:
cf:56:0f:a4:03:7c:2d:84:83:33:9a:5d:61:9e:3a:32:82:fc:
e0:74:25:d6:b9:82:61:9e:a1:2d:db:04:58:40:86:fe:07:e7:
3d:73:02:05:02:58:26:6d:77:0d:f7:c8:3e:0c:24:a0:17:d4:
76:90:77:09:dd:cf:93:f8:7a:3b:f4:5d:83:3b:5b:db:bd:7c:
f7:a6:8a:68:0b:2e:84:7e:e4:76:33:b7:c2:05:4c:7e:9e:8c:
9d:61:75:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:53 2024 by rpki-client on console-fra.rpki-client.org