Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/LxMTTmDIabzIpqqZ92XSvFddf5I.roa
File: LxMTTmDIabzIpqqZ92XSvFddf5I.roa (raw, json)
Hash identifier: /lG0qZtyAYfR8h5M7PBiAlYkmBZmvTeNbcJLFdyV+JE=
Subject key identifier: 2F:13:13:4E:60:C8:69:BC:C8:A6:AA:99:F7:65:D2:BC:57:5D:7F:92
Certificate issuer: /CN=27d54e4a788d6967a2eef3a6692622626f54efad
Certificate serial: 018CC94D989E993A0FCD2592103E594FFD34
Authority key identifier: 27:D5:4E:4A:78:8D:69:67:A2:EE:F3:A6:69:26:22:62:6F:54:EF:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9VOSniNaWei7vOmaSYiYm9U760.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/LxMTTmDIabzIpqqZ92XSvFddf5I.roa
Signing time: Tue 02 Jan 2024 08:32:34 +0000
ROA not before: Tue 02 Jan 2024 08:32:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8487
IP address blocks: 185.156.24.0/24 maxlen: 24
2a07:9980::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 07 Mar 2024 10:52:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:98:9e:99:3a:0f:cd:25:92:10:3e:59:4f:fd:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d54e4a788d6967a2eef3a6692622626f54efad
Validity
Not Before: Jan 2 08:32:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2f13134e60c869bcc8a6aa99f765d2bc575d7f92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:5b:b5:7b:8b:7f:f6:39:b5:8f:8d:74:76:02:
60:88:1c:f8:d7:87:1b:2b:9e:31:91:d0:8d:cd:64:
9a:eb:7e:15:9e:e8:f4:4f:62:a7:ea:22:31:84:08:
54:fb:c0:32:6f:0d:74:22:26:e7:49:9d:3d:10:89:
15:96:9a:ba:db:5b:dd:4f:0e:ba:17:05:f2:4a:e3:
f8:4d:9a:ec:36:a5:a0:1d:bc:9c:53:a0:a3:ac:de:
c4:12:b4:c5:6b:5e:8f:38:70:73:24:1d:b2:88:c7:
87:60:87:cd:ef:6c:f1:35:c5:7d:de:9e:21:5e:e8:
2a:16:48:ae:a0:52:86:a4:92:c4:5a:4a:4d:11:13:
d2:a8:18:f9:4c:e9:8d:40:fb:0d:77:ad:f1:09:5a:
4d:65:23:7b:e5:0b:67:46:db:db:18:ce:a7:b5:d0:
20:92:d5:5d:ee:6e:c5:42:3a:ac:70:ed:2a:3b:63:
74:32:50:b8:6c:d5:18:dd:60:1c:c1:a8:72:fe:18:
76:7b:9b:17:df:3f:b8:ea:6e:44:79:ad:bf:dd:d0:
f6:4e:9e:17:87:f6:22:e5:a9:53:db:59:7d:a5:4a:
85:ea:a6:bb:81:c4:4f:f2:6a:af:00:bc:e5:54:e6:
60:1f:ff:7b:20:74:c8:e9:a7:86:91:1c:80:eb:67:
b3:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:13:13:4E:60:C8:69:BC:C8:A6:AA:99:F7:65:D2:BC:57:5D:7F:92
X509v3 Authority Key Identifier:
keyid:27:D5:4E:4A:78:8D:69:67:A2:EE:F3:A6:69:26:22:62:6F:54:EF:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9VOSniNaWei7vOmaSYiYm9U760.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/LxMTTmDIabzIpqqZ92XSvFddf5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.156.24.0/24
IPv6:
2a07:9980::/29
Signature Algorithm: sha256WithRSAEncryption
52:fe:de:fc:04:c5:1c:61:c6:4e:f1:f8:d2:0d:40:59:11:33:
9c:5d:f8:92:5a:50:4f:0b:ff:3c:fa:2a:4f:9f:41:42:c5:da:
b9:08:24:b3:a1:7c:0b:d4:3c:e6:76:37:ae:9f:78:25:ff:58:
10:d0:13:a6:b5:cb:20:e8:6f:5f:ba:f2:f8:70:6d:e0:ee:ea:
45:f2:6f:1c:df:c1:81:f7:e9:ec:82:d9:ee:33:90:09:d5:e1:
30:ff:42:88:e9:2b:eb:b7:d2:86:3c:a3:7f:d6:5f:c5:6b:1a:
be:e7:c9:a7:bd:e6:46:3d:fa:1f:5e:f0:65:8e:e1:97:c4:a5:
4c:c4:b4:40:f6:53:a6:72:fb:78:87:86:24:ec:55:93:26:02:
23:97:63:bb:fc:53:34:34:4c:de:13:96:e4:b6:be:62:17:a0:
ab:17:f1:d1:5c:34:5a:a2:10:f5:14:5b:e9:61:06:62:70:d2:
38:73:5d:ae:1e:22:ee:12:8a:5f:11:a5:f2:54:86:f6:24:c2:
d4:35:49:85:da:0f:f7:fd:12:00:c4:fa:74:b8:d7:09:26:a8:
8f:db:e6:1f:e4:6d:b6:f6:87:80:00:a4:ed:f9:be:50:11:8c:
fb:e9:45:ec:77:6a:1d:69:d6:4b:cd:27:85:ee:19:b3:af:e9:
41:05:07:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:49 2024 by rpki-client on console-ams.rpki-client.org