Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/LJGKyiJwxtuHKU3gAIyd6sGd5lI.roa
File: LJGKyiJwxtuHKU3gAIyd6sGd5lI.roa (raw, json)
Hash identifier: tWyaNzCKTfOlf0YWD2Ysm9WBDlRFlhC4OspNkGAGSKY=
Subject key identifier: 2C:91:8A:CA:22:70:C6:DB:87:29:4D:E0:00:8C:9D:EA:C1:9D:E6:52
Certificate issuer: /CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Certificate serial: 018DB32151FE10E345F13A8095DCDE52632E
Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/LJGKyiJwxtuHKU3gAIyd6sGd5lI.roa
Signing time: Fri 16 Feb 2024 18:15:21 +0000
ROA not before: Fri 16 Feb 2024 18:15:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41313
IP address blocks: 46.35.160.0/19 maxlen: 24
79.110.120.0/21 maxlen: 24
79.110.124.0/24 maxlen: 24
80.95.16.0/21 maxlen: 24
80.95.22.0/24 maxlen: 24
93.152.234.0/23 maxlen: 24
93.175.244.0/23 maxlen: 24
95.158.128.0/18 maxlen: 24
151.252.192.0/20 maxlen: 24
185.18.228.0/22 maxlen: 24
185.40.164.0/22 maxlen: 24
212.21.128.0/19 maxlen: 24
2a00:e200::/32 maxlen: 48
2a0d:3b40::/29 maxlen: 48
Validation: Failed, certificate revoked on Mon 19 Feb 2024 11:05:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:b3:21:51:fe:10:e3:45:f1:3a:80:95:dc:de:52:63:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Validity
Not Before: Feb 16 18:15:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2c918aca2270c6db87294de0008c9deac19de652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:a2:35:32:9c:4e:b6:83:f4:f4:a5:b0:30:dc:
af:94:c1:10:c3:a3:9a:8b:99:9e:cb:2f:a6:78:cb:
15:df:cd:45:54:8f:1b:58:98:b9:6a:b9:a7:4e:1b:
ba:24:17:61:9d:49:1f:10:be:01:ee:ae:82:fe:3e:
b1:d4:3c:c7:5c:0c:9d:9b:f9:9d:3f:c4:7b:80:28:
8e:7d:29:72:a8:02:a2:01:ac:26:cf:9d:bc:9e:bc:
50:7b:2c:bb:7a:c3:2f:22:05:fa:74:de:69:84:12:
f5:13:92:ee:99:e1:14:02:82:b8:28:ea:45:48:d7:
51:81:3b:c2:34:ed:c8:43:8c:e6:11:92:ed:36:45:
df:c7:1a:d6:04:05:86:92:e4:bd:94:97:5f:7d:09:
81:f8:a3:b2:e2:a5:bf:27:5c:45:8e:f1:e4:4d:b1:
bd:35:04:3e:9c:7d:e5:b6:25:51:6f:38:91:7d:15:
bf:90:4d:81:32:a8:5b:ca:d0:3b:53:46:54:1d:3b:
f6:9e:a7:95:02:19:49:36:d4:b1:4f:74:04:93:3d:
5f:8f:bc:4a:8d:3a:e5:ec:82:78:c9:ef:fc:24:f1:
92:78:f1:fe:f8:03:9f:c7:ec:c3:ca:b8:bf:ac:55:
28:06:ea:89:7d:c9:f0:cf:ed:f2:21:bc:1d:91:c1:
43:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:91:8A:CA:22:70:C6:DB:87:29:4D:E0:00:8C:9D:EA:C1:9D:E6:52
X509v3 Authority Key Identifier:
keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/LJGKyiJwxtuHKU3gAIyd6sGd5lI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.35.160.0/19
79.110.120.0/21
80.95.16.0/21
93.152.234.0/23
93.175.244.0/23
95.158.128.0/18
151.252.192.0/20
185.18.228.0/22
185.40.164.0/22
212.21.128.0/19
IPv6:
2a00:e200::/32
2a0d:3b40::/29
Signature Algorithm: sha256WithRSAEncryption
80:de:41:cc:93:ce:13:62:1f:31:e7:e5:cc:34:d0:6d:ac:54:
09:9a:c1:72:ac:fd:54:1b:a2:6b:e3:78:39:35:a3:e1:26:df:
9a:8d:8f:37:34:1d:53:db:ce:dc:24:a2:f9:f6:c4:6b:06:6a:
5f:6b:bd:ed:1b:4e:ef:c1:ba:f4:9e:d5:06:1f:cf:20:4d:bc:
45:ba:60:d0:33:d5:2b:b9:94:33:d7:a1:ed:1d:c5:16:a5:7e:
fa:f5:d7:13:59:42:d6:e4:09:44:67:85:bf:ff:a6:6d:dc:bf:
28:85:91:77:5d:04:cb:29:99:a3:6e:65:74:5b:42:c9:a1:a7:
b0:c2:5b:02:4d:41:33:e5:28:53:ab:01:62:a5:70:3d:10:07:
81:b4:34:e6:19:0d:79:5f:f4:b5:0f:ee:b7:05:49:e1:01:fb:
a6:cb:fb:dc:59:e7:70:1d:af:a3:cd:ef:58:d9:8f:c8:88:4d:
47:e4:e5:66:f3:eb:6b:23:f2:6e:ef:f8:b6:05:7c:ee:77:b0:
3c:2e:d8:13:7d:8d:17:d3:ec:cd:bc:9f:8c:81:a2:96:f5:e6:
71:ed:cd:9b:f7:d6:19:8e:bf:21:01:21:03:1c:2c:0f:8e:f0:
36:ec:c5:e0:e2:1f:61:db:37:0f:40:23:60:bf:dd:d2:86:1b:
46:e1:c1:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:35 2024 by rpki-client on console-ams.rpki-client.org