Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/Lzadw-DNdzP8wSN3Zu-GKA4E2iw.roa
File: Lzadw-DNdzP8wSN3Zu-GKA4E2iw.roa (raw, json)
Hash identifier: 1uFW4m83mjc/VBnUxhBheVOV2ilbU+4lVbHLM0HK1x0=
Subject key identifier: 2F:36:9D:C3:E0:CD:77:33:FC:C1:23:77:66:EF:86:28:0E:04:DA:2C
Certificate issuer: /CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Certificate serial: 01865002E6AD3EA0A5B1EDEBAB3F22DF943E
Authority key identifier: 6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/Lzadw-DNdzP8wSN3Zu-GKA4E2iw.roa
Signing time: Tue 14 Feb 2023 13:00:12 +0000
ROA not before: Tue 14 Feb 2023 13:00:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211143
IP address blocks: 91.225.12.0/23 maxlen: 23
37.35.54.0/24 maxlen: 24
146.66.210.0/24 maxlen: 24
62.216.76.0/22 maxlen: 22
178.157.109.0/24 maxlen: 24
188.74.246.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 30 Mar 2023 14:34:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:50:02:e6:ad:3e:a0:a5:b1:ed:eb:ab:3f:22:df:94:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Validity
Not Before: Feb 14 13:00:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2f369dc3e0cd7733fcc1237766ef86280e04da2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:9e:5d:d4:90:ff:82:f8:65:e9:62:8f:f1:1d:
06:b4:0e:cc:0c:c4:70:7d:53:68:46:63:ca:90:eb:
fd:12:8a:b5:e7:cc:53:0d:52:26:44:86:d0:e2:cf:
66:44:e8:cd:00:13:ea:5d:c7:fe:58:cc:01:be:fd:
a7:ad:f7:06:af:72:8d:cc:a8:09:5d:6e:ab:10:66:
31:26:10:88:ad:1a:82:fd:b1:8d:07:64:5f:2b:c8:
35:ed:9f:6b:77:a6:78:71:cd:11:bb:f9:ce:c7:2a:
7c:5b:35:27:3a:cb:8c:52:e4:40:99:89:7a:25:92:
7d:af:56:46:c0:09:15:bf:df:6b:70:73:72:ef:77:
0c:a0:1a:ec:a1:6e:cb:9c:60:3b:b3:0f:d7:16:79:
06:ad:dc:0e:a6:93:e5:29:3b:80:14:41:42:9f:dc:
17:18:7b:4a:85:b6:8c:05:26:71:6a:df:88:66:fa:
df:8a:b0:b2:15:d3:f0:4b:f4:df:3f:13:d9:76:57:
bc:11:30:f2:fa:7c:c1:6d:a0:ba:5a:86:96:1d:2f:
8e:60:f9:fd:44:dc:b8:2c:25:ee:33:04:2a:f6:b2:
45:ff:79:22:72:41:71:13:36:cd:a0:6f:13:68:fa:
fd:ed:3e:7b:d6:72:45:40:b8:78:59:25:0d:4e:ee:
fc:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:36:9D:C3:E0:CD:77:33:FC:C1:23:77:66:EF:86:28:0E:04:DA:2C
X509v3 Authority Key Identifier:
keyid:6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/Lzadw-DNdzP8wSN3Zu-GKA4E2iw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.35.54.0/24
62.216.76.0/22
91.225.12.0/23
146.66.210.0/24
178.157.109.0/24
188.74.246.0/23
Signature Algorithm: sha256WithRSAEncryption
8c:0d:3c:8e:58:17:79:9d:74:ac:f7:c6:c7:3b:33:f0:ed:03:
95:b1:7f:8d:fd:0b:00:cc:56:d5:bf:93:ed:ae:87:3f:d7:24:
4e:53:46:98:96:63:b1:9a:46:a2:e2:4f:4f:c8:a7:a7:3d:7e:
6a:f2:a7:b4:71:87:5d:4c:60:70:33:47:7e:d2:c0:74:51:f2:
c2:51:d4:a2:aa:93:2f:d3:8e:00:ab:c0:5c:61:7b:99:43:ec:
40:a6:53:ec:da:cb:55:e1:a5:b5:09:13:be:60:22:1c:8f:2d:
0c:2a:0c:ea:b2:99:35:bc:93:e0:53:4c:1d:bd:38:f2:21:91:
b1:a2:69:bc:22:81:30:1b:bd:64:87:47:d5:54:27:76:b7:50:
a3:80:82:09:d3:2c:62:a5:a1:3c:41:94:f2:0b:f3:6c:48:d1:
1e:0c:fe:73:f8:b1:5d:17:1c:0b:3e:c3:68:17:31:4d:3c:0f:
a5:e5:99:49:67:cc:6c:78:1f:21:25:23:0a:aa:09:fb:14:01:
1d:aa:d0:f8:1d:30:5b:b7:d6:7f:f8:1e:33:87:07:5e:78:27:
44:31:de:bf:d2:07:ac:7b:81:9d:48:0d:f7:8b:88:fc:d1:a4:
fb:34:6e:42:2f:bb:0b:53:9d:2c:7b:12:06:9f:ac:2f:5e:06:
af:55:b1:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:50 2024 by rpki-client on console-ams.rpki-client.org