Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/LMQvgJ-kFNWaEETmgWaSs57EYzs.roa
File: LMQvgJ-kFNWaEETmgWaSs57EYzs.roa (raw, json)
Hash identifier: EkuCDXFJF8X5kFfU3lzdrBq99ZIei/1GSePypOFJGSE=
Subject key identifier: 2C:C4:2F:80:9F:A4:14:D5:9A:10:44:E6:81:66:92:B3:9E:C4:63:3B
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018894F879D5BF4D7161A6F1E182A45C8F80
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/LMQvgJ-kFNWaEETmgWaSs57EYzs.roa
Signing time: Wed 07 Jun 2023 08:28:12 +0000
ROA not before: Wed 07 Jun 2023 08:28:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200482
IP address blocks: 194.5.65.0/24 maxlen: 24
185.218.100.0/24 maxlen: 24
185.218.101.0/24 maxlen: 24
185.218.102.0/24 maxlen: 24
185.210.232.0/24 maxlen: 24
185.209.75.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Jun 2023 10:33:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:94:f8:79:d5:bf:4d:71:61:a6:f1:e1:82:a4:5c:8f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jun 7 08:28:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2cc42f809fa414d59a1044e6816692b39ec4633b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:54:34:47:9d:6d:dd:44:41:ff:21:c3:9a:4e:
05:5c:dd:db:ce:4f:52:47:54:55:8d:3b:f9:72:b7:
e5:62:55:5f:d4:74:82:08:dd:62:50:7d:78:3c:ef:
34:82:80:b9:a3:73:81:0e:bb:24:c8:d5:c1:54:90:
74:ea:6d:df:03:ad:5a:8a:d7:48:ac:42:87:46:3a:
13:04:8a:4f:35:a8:c9:2e:58:01:21:89:e1:56:05:
b9:33:89:47:1c:42:77:e0:97:41:82:a7:c2:50:fe:
fb:7c:3b:e5:61:01:67:16:49:d3:7d:88:68:14:1e:
02:cd:5f:9c:40:a5:70:9b:e1:c4:c7:be:f7:df:f9:
c3:a1:f6:bf:3b:5d:06:59:f0:60:28:7e:ca:9b:a6:
58:e9:d4:87:60:fe:9a:6e:33:22:88:64:49:07:47:
de:fe:ee:83:2c:98:93:77:bf:e7:c9:0e:d2:3b:26:
2c:40:b6:cb:5e:4b:9c:65:f9:07:52:48:9a:4b:5c:
ac:1c:17:44:16:37:32:78:7b:d9:76:c7:e2:52:35:
7f:60:59:6a:b2:e5:54:32:ba:c3:0f:09:4a:72:47:
51:e9:21:67:99:5d:ba:53:1b:88:72:36:d6:46:e7:
de:22:46:0d:87:6f:f1:1e:f0:45:8c:cc:75:73:3f:
e6:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:C4:2F:80:9F:A4:14:D5:9A:10:44:E6:81:66:92:B3:9E:C4:63:3B
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/LMQvgJ-kFNWaEETmgWaSs57EYzs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.209.75.0/24
185.210.232.0/24
185.218.100.0-185.218.102.255
194.5.65.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:28:fa:5e:37:8b:f8:fc:cb:bb:55:fe:84:78:92:b4:0c:bd:
a1:6c:f3:2c:ef:26:c2:af:d6:7e:94:8c:95:2f:13:f0:fd:8a:
70:3e:45:1f:07:1b:cb:ba:69:6e:be:4a:78:7f:53:28:28:f8:
55:0c:2a:ed:08:ff:16:a8:92:52:2a:13:a6:ca:72:a5:1a:ad:
fa:93:78:63:dc:56:c8:88:f5:54:b8:56:02:6b:1a:9e:46:99:
71:b6:17:8b:ee:5e:16:40:8e:10:5e:5b:f8:32:31:c2:21:d5:
d5:25:17:2c:12:40:61:b7:bf:93:d0:8d:d8:57:c7:d9:5d:dc:
d8:5b:e1:4b:46:ef:0a:73:5a:8c:e6:51:92:e2:6c:3e:18:40:
07:b6:9c:48:5e:31:34:35:1c:98:4b:e2:2e:2b:04:04:db:ff:
eb:62:53:7e:a7:99:3c:b7:8c:6a:86:47:4e:a2:ff:59:01:4f:
41:6f:12:f9:ac:71:74:86:05:3f:a6:16:b3:aa:30:34:2f:e3:
cb:3b:d1:c7:ac:e1:56:e8:aa:5a:af:52:01:0d:6b:48:69:10:
7b:28:68:2e:e5:4c:64:e9:9e:3e:77:9c:9f:73:d9:d6:59:24:
b5:eb:5d:4e:42:ed:12:33:39:91:98:54:02:21:aa:4d:95:38:
31:e8:6c:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:22 2024 by rpki-client on console-ams.rpki-client.org