Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/lMqolMBRCAn912PJcIEmedbtLpE.roa
File: lMqolMBRCAn912PJcIEmedbtLpE.roa (raw, json)
Hash identifier: EQXT/7Ww8g+0RvwzKaoZzoDN4WSYhCGq34Dlgs8Pd8g=
Subject key identifier: 94:CA:A8:94:C0:51:08:09:FD:D7:63:C9:70:81:26:79:D6:ED:2E:91
Certificate issuer: /CN=2c96946c501ddf48696da2cf110fdceb286fac98
Certificate serial: 018A3DC02F222DA1FA3097B871305237AE59
Authority key identifier: 2C:96:94:6C:50:1D:DF:48:69:6D:A2:CF:11:0F:DC:EB:28:6F:AC:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LJaUbFAd30hpbaLPEQ_c6yhvrJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/lMqolMBRCAn912PJcIEmedbtLpE.roa
Signing time: Mon 28 Aug 2023 20:05:19 +0000
ROA not before: Mon 28 Aug 2023 20:05:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210776
IP address blocks: 185.242.220.0/24 maxlen: 24
185.242.222.0/24 maxlen: 24
185.242.221.0/24 maxlen: 24
185.242.223.0/24 maxlen: 24
85.222.239.0/24 maxlen: 24
85.222.238.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:3d:c0:2f:22:2d:a1:fa:30:97:b8:71:30:52:37:ae:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c96946c501ddf48696da2cf110fdceb286fac98
Validity
Not Before: Aug 28 20:05:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=94caa894c0510809fdd763c970812679d6ed2e91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1d:3b:7f:e8:36:09:bb:11:96:b5:c5:bb:58:
48:2c:90:d2:9f:2b:f7:97:95:6b:b1:1d:0a:e7:c4:
47:90:b3:b9:6b:c9:6b:e9:be:46:c0:5d:20:a8:b7:
b8:f7:bc:ba:bb:14:cb:da:51:e7:99:c3:9d:82:d8:
c5:2a:cd:81:03:a8:fd:78:e6:7c:2e:49:3f:6f:94:
8b:de:19:b3:3d:f4:62:af:4a:a2:08:7a:c2:e6:ce:
e1:23:8b:70:3d:f0:93:39:61:a1:4f:ea:d0:ac:ed:
c9:26:b9:d8:50:5e:84:e3:b1:4f:e5:e4:69:f5:30:
9a:c7:ef:fc:ba:0a:1a:e1:75:0a:c9:3f:9e:2e:86:
01:84:2a:bc:16:fa:2b:a0:8d:f8:8b:63:80:fa:c7:
1a:39:f6:65:fe:12:bc:15:ed:31:5a:7d:f9:5b:22:
b8:2d:30:cb:20:d4:43:75:8b:45:f7:54:5b:52:11:
84:37:cf:0d:09:46:ed:68:34:cd:5f:7e:95:12:05:
46:18:c2:90:d7:36:db:0e:7d:bf:e8:93:82:56:c7:
2d:12:d4:c4:8f:21:7f:cf:c8:f2:be:f0:c6:af:57:
ae:26:bc:39:c9:bc:95:ea:4d:24:11:4f:c7:70:70:
f1:7b:72:dc:8c:09:ee:47:ff:3f:68:9a:1f:b8:2a:
3a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:CA:A8:94:C0:51:08:09:FD:D7:63:C9:70:81:26:79:D6:ED:2E:91
X509v3 Authority Key Identifier:
keyid:2C:96:94:6C:50:1D:DF:48:69:6D:A2:CF:11:0F:DC:EB:28:6F:AC:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LJaUbFAd30hpbaLPEQ_c6yhvrJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/lMqolMBRCAn912PJcIEmedbtLpE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04fef8-d2df-4f7a-92b4-7f970a3af9cd/1/LJaUbFAd30hpbaLPEQ_c6yhvrJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.222.238.0/23
185.242.220.0/22
Signature Algorithm: sha256WithRSAEncryption
aa:8c:c2:7b:93:92:56:d5:2a:ae:f1:54:4f:d7:ef:94:68:79:
12:a0:e8:79:80:4d:bf:51:fa:e0:b5:1d:d0:9f:61:0b:e9:78:
5f:ea:55:06:84:c0:f4:05:ea:6b:7c:ed:73:00:ef:cf:0e:74:
a3:48:68:b5:42:5f:df:32:43:c4:18:15:a6:0a:ac:f5:36:dc:
73:42:46:75:0a:39:7f:1b:a8:87:66:55:66:e8:83:4e:72:50:
2c:b9:52:dc:62:75:65:a0:9f:ed:ab:5e:4e:cc:26:60:55:92:
a5:f4:ad:b2:1b:1f:96:e2:ed:f9:a7:57:fd:dd:a4:07:85:4a:
83:32:72:34:4f:a3:e0:d0:b1:32:2e:25:c0:d6:be:42:59:be:
ca:ed:df:8c:11:e9:58:50:67:b1:b8:9e:b4:8a:f8:88:be:b6:
77:97:d1:1d:d1:9a:98:a7:53:a5:71:20:50:ca:7a:71:b4:1c:
3b:84:7d:5e:ca:09:f3:2e:02:90:8c:bc:6c:99:bb:bd:61:3b:
c7:a1:d9:33:c0:3b:47:73:d7:fa:f2:cb:5c:f6:65:b6:41:84:
93:c3:38:12:e7:67:c4:ec:b8:35:45:35:ba:15:a3:85:3c:f8:
db:4b:b3:f2:7f:5f:45:3a:fd:6a:21:a0:9f:a6:be:95:ea:35:
f4:5a:73:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:03 2024 by rpki-client on console-ams.rpki-client.org