Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/LP4AT_j9Q5-vahJnajf7omDppEk.roa
File: LP4AT_j9Q5-vahJnajf7omDppEk.roa (raw, json)
Hash identifier: r7sRS13gADDxwQ98gMrAYw0ehKJafPLyDYYhgcxcaNk=
Subject key identifier: 2C:FE:00:4F:F8:FD:43:9F:AF:6A:12:67:6A:37:FB:A2:60:E9:A4:49
Certificate issuer: /CN=b51e3f6bebcd05291dc5265e08b1cd6c401b9cfd
Certificate serial: 018B253C1243709D72032B187671E9BD3BED
Authority key identifier: B5:1E:3F:6B:EB:CD:05:29:1D:C5:26:5E:08:B1:CD:6C:40:1B:9C:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tR4_a-vNBSkdxSZeCLHNbEAbnP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/LP4AT_j9Q5-vahJnajf7omDppEk.roa
Signing time: Thu 12 Oct 2023 18:52:55 +0000
ROA not before: Thu 12 Oct 2023 18:52:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8495
IP address blocks: 89.146.192.0/18 maxlen: 24
85.209.200.0/22 maxlen: 24
195.34.160.0/19 maxlen: 24
2a01:130::/32 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:25:3c:12:43:70:9d:72:03:2b:18:76:71:e9:bd:3b:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b51e3f6bebcd05291dc5265e08b1cd6c401b9cfd
Validity
Not Before: Oct 12 18:52:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2cfe004ff8fd439faf6a12676a37fba260e9a449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:aa:c7:c2:4a:10:bc:8b:de:2c:87:5c:cc:e1:
e9:da:6c:13:12:d6:7e:e3:fa:77:45:13:c5:09:1f:
85:82:72:e8:b7:32:44:0f:f0:47:02:75:f2:91:a0:
88:07:a3:9d:9b:31:54:7b:56:24:c9:90:21:4d:3c:
84:1f:34:33:a4:7a:08:11:44:29:ef:f0:e0:02:d5:
e9:3f:09:8a:3d:c4:f1:9b:38:22:0d:47:f0:c1:24:
5d:cf:45:5f:a2:b8:a0:55:26:9a:41:92:00:c5:0c:
c1:62:2f:fe:18:5f:31:06:a7:b9:33:82:55:2e:1a:
df:68:53:26:bb:7e:5e:e1:18:f8:be:12:bb:26:89:
da:ea:76:b7:ee:ca:d6:39:e9:06:98:97:c3:d3:f3:
c0:43:21:dc:87:35:ff:17:1f:c1:d7:d1:11:1c:d9:
63:61:df:dd:e5:85:6c:39:3c:30:7d:6c:2b:bc:2a:
ba:c6:4f:6a:e0:6e:6b:34:5a:50:ef:72:9f:a0:4d:
b6:d3:40:da:41:58:9d:84:8f:0d:a1:d8:07:02:ab:
5a:0b:6e:8c:4f:9d:95:4d:eb:2e:50:4a:36:ef:0a:
3e:8d:73:b0:dd:73:56:d0:66:73:26:36:f4:b5:cd:
08:a9:8f:71:f4:a0:12:50:10:b0:d0:7c:38:25:3f:
d9:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:FE:00:4F:F8:FD:43:9F:AF:6A:12:67:6A:37:FB:A2:60:E9:A4:49
X509v3 Authority Key Identifier:
keyid:B5:1E:3F:6B:EB:CD:05:29:1D:C5:26:5E:08:B1:CD:6C:40:1B:9C:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tR4_a-vNBSkdxSZeCLHNbEAbnP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/LP4AT_j9Q5-vahJnajf7omDppEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.200.0/22
89.146.192.0/18
195.34.160.0/19
IPv6:
2a01:130::/32
Signature Algorithm: sha256WithRSAEncryption
6c:87:87:10:d8:34:5c:be:6e:0e:51:0a:8e:a1:be:34:4a:f8:
51:9f:c4:7c:6d:9a:3a:5a:1a:29:a9:60:75:7d:03:fe:23:51:
ba:2b:10:ce:a9:24:5c:a4:2a:55:7c:59:ca:e8:f1:8e:98:64:
5b:d6:73:91:1f:2e:33:c3:cc:2a:20:24:aa:27:ef:2a:66:08:
05:87:2e:18:85:d4:6b:de:bf:07:e5:26:73:08:43:19:55:39:
70:98:22:c0:c6:97:fa:d7:8a:cb:bd:d7:87:86:34:cf:89:a1:
83:66:76:4f:db:6d:67:2a:fd:dd:cd:53:60:ea:fa:ef:ac:b1:
93:28:fd:8e:00:7c:07:dd:1f:24:4c:d7:96:12:9d:97:23:30:
aa:fb:16:cb:c9:18:d8:58:4d:31:ac:cd:bf:1b:13:84:ab:1c:
d3:f4:25:24:f4:ba:6f:fa:41:08:45:0d:12:5f:bc:2d:b8:f6:
72:e8:f3:ac:26:08:59:97:9e:6e:fb:df:33:6e:1f:c2:13:98:
18:26:7c:f7:5c:9b:14:00:19:63:41:63:f3:04:df:0e:80:50:
da:1d:5c:fc:79:0f:62:22:74:75:c3:89:72:80:e7:df:82:48:
eb:3e:2e:78:10:6a:92:96:ac:3e:96:da:80:60:3a:85:cc:68:
7e:df:6e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:17 2024 by rpki-client on console-ams.rpki-client.org