Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/Lj9UTCa1G0oriFE5AmPp3FQar28.roa
File: Lj9UTCa1G0oriFE5AmPp3FQar28.roa (raw, json)
Hash identifier: bBThRtoDAgIotfYvdh0MOJwrdRqr13LtLGIb8iJAIwU=
Subject key identifier: 2E:3F:54:4C:26:B5:1B:4A:2B:88:51:39:02:63:E9:DC:54:1A:AF:6F
Certificate issuer: /CN=247405e9cee39d71944d5e3149eb01b61f9adb1e
Certificate serial: 01856F14AED4C6992677763C9FBCBF1BB810
Authority key identifier: 24:74:05:E9:CE:E3:9D:71:94:4D:5E:31:49:EB:01:B6:1F:9A:DB:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JHQF6c7jnXGUTV4xSesBth-a2x4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/Lj9UTCa1G0oriFE5AmPp3FQar28.roa
Signing time: Sun 01 Jan 2023 20:45:04 +0000
ROA not before: Sun 01 Jan 2023 20:45:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206178
IP address blocks: 185.194.102.0/23 maxlen: 23
185.215.132.0/22 maxlen: 23
185.30.168.0/22 maxlen: 23
2a0a:49c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Fri 21 Apr 2023 08:49:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:14:ae:d4:c6:99:26:77:76:3c:9f:bc:bf:1b:b8:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=247405e9cee39d71944d5e3149eb01b61f9adb1e
Validity
Not Before: Jan 1 20:45:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2e3f544c26b51b4a2b8851390263e9dc541aaf6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:25:34:6b:dc:9a:72:6c:e8:93:7c:cb:2e:67:
b2:bd:7b:1b:e1:b4:35:03:da:d9:36:0e:f8:e7:e0:
7a:eb:fd:7b:d8:88:30:e0:33:16:7a:82:0f:b5:b8:
de:04:24:f8:11:00:fc:22:d7:9a:6a:6e:ca:31:40:
38:ac:b0:c7:d1:3b:5a:7e:6c:d9:e3:1d:44:df:de:
70:c4:e0:28:08:d9:0a:c2:51:0a:70:ea:c5:b2:7b:
51:c7:19:40:d9:ad:aa:da:fa:69:c6:62:2c:51:11:
44:61:d5:56:d1:b4:44:09:f2:92:c8:bd:21:18:7a:
05:98:bf:4f:de:d1:b3:60:e5:97:98:92:f2:69:4e:
5e:ab:87:64:99:2c:a1:d2:5c:11:e0:b3:a1:1f:89:
2e:67:00:f0:72:8f:45:f3:1f:7f:56:f9:71:89:3a:
08:b3:9e:19:c2:e9:fd:27:e0:44:3a:84:86:aa:fc:
d6:14:3b:c5:7c:fd:ee:be:3c:4c:22:f1:f0:6f:15:
9c:37:0f:d9:c6:9e:77:90:8e:66:08:1f:87:27:a1:
c5:4a:d5:51:59:1b:80:4a:99:42:6a:a9:d0:58:76:
3f:ea:3f:c2:5e:15:92:f2:af:9a:52:d3:d5:26:ab:
25:14:60:1c:fa:eb:8a:dd:a2:9a:88:77:9e:55:4a:
ee:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:3F:54:4C:26:B5:1B:4A:2B:88:51:39:02:63:E9:DC:54:1A:AF:6F
X509v3 Authority Key Identifier:
keyid:24:74:05:E9:CE:E3:9D:71:94:4D:5E:31:49:EB:01:B6:1F:9A:DB:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JHQF6c7jnXGUTV4xSesBth-a2x4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/Lj9UTCa1G0oriFE5AmPp3FQar28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/JHQF6c7jnXGUTV4xSesBth-a2x4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.30.168.0/22
185.194.102.0/23
185.215.132.0/22
IPv6:
2a0a:49c0::/29
Signature Algorithm: sha256WithRSAEncryption
c7:f9:57:b0:30:83:ae:b2:8e:20:f3:3c:b4:4d:7d:35:88:4b:
2c:3e:ff:cc:4b:fd:3a:10:61:11:8e:3b:6f:15:89:47:00:4f:
c4:01:3f:f9:df:bc:9b:6f:9a:5d:14:3c:60:50:51:9a:10:ec:
bf:7c:a9:21:82:63:24:65:ee:5e:a8:13:13:b3:81:84:4f:3c:
a7:dc:de:6e:02:5d:d7:d8:87:d3:45:17:55:a5:55:41:2e:b5:
21:12:cf:02:83:c0:25:9a:30:95:2b:ae:8b:0e:3e:bb:7a:f6:
46:71:d7:23:62:e9:38:c5:b4:37:c1:aa:02:39:c5:70:58:4e:
fe:c1:14:93:94:02:c9:6f:98:d9:2d:9c:f7:1c:74:ab:9b:7b:
64:ce:1c:b2:79:64:d2:b7:6d:ca:a6:8f:e5:cd:3c:56:67:0d:
99:7a:5a:0e:d0:7b:01:27:4a:72:a7:23:ed:0e:d3:72:39:16:
20:52:c6:55:da:8e:9e:dc:fb:fe:b4:94:e8:37:e4:8d:7f:b8:
f6:16:54:d6:b3:e6:5e:67:0b:11:b9:f4:51:dd:d2:8a:24:9c:
a4:d2:94:d8:c2:1f:da:ac:00:b1:aa:91:ee:a8:e2:40:fd:e5:
3c:03:af:6e:79:c4:b5:7f:52:74:8d:d7:2e:3a:79:99:fd:c9:
4b:d9:d2:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:16 2024 by rpki-client on console-ams.rpki-client.org