Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/lzzxORe9ze4dCXhv6Vj0kyAYx80.roa
File: lzzxORe9ze4dCXhv6Vj0kyAYx80.roa (raw, json)
Hash identifier: LnwWDfMWh8rBA2Yti1Kl9GLDdUI3MbVPPX+3Pq8fI5c=
Subject key identifier: 97:3C:F1:39:17:BD:CD:EE:1D:09:78:6F:E9:58:F4:93:20:18:C7:CD
Certificate issuer: /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Certificate serial: 01856E267D0C3D1BD5F816B79616B6F3E8F7
Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/lzzxORe9ze4dCXhv6Vj0kyAYx80.roa
Signing time: Sun 01 Jan 2023 16:24:54 +0000
ROA not before: Sun 01 Jan 2023 16:24:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57050
IP address blocks: 212.81.56.0/24 maxlen: 24
212.81.57.0/24 maxlen: 24
212.81.58.0/24 maxlen: 24
212.81.59.0/24 maxlen: 24
2a10:fa80:10::/48 maxlen: 48
2a10:fa80:58::/48 maxlen: 48
2a10:fa80:56::/48 maxlen: 48
2a10:fa80:216::/48 maxlen: 48
2a10:fa80:59::/48 maxlen: 48
2a10:fa80:57::/48 maxlen: 48
2a10:fa80:92::/48 maxlen: 48
2a10:fa80:212::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:26:7d:0c:3d:1b:d5:f8:16:b7:96:16:b6:f3:e8:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Validity
Not Before: Jan 1 16:24:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=973cf13917bdcdee1d09786fe958f4932018c7cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:10:ab:83:d5:1f:db:0f:87:ef:fb:1e:fe:cc:
aa:60:30:a3:00:d0:ff:d6:55:59:f5:14:85:2e:92:
48:e2:e4:bf:8d:64:f0:77:db:1a:9b:c9:92:9e:5b:
cb:bc:97:dd:3c:e4:9a:1f:a4:6b:28:85:81:51:55:
74:48:de:a9:f8:73:18:fa:35:43:72:b5:20:89:e5:
eb:7a:ca:54:f2:f1:ec:70:8f:5a:90:1b:04:91:ac:
de:e8:24:3f:fa:12:a6:8a:34:6d:90:33:57:8a:06:
e3:6c:09:3b:4e:ce:8d:61:97:29:3c:69:3f:66:f7:
a5:41:51:93:c4:1b:69:83:c3:f7:c2:63:aa:4b:4f:
b9:e8:9e:e3:30:a7:73:65:e5:da:63:a6:2b:1b:f3:
49:ce:5c:d1:c0:0d:04:02:3b:85:5a:46:c5:72:78:
bb:26:be:08:d5:7e:7e:cb:bb:86:b7:5c:5f:be:35:
1e:00:11:2a:8b:59:d0:c2:6c:9d:e7:b0:e9:f2:b2:
96:18:d1:7d:bf:3f:bc:59:77:5f:63:25:5d:2f:a5:
39:ba:bd:d6:30:e1:8c:db:6f:64:13:35:95:c5:f3:
a8:f2:b2:ac:a5:0c:95:b3:00:e0:c9:e6:9d:a0:44:
c4:d5:ad:3b:b8:8c:14:54:d7:42:12:df:2c:9f:f1:
4c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:3C:F1:39:17:BD:CD:EE:1D:09:78:6F:E9:58:F4:93:20:18:C7:CD
X509v3 Authority Key Identifier:
keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/lzzxORe9ze4dCXhv6Vj0kyAYx80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.81.56.0/22
IPv6:
2a10:fa80:10::/48
2a10:fa80:56::-2a10:fa80:59:ffff:ffff:ffff:ffff:ffff
2a10:fa80:92::/48
2a10:fa80:212::/48
2a10:fa80:216::/48
Signature Algorithm: sha256WithRSAEncryption
6b:73:d9:aa:58:25:c6:e7:be:67:27:47:0f:e0:e3:53:45:2b:
4d:12:09:7b:11:50:8f:d3:a4:74:f0:13:26:52:b3:ac:d6:71:
62:35:e3:03:11:24:54:53:b5:e9:81:76:3d:ee:50:a0:09:e3:
78:aa:16:f1:7f:9d:80:e8:6d:ff:b3:2d:0a:f9:f6:c0:58:34:
e2:0a:bb:a5:a8:fb:ad:7a:94:1f:49:59:c0:f2:1b:57:b8:d7:
5f:32:f4:db:0b:66:9b:e2:e3:6e:de:44:4a:42:a8:53:85:ab:
c1:a9:ec:ac:4b:69:b7:6a:05:59:6a:88:1e:d2:cb:8b:d0:81:
b0:d2:d4:b0:1d:b0:07:08:07:74:19:d5:d7:b6:4b:d2:26:f7:
ca:66:04:be:18:40:9d:41:6a:b4:e5:a1:f3:45:cb:0d:9e:de:
70:42:0a:4c:63:2e:7a:02:31:c6:fb:28:88:d8:f6:b2:f1:1a:
72:b3:15:1b:81:15:34:66:1d:e1:4e:d9:ee:73:23:5c:7b:0d:
ba:a1:e7:70:45:c5:fa:96:62:41:df:f3:d0:2e:90:0c:34:c9:
1f:77:88:8f:bc:13:35:7e:70:20:e7:cf:14:db:8f:37:41:6c:
12:1a:8c:4c:5e:0d:10:b5:82:9b:60:41:80:13:9f:1f:a1:9f:
9d:99:72:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:38 2024 by rpki-client on console-fra.rpki-client.org