Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/LikzAHYsDWOeLB59vdZeVsIL51Y.roa
File: LikzAHYsDWOeLB59vdZeVsIL51Y.roa (raw, json)
Hash identifier: wCexIpaRjxV+gjcpysMZk/gyZyBHuAQ//JpGPMnFTxg=
Subject key identifier: 2E:29:33:00:76:2C:0D:63:9E:2C:1E:7D:BD:D6:5E:56:C2:0B:E7:56
Certificate issuer: /CN=776564fc206c4bc5db58f7efbbb1e8f88499e233
Certificate serial: 018CC5DC85465559CEBD48FD61B647A2B60E
Authority key identifier: 77:65:64:FC:20:6C:4B:C5:DB:58:F7:EF:BB:B1:E8:F8:84:99:E2:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/LikzAHYsDWOeLB59vdZeVsIL51Y.roa
Signing time: Mon 01 Jan 2024 16:30:12 +0000
ROA not before: Mon 01 Jan 2024 16:30:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203462
IP address blocks: 185.139.182.0/24 maxlen: 24
185.139.181.0/24 maxlen: 24
185.134.68.0/22 maxlen: 24
2a06:eb00::/29 maxlen: 48
Validation: Failed, certificate revoked on Thu 12 Sep 2024 16:36:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:85:46:55:59:ce:bd:48:fd:61:b6:47:a2:b6:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=776564fc206c4bc5db58f7efbbb1e8f88499e233
Validity
Not Before: Jan 1 16:30:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2e293300762c0d639e2c1e7dbdd65e56c20be756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b5:02:56:77:13:0f:d0:60:16:46:0a:5d:25:
a1:06:b1:e6:4a:4b:f4:04:10:eb:2e:16:d6:8d:48:
73:7b:7c:c1:4c:3f:7a:18:0f:5e:53:56:c1:85:b0:
b9:23:71:85:6a:4a:65:ee:7c:94:ca:f9:b0:e4:b8:
db:4f:16:a5:3d:dc:cb:03:06:09:07:b6:b3:4a:ed:
d1:d4:6c:df:77:fe:7a:59:fa:0a:e4:ff:d6:c4:b4:
63:4e:01:02:ac:f2:02:f8:05:db:de:a3:54:37:8e:
e7:f8:63:18:66:d9:58:5d:59:2b:c5:78:5f:f3:9b:
11:97:7a:44:ff:fd:96:2c:8b:97:84:18:1c:07:62:
45:b9:d2:e9:77:00:a9:32:f1:b9:a3:78:10:cb:77:
bd:7a:f9:ba:aa:0e:6f:a2:65:66:52:af:89:bd:e5:
96:b4:4e:1a:dd:36:71:30:73:34:95:10:5e:73:ca:
00:80:d6:ae:0e:ec:5f:ad:8c:85:b7:ce:01:34:c8:
a7:92:65:d2:3d:f8:d9:c3:4c:e7:c0:0e:2e:7e:1d:
44:66:41:54:60:b1:b8:81:3e:85:7d:e0:c8:9c:09:
ac:77:86:82:9a:90:54:9d:1c:87:9f:02:75:73:a5:
73:49:3f:f1:d0:1f:ee:25:28:c9:bc:fb:fa:db:f2:
6f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:29:33:00:76:2C:0D:63:9E:2C:1E:7D:BD:D6:5E:56:C2:0B:E7:56
X509v3 Authority Key Identifier:
keyid:77:65:64:FC:20:6C:4B:C5:DB:58:F7:EF:BB:B1:E8:F8:84:99:E2:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/LikzAHYsDWOeLB59vdZeVsIL51Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.134.68.0/22
185.139.181.0-185.139.182.255
IPv6:
2a06:eb00::/29
Signature Algorithm: sha256WithRSAEncryption
95:0a:e3:a3:e0:64:6b:c1:f1:30:57:11:f1:67:1b:41:2e:9b:
68:96:6b:64:12:be:17:1b:67:84:c9:31:af:1b:14:d3:1c:fd:
25:b1:d3:7f:70:8a:78:8f:e7:f6:3a:1c:f8:49:0f:d0:3d:58:
80:59:dc:65:27:54:94:d1:ae:37:de:71:38:33:58:4d:22:d6:
9c:ff:2e:86:f1:12:f1:2e:0f:88:32:34:40:10:57:d7:bc:58:
66:ed:1c:b9:5d:1e:cb:8e:bb:9e:2a:29:63:2f:ad:74:5b:00:
99:27:a8:6e:b4:1b:37:e0:7b:a6:94:4f:cf:9a:57:ca:cd:9f:
ff:03:28:c3:fb:0d:9d:2f:1e:5a:38:a7:56:4a:c7:b1:4e:9e:
ca:1b:48:41:a4:c7:70:3c:a3:e6:d6:16:79:d3:65:0e:98:b6:
36:30:fd:c3:a6:86:c6:47:1c:41:d0:cd:cc:7b:40:d6:0e:48:
20:cf:da:c8:28:19:e2:35:1c:38:37:98:3f:23:b2:d2:53:fe:
55:99:e0:8f:7c:5b:91:f1:76:ab:8a:86:73:37:8c:34:5a:a4:
27:d4:be:26:48:5b:1b:e6:0d:4c:5c:3e:49:26:e9:d4:f2:34:
62:71:14:d5:68:d6:47:8c:45:4f:d9:c2:45:ba:34:13:22:b1:
24:63:6b:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 12 18:44:57 2024 by rpki-client on console-ams.rpki-client.org