Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/LzdZ0vROcSus4gDGOjOySEcZNIk.roa
File: LzdZ0vROcSus4gDGOjOySEcZNIk.roa (raw, json)
Hash identifier: iyLa1YdgQsQWKdT8oj1G3DU6skjgD0qipKwoAwf4fTc=
Subject key identifier: 2F:37:59:D2:F4:4E:71:2B:AC:E2:00:C6:3A:33:B2:48:47:19:34:89
Certificate issuer: /CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Certificate serial: 018572BA4AAA81FAB4DF7AD8BC7A12828419
Authority key identifier: 5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/LzdZ0vROcSus4gDGOjOySEcZNIk.roa
Signing time: Mon 02 Jan 2023 13:44:49 +0000
ROA not before: Mon 02 Jan 2023 13:44:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199399
IP address blocks: 185.1.123.0/24 maxlen: 24
176.126.38.0/24 maxlen: 24
195.130.66.0/24 maxlen: 24
195.251.247.0/24 maxlen: 24
2001:648:20f0::/48 maxlen: 48
2001:7f8:6e::/48 maxlen: 48
2001:7f8:ce::/48 maxlen: 48
2001:648:2cef::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:ba:4a:aa:81:fa:b4:df:7a:d8:bc:7a:12:82:84:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Validity
Not Before: Jan 2 13:44:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2f3759d2f44e712bace200c63a33b24847193489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:55:04:ee:42:2f:fa:bf:b7:1d:d6:0e:10:da:
9f:3e:76:fa:f2:3f:8d:d3:32:2e:14:e5:16:51:1f:
31:81:e8:99:d6:41:f7:62:91:c7:4a:23:21:c8:ff:
e1:d6:0a:8d:ab:82:ae:3e:d1:92:f9:a5:b8:c9:e4:
89:e1:2f:76:50:32:02:cf:38:6d:2f:d4:8a:2c:c3:
aa:db:c9:e6:32:2b:c9:79:7b:51:30:38:20:6b:58:
57:8d:4a:cc:a3:02:7b:31:f6:ab:04:92:e0:74:e4:
c6:bc:31:ce:8c:ed:6a:bf:ef:97:d7:ce:9e:46:7b:
3e:b7:04:d1:50:f5:f8:c0:6e:f2:0e:5e:86:51:dd:
4c:5b:f3:01:b9:97:de:d7:52:1e:df:fc:e8:8e:a7:
57:b5:60:de:0f:9f:84:fd:6b:71:9e:64:82:23:06:
9c:bc:a9:c1:26:ff:5f:e2:16:cf:96:59:0d:f0:69:
cb:d1:b4:1f:bd:66:7b:1f:09:3f:e5:a8:b1:4f:25:
fe:7c:0a:8b:51:ce:db:d6:e4:76:c2:dd:17:6b:9d:
85:d5:bb:f8:16:cf:11:cb:01:7f:90:20:2c:f0:e2:
83:a2:75:09:d9:67:3a:31:a5:53:c7:6e:b3:be:e7:
20:99:86:a2:b2:dd:e2:7c:22:6e:b1:4d:06:a6:8d:
fd:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:37:59:D2:F4:4E:71:2B:AC:E2:00:C6:3A:33:B2:48:47:19:34:89
X509v3 Authority Key Identifier:
keyid:5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/LzdZ0vROcSus4gDGOjOySEcZNIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.38.0/24
185.1.123.0/24
195.130.66.0/24
195.251.247.0/24
IPv6:
2001:648:20f0::/48
2001:648:2cef::/48
2001:7f8:6e::/48
2001:7f8:ce::/48
Signature Algorithm: sha256WithRSAEncryption
09:50:c6:ee:fa:63:af:f0:49:d5:ee:6f:7b:cd:37:b5:86:bd:
3f:10:66:1a:fc:b6:58:fc:56:e6:cf:1a:6a:c5:0a:92:6c:1b:
a4:61:54:aa:26:96:1d:88:5d:46:22:6c:1d:11:83:be:01:a7:
92:36:7c:48:1c:dc:66:d1:60:3a:c6:70:fb:63:9a:37:ed:74:
88:db:26:a3:32:df:eb:65:9d:6d:f4:ad:29:59:3f:0c:62:a9:
b2:cc:ef:f7:6a:3f:7b:5a:8d:18:e7:8a:c6:a0:40:01:f5:3d:
bc:92:45:00:02:b4:0d:75:03:3c:07:c7:48:aa:cb:aa:7b:1a:
7b:57:51:82:0b:e5:f6:28:af:13:14:c6:4f:30:5e:24:16:45:
88:56:ca:8f:81:66:04:0d:d2:74:f4:dc:1c:21:34:18:f4:4a:
90:f5:0c:fe:5e:8e:fc:9e:4f:47:46:9b:ff:f5:5b:50:4b:ea:
ce:a5:2b:71:d6:a1:fd:47:dc:78:f7:40:a0:69:c9:0c:7f:55:
9d:7b:64:c7:29:8e:bf:f8:12:9d:6a:5d:c7:f5:c8:fb:7a:5f:
c2:7d:d0:f1:bc:8e:1b:1b:21:79:ea:3e:66:20:3b:d2:07:c3:
56:a8:0f:fd:db:0c:7a:a8:cb:8f:7a:b0:cd:08:a3:12:ca:4f:
b8:99:c5:99
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:35 2024 by rpki-client on console-fra.rpki-client.org