Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/597232-f846-4fd7-bcc2-6afef5d0daa6/1/lhHQA5Fn0ido4_N-Qa-fW1cjB7Y.roa
File: lhHQA5Fn0ido4_N-Qa-fW1cjB7Y.roa (raw, json)
Hash identifier: J96ytbnDml9tCe0QmDiKX3UcwYWH87Uk7GvVqpZI7p0=
Subject key identifier: 96:11:D0:03:91:67:D2:27:68:E3:F3:7E:41:AF:9F:5B:57:23:07:B6
Certificate issuer: /CN=1003cd25315330350d73f2a3579aa95e052b718d
Certificate serial: 019284E71E84980B920E6E6FA7F8938B95C9
Authority key identifier: 10:03:CD:25:31:53:30:35:0D:73:F2:A3:57:9A:A9:5E:05:2B:71:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EAPNJTFTMDUNc_KjV5qpXgUrcY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/597232-f846-4fd7-bcc2-6afef5d0daa6/1/lhHQA5Fn0ido4_N-Qa-fW1cjB7Y.roa
Signing time: Sun 13 Oct 2024 08:03:11 +0000
ROA not before: Sun 13 Oct 2024 08:03:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16116
IP address blocks: 130.185.96.0/21 maxlen: 24
141.226.90.0/24 maxlen: 24
212.90.108.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 14 Oct 2024 08:37:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:84:e7:1e:84:98:0b:92:0e:6e:6f:a7:f8:93:8b:95:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1003cd25315330350d73f2a3579aa95e052b718d
Validity
Not Before: Oct 13 08:03:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9611d0039167d22768e3f37e41af9f5b572307b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:56:0f:3b:5c:41:49:eb:27:64:f7:c1:a4:6f:
1a:33:85:60:ac:07:98:d8:4a:23:17:8f:42:62:c3:
11:ad:14:4e:3d:e8:e6:fe:e0:bd:30:e7:5b:e3:55:
bb:a6:4b:be:7c:11:c2:ed:ec:5d:76:ec:ed:a6:c9:
e6:52:38:61:b5:d2:f4:87:57:97:68:cf:a1:a0:1a:
08:b4:c5:fc:60:d8:6a:b9:e9:aa:1e:21:ad:66:73:
ba:c2:e3:54:8f:29:a2:ec:49:7d:e0:4f:c0:9d:16:
d0:ed:a4:2a:de:48:98:86:f1:9e:b3:49:4e:fc:98:
bf:83:09:a9:26:0c:42:96:dd:88:69:b7:84:ca:ef:
a2:c3:a5:c0:0b:64:5e:ea:c4:97:d7:d5:3d:0e:b1:
b1:a3:be:42:09:c9:cc:72:e0:9b:00:aa:2a:57:f2:
3f:66:46:7d:02:a0:54:9b:c2:ad:91:74:34:04:b4:
2b:50:f2:63:ec:9a:23:9b:cc:ef:75:f4:63:bd:f1:
14:ca:63:a3:97:f5:f2:5d:48:56:12:1a:fb:61:81:
c2:5f:20:d0:02:24:40:99:0c:2d:33:aa:62:5e:bf:
c6:2d:b0:1b:d4:22:95:40:bd:4e:67:28:93:d0:a4:
a4:68:55:6b:f2:85:9a:62:59:b1:e8:08:8a:7e:49:
82:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:11:D0:03:91:67:D2:27:68:E3:F3:7E:41:AF:9F:5B:57:23:07:B6
X509v3 Authority Key Identifier:
keyid:10:03:CD:25:31:53:30:35:0D:73:F2:A3:57:9A:A9:5E:05:2B:71:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EAPNJTFTMDUNc_KjV5qpXgUrcY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/597232-f846-4fd7-bcc2-6afef5d0daa6/1/lhHQA5Fn0ido4_N-Qa-fW1cjB7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/597232-f846-4fd7-bcc2-6afef5d0daa6/1/EAPNJTFTMDUNc_KjV5qpXgUrcY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.185.96.0/21
141.226.90.0/24
212.90.108.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:e0:f7:32:d8:9a:21:c9:8b:f2:29:03:ea:19:86:80:b1:63:
f1:3e:1f:db:6a:2a:ac:02:25:90:fd:ea:11:d7:cf:9a:4f:f2:
da:6e:5a:2e:90:08:02:fa:5e:e5:34:7d:ce:c7:90:4e:cc:ec:
19:73:af:cd:4e:5c:e6:37:64:1e:f0:ae:d3:1d:f3:e9:f0:e2:
d1:d2:3b:a9:9f:71:65:df:96:cf:11:9b:2b:02:3c:1b:7a:c3:
0a:89:68:cf:1f:7e:0d:45:46:58:d5:02:ff:65:5d:1f:ce:b0:
04:15:6b:9c:1a:2b:06:0a:d7:8e:ec:fc:89:51:65:2c:c8:17:
c2:28:d5:f0:b0:13:17:87:7e:9d:c8:ed:23:c8:84:a4:d8:43:
da:19:6a:e2:44:0c:0c:41:cc:32:50:90:6f:ee:8f:b1:8a:43:
32:c3:92:9b:f1:8d:ba:e5:d4:d7:4d:82:34:d1:4f:7b:98:d6:
40:03:62:7e:c2:bd:09:05:e3:c0:a0:af:f4:4e:5c:70:96:09:
c8:cd:cb:58:bb:76:57:78:27:21:b2:a1:f9:81:2e:06:9e:ab:
e2:88:c3:38:32:fd:4b:a6:30:29:dd:c2:c2:e8:92:9a:27:66:
24:06:92:85:43:c6:6b:9f:c4:28:5d:5f:d8:1b:bb:7e:f5:5a:
bc:1d:d7:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 14 11:30:53 2024 by rpki-client on console-ams.rpki-client.org