Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/Lw-Q8mPY1amUOwd9n_OGx7e7FJo.roa
File: Lw-Q8mPY1amUOwd9n_OGx7e7FJo.roa (raw, json)
Hash identifier: h7d7ZggvoraF/af+B8bvaOf3qP3InPa9hT8Wo5kWaS8=
Subject key identifier: 2F:0F:90:F2:63:D8:D5:A9:94:3B:07:7D:9F:F3:86:C7:B7:BB:14:9A
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0185710C409755916138D639ADAFAA9A246B
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/Lw-Q8mPY1amUOwd9n_OGx7e7FJo.roa
Signing time: Mon 02 Jan 2023 05:55:06 +0000
ROA not before: Mon 02 Jan 2023 05:55:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210702
IP address blocks: 185.180.228.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 07 Feb 2023 15:13:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:0c:40:97:55:91:61:38:d6:39:ad:af:aa:9a:24:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 2 05:55:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2f0f90f263d8d5a9943b077d9ff386c7b7bb149a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4a:34:77:b9:cb:1a:3d:ae:f9:96:92:27:27:
87:dc:23:de:f6:55:eb:da:54:27:d7:77:3b:24:31:
4a:1c:e2:23:23:d7:18:85:ac:42:1f:bf:e1:1a:0e:
f5:09:a8:bc:1a:67:31:70:3c:44:b4:55:4c:73:51:
84:2f:40:97:7f:d2:23:b7:4d:11:90:96:15:a7:8f:
2e:a7:a7:73:41:8d:e9:2b:90:71:b2:b8:e4:cb:06:
a1:33:2b:fe:60:79:6d:9b:a0:10:74:6f:af:53:25:
8a:0b:d8:40:e7:a4:d9:03:a1:c8:d5:19:ab:48:4a:
06:7b:51:4f:87:c2:68:e8:bc:da:59:6a:ed:7d:74:
90:1b:89:cd:c2:ee:dd:9d:e2:d4:07:45:ff:71:09:
3f:ab:b9:0b:e7:e5:86:83:ce:29:3b:00:f3:e4:bd:
64:01:92:3f:44:45:f2:2d:fc:02:45:95:5f:ba:47:
e8:e1:c3:de:73:92:86:8f:be:e7:bc:e3:8f:c6:73:
a0:27:64:5b:c9:43:3e:4e:7b:07:3c:23:bf:49:dc:
56:fd:00:0c:75:8b:50:0e:8d:c9:cf:3e:12:62:b6:
7c:c3:5f:92:58:ad:7e:f7:c5:e7:90:12:63:53:1a:
f4:61:9d:56:72:69:83:f8:50:cd:94:3b:48:f2:6c:
04:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:0F:90:F2:63:D8:D5:A9:94:3B:07:7D:9F:F3:86:C7:B7:BB:14:9A
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/Lw-Q8mPY1amUOwd9n_OGx7e7FJo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.180.228.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:42:10:1b:fe:a7:cd:1b:7b:87:5b:8d:a6:e3:9f:75:37:cc:
2e:78:48:9f:09:b0:19:8c:67:0f:f0:d9:af:95:bc:a8:01:d2:
90:c8:db:30:45:c4:82:d5:82:94:b4:49:09:12:ed:72:ad:5d:
31:7a:27:ec:bc:67:04:3d:7b:e9:b1:c1:7e:3f:08:1f:b1:a4:
01:ac:f1:6b:cd:01:b8:8d:13:af:ba:27:7b:6e:22:db:5f:fc:
ba:1e:91:f3:c0:9b:e3:63:ff:d0:cc:76:bb:cf:81:6e:02:ad:
6f:5c:07:e2:e9:fd:06:67:78:4f:4b:f8:6b:04:de:6e:c0:a2:
be:4a:a2:71:1d:5e:07:63:84:b3:93:67:02:aa:a7:6c:04:3d:
3d:18:af:4d:b5:e3:ab:a9:a0:52:cf:3a:df:0a:31:43:33:f6:
3e:47:5e:e8:31:ab:1a:b4:c5:c9:a3:a6:77:be:0a:07:ad:09:
8c:d2:06:5a:05:d2:08:ae:fa:81:9d:15:39:82:c0:46:36:67:
26:9a:00:bd:aa:25:73:10:70:f8:b4:bd:55:1e:18:44:66:0e:
81:1b:cd:17:a4:ec:98:ec:f1:55:6a:0c:7b:5d:e2:47:cc:7a:
a6:1f:6a:8e:6f:88:b9:41:aa:d9:98:f6:26:58:0d:20:45:96:
13:13:c5:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:10 2024 by rpki-client on console-ams.rpki-client.org