Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/d8e68e-ad38-44e1-9a2c-74aa3c0faee0/1/LrU7t0pHMKb__dLWYiAKam1K9rw.roa
File: LrU7t0pHMKb__dLWYiAKam1K9rw.roa (raw, json)
Hash identifier: jll9GWihrfdjZxyrgIFvDvvSpdCoRMa2yo1DIF6dW8U=
Subject key identifier: 2E:B5:3B:B7:4A:47:30:A6:FF:FD:D2:D6:62:20:0A:6A:6D:4A:F6:BC
Certificate issuer: /CN=987b6812cf7a074580f5942be762f477f67c9500
Certificate serial: 01856C136F4AAD71F1BF1CB3B7B8F82F74D9
Authority key identifier: 98:7B:68:12:CF:7A:07:45:80:F5:94:2B:E7:62:F4:77:F6:7C:95:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mHtoEs96B0WA9ZQr52L0d_Z8lQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/d8e68e-ad38-44e1-9a2c-74aa3c0faee0/1/LrU7t0pHMKb__dLWYiAKam1K9rw.roa
Signing time: Sun 01 Jan 2023 06:44:50 +0000
ROA not before: Sun 01 Jan 2023 06:44:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8365
IP address blocks: 82.195.64.0/19 maxlen: 24
91.243.70.0/24 maxlen: 24
185.55.124.0/22 maxlen: 24
2001:41b8::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:13:6f:4a:ad:71:f1:bf:1c:b3:b7:b8:f8:2f:74:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=987b6812cf7a074580f5942be762f477f67c9500
Validity
Not Before: Jan 1 06:44:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2eb53bb74a4730a6fffdd2d662200a6a6d4af6bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:8e:d5:b2:96:01:9b:c9:79:f4:6b:b1:ff:8a:
90:6c:47:90:c0:66:87:6d:34:84:fc:8e:f4:8a:1f:
c3:c7:c0:f5:9f:a9:d1:eb:7f:5e:7c:0f:20:eb:06:
40:00:6c:e1:69:ac:dd:f8:80:f4:ef:bf:a4:14:6d:
2f:d6:20:1f:ca:7a:e8:26:1b:ce:8c:23:ce:b8:4a:
f1:ee:00:19:d4:30:00:9c:50:c6:da:fa:69:db:01:
8d:b3:44:b8:bd:05:30:1d:9c:d2:47:71:ab:8a:b7:
f9:91:f9:16:2a:e7:fa:99:97:12:56:70:de:15:75:
55:30:00:d2:fd:59:ec:d4:5f:0a:a1:4d:3a:71:6d:
e2:7e:13:be:21:a2:d2:3c:cf:02:65:a4:dd:93:9b:
8b:36:2b:db:78:a3:b9:7f:da:ea:b7:8c:97:7e:30:
51:66:15:1e:4b:88:63:c4:84:58:2f:31:d6:09:00:
7d:91:1d:6b:68:9c:13:c9:f4:ab:ea:dc:b2:58:24:
7b:13:6f:34:37:ab:c0:73:bc:80:06:e9:7b:9f:f6:
26:b4:a9:18:e7:68:22:3a:88:17:d6:ff:b2:ce:af:
48:be:5f:0d:16:36:13:a1:0c:c4:59:57:d0:84:09:
8c:2a:83:c8:b1:fb:a4:a4:a2:c8:d7:b4:30:e4:30:
a2:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:B5:3B:B7:4A:47:30:A6:FF:FD:D2:D6:62:20:0A:6A:6D:4A:F6:BC
X509v3 Authority Key Identifier:
keyid:98:7B:68:12:CF:7A:07:45:80:F5:94:2B:E7:62:F4:77:F6:7C:95:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHtoEs96B0WA9ZQr52L0d_Z8lQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d8e68e-ad38-44e1-9a2c-74aa3c0faee0/1/LrU7t0pHMKb__dLWYiAKam1K9rw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d8e68e-ad38-44e1-9a2c-74aa3c0faee0/1/mHtoEs96B0WA9ZQr52L0d_Z8lQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.195.64.0/19
91.243.70.0/24
185.55.124.0/22
IPv6:
2001:41b8::/32
Signature Algorithm: sha256WithRSAEncryption
36:59:37:39:15:ee:e6:0e:94:c1:9b:28:9c:cd:e6:a8:fd:2f:
69:7d:d0:b6:35:e1:53:df:3c:b1:24:73:db:4e:50:d2:2e:f7:
b0:a7:66:f4:5d:7f:af:d0:8f:2e:38:9c:5a:41:f1:b8:96:c4:
d5:2e:16:d7:61:57:b3:e4:46:56:d3:88:b4:6a:21:3c:51:b4:
df:c2:4c:99:36:43:52:ea:59:ad:23:78:14:37:86:6a:9a:54:
4d:c7:09:ca:e4:f0:4f:bf:a2:e2:3a:d2:5f:35:ad:21:11:aa:
65:c4:c1:98:d5:85:c7:a9:6e:7d:43:d5:e0:39:d3:05:17:21:
fd:59:d4:21:22:fe:44:2b:f2:4d:8a:13:ab:9d:0d:e3:51:8e:
c3:59:cb:13:18:82:cd:f9:4d:6e:1a:06:bd:af:0c:5b:27:8c:
08:b0:8c:77:90:da:d3:eb:44:08:b7:13:46:6c:c4:a6:dd:cb:
d4:28:b8:b2:d4:de:f2:66:44:59:23:66:83:8c:3a:5c:b6:a7:
30:be:7f:d1:5b:1b:c4:16:c1:a6:f2:c5:76:42:a8:8e:12:35:
3a:72:95:cc:f4:c3:4b:a9:06:8b:ac:db:e5:3f:bd:8b:b3:81:
bf:11:70:a6:3d:01:38:1f:09:67:c6:44:5f:23:02:d5:f6:ea:
34:9f:39:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:51 2024 by rpki-client on console-fra.rpki-client.org