Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/LCEyHa9rVfhUoKqiRWVxl9Jrm4s.roa
File: LCEyHa9rVfhUoKqiRWVxl9Jrm4s.roa (raw, json)
Hash identifier: w591HqdBw6Tzhkur6lp067D6imidv6yhvwwyWtcuDuc=
Subject key identifier: 2C:21:32:1D:AF:6B:55:F8:54:A0:AA:A2:45:65:71:97:D2:6B:9B:8B
Certificate issuer: /CN=653f55629121b60fb19c97f99c75dd6f015dd6e8
Certificate serial: 018B02997A648A6C95ECFD45494C3EAD9659
Authority key identifier: 65:3F:55:62:91:21:B6:0F:B1:9C:97:F9:9C:75:DD:6F:01:5D:D6:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/LCEyHa9rVfhUoKqiRWVxl9Jrm4s.roa
Signing time: Fri 06 Oct 2023 01:28:14 +0000
ROA not before: Fri 06 Oct 2023 01:28:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1290
IP address blocks: 193.82.192.0/19 maxlen: 24
193.82.96.0/19 maxlen: 24
193.82.128.0/19 maxlen: 24
146.101.0.0/16 maxlen: 24
154.8.0.0/19 maxlen: 24
154.32.0.0/16 maxlen: 24
195.152.0.0/15 maxlen: 15
193.117.32.0/19 maxlen: 24
154.8.32.0/20 maxlen: 24
2a02:1620::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:02:99:7a:64:8a:6c:95:ec:fd:45:49:4c:3e:ad:96:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=653f55629121b60fb19c97f99c75dd6f015dd6e8
Validity
Not Before: Oct 6 01:28:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2c21321daf6b55f854a0aaa245657197d26b9b8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fe:dd:c8:f5:46:7b:fc:e2:59:20:aa:b3:1b:
41:bd:cf:95:bc:f8:ed:39:8f:01:4f:5d:b5:d3:a2:
a9:c2:a2:d8:ed:88:46:98:e4:99:1f:fd:b7:93:88:
08:80:7f:3d:70:7b:76:b1:63:0d:aa:b5:32:84:d3:
42:b3:ac:8a:21:43:b1:00:d6:3b:b8:3a:0e:fa:78:
7d:a6:f9:48:8e:18:62:7d:49:b5:c8:ec:41:a2:e8:
31:d8:dc:87:81:ce:03:f8:a1:2f:38:72:48:d9:ac:
16:02:28:53:21:ed:f0:69:d6:69:0b:36:c1:cf:c7:
31:c8:f9:2e:28:25:72:d9:08:e2:3b:47:1c:50:71:
71:d1:51:07:2a:80:2d:00:c5:b7:12:8b:38:42:60:
d6:2b:df:c8:f3:bf:40:3d:09:c7:20:38:0a:92:f8:
f4:dc:83:db:dd:b8:e9:be:a5:94:09:24:1f:c3:7a:
d6:51:6a:ad:a4:98:8e:b1:c1:81:93:77:ef:4a:59:
bb:03:8e:07:a6:ee:f4:7b:2e:ff:30:74:87:93:f3:
26:7b:46:00:a0:92:1f:be:da:aa:6e:d0:eb:65:10:
75:66:69:00:d8:ee:97:47:77:cd:c0:4b:bd:45:a0:
30:24:24:6c:8d:5c:5f:21:48:f1:ee:7e:49:9c:51:
8f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:21:32:1D:AF:6B:55:F8:54:A0:AA:A2:45:65:71:97:D2:6B:9B:8B
X509v3 Authority Key Identifier:
keyid:65:3F:55:62:91:21:B6:0F:B1:9C:97:F9:9C:75:DD:6F:01:5D:D6:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/LCEyHa9rVfhUoKqiRWVxl9Jrm4s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.101.0.0/16
154.8.0.0-154.8.47.255
154.32.0.0/16
193.82.96.0-193.82.159.255
193.82.192.0/19
193.117.32.0/19
195.152.0.0/15
IPv6:
2a02:1620::/32
Signature Algorithm: sha256WithRSAEncryption
2c:0d:3e:e3:df:c5:de:6f:cb:12:91:eb:2a:82:c0:bb:66:23:
44:f1:60:76:6b:61:e0:c3:3e:98:cc:10:1d:55:2c:fa:2b:7f:
b3:21:d4:72:30:4d:9e:68:cd:44:ce:69:83:a8:52:1a:8a:e1:
3b:94:fc:58:bb:f3:2e:89:19:f7:ea:6c:27:44:55:9e:8e:64:
7d:4f:fe:e8:32:e6:20:bb:fa:4d:28:28:8d:a3:03:bd:87:89:
ef:19:8a:cd:f7:fa:c8:6a:0f:97:94:72:45:a5:b4:f6:87:f6:
6e:6c:ba:2b:0e:d5:16:5a:76:ce:19:fc:7a:df:56:08:ef:8a:
6a:4a:73:4a:80:65:fa:7c:9d:7e:d4:4d:1a:e2:7d:a3:44:09:
5d:d3:88:4a:28:bf:b9:5e:f7:29:01:62:c0:69:3b:f6:d6:14:
27:56:bb:99:9d:26:79:f7:46:13:6c:e5:fb:ad:80:14:cd:01:
ac:7b:c3:d8:46:26:6c:89:7d:ca:98:fb:51:88:a2:6d:82:6b:
fb:15:8b:3b:0a:29:a7:02:81:44:65:63:42:2c:a2:83:c7:e6:
6a:f3:bc:76:21:67:b3:db:ab:35:fc:3b:e4:e6:32:1e:30:1d:
f9:48:a8:9c:7d:66:9c:d8:db:80:fb:31:21:a1:5a:f5:31:6a:
39:ee:dd:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:15 2024 by rpki-client on console-fra.rpki-client.org