Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/LIq_mvkCMA49BrLIeVyWGDXJIGU.roa
File: LIq_mvkCMA49BrLIeVyWGDXJIGU.roa (raw, json)
Hash identifier: 23dUND2QZqym1SGEKc6F5t89IqKKcN2JRW0bCqAkglI=
Subject key identifier: 2C:8A:BF:9A:F9:02:30:0E:3D:06:B2:C8:79:5C:96:18:35:C9:20:65
Certificate issuer: /CN=fe1d18d9a222736dbac231110b88deac8db0336d
Certificate serial: 01856BE5B07679012E08E44B900B30DF8A45
Authority key identifier: FE:1D:18:D9:A2:22:73:6D:BA:C2:31:11:0B:88:DE:AC:8D:B0:33:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_h0Y2aIic226wjERC4jerI2wM20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/LIq_mvkCMA49BrLIeVyWGDXJIGU.roa
Signing time: Sun 01 Jan 2023 05:54:53 +0000
ROA not before: Sun 01 Jan 2023 05:54:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5626
IP address blocks: 213.146.192.0/19 maxlen: 24
89.26.128.0/17 maxlen: 24
194.38.128.0/19 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:e5:b0:76:79:01:2e:08:e4:4b:90:0b:30:df:8a:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe1d18d9a222736dbac231110b88deac8db0336d
Validity
Not Before: Jan 1 05:54:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2c8abf9af902300e3d06b2c8795c961835c92065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:44:eb:bb:11:d6:e3:ad:51:86:1a:5f:63:a4:
fc:64:0b:00:96:ea:10:61:bb:99:bd:a7:ef:be:c0:
2b:1f:a3:2a:9a:fc:67:45:0e:76:4e:37:57:dc:9a:
ed:f2:9d:b8:68:11:3a:ed:7c:44:d2:40:12:02:4e:
d6:07:5a:a5:b2:d3:f0:de:2a:70:1e:0a:aa:c9:7d:
1e:2a:8f:aa:90:26:23:0b:77:2f:70:af:11:4e:c4:
88:72:6b:a2:a4:c5:c5:b7:3b:e6:68:ae:80:b0:0c:
60:67:f0:ec:77:10:3c:e6:b1:d0:00:a4:49:19:d3:
c7:55:88:11:2f:cd:aa:04:cc:e4:f8:39:81:9e:75:
ae:a2:a9:88:3e:cd:55:06:b8:5c:e2:8d:e1:11:ac:
3c:c7:c5:b7:98:2e:34:8f:0b:24:7c:fc:50:08:ce:
ac:8e:fb:ea:81:be:ae:b6:17:44:67:42:fc:44:9b:
4c:34:34:a0:a5:62:9f:62:1f:ed:f8:b3:52:07:79:
94:61:fd:a3:1d:9c:7b:e1:8e:6e:a6:06:69:02:86:
c3:7b:f2:51:01:6f:f9:b3:01:02:78:42:a2:ab:5a:
c6:8e:b7:a3:d2:61:86:dc:de:0e:1f:b1:ae:c4:3a:
7a:91:aa:67:7f:28:c5:71:ae:5c:97:26:c4:c5:f4:
10:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:8A:BF:9A:F9:02:30:0E:3D:06:B2:C8:79:5C:96:18:35:C9:20:65
X509v3 Authority Key Identifier:
keyid:FE:1D:18:D9:A2:22:73:6D:BA:C2:31:11:0B:88:DE:AC:8D:B0:33:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_h0Y2aIic226wjERC4jerI2wM20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/LIq_mvkCMA49BrLIeVyWGDXJIGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.26.128.0/17
194.38.128.0/19
213.146.192.0/19
Signature Algorithm: sha256WithRSAEncryption
91:5d:07:60:20:8b:2d:e3:ea:5b:53:40:39:76:0f:b1:2a:d6:
66:4b:87:a9:78:43:61:98:e4:9d:fe:16:f6:b6:a2:00:a3:67:
9f:08:ac:83:1b:48:ba:4e:76:eb:ad:62:a7:27:fa:c8:07:42:
36:88:14:32:fb:a8:0b:4a:95:f6:7c:ed:61:e5:60:43:aa:4c:
55:6a:40:47:a7:9b:9e:bc:ac:a3:ff:7b:02:33:7f:2d:fc:2b:
23:fb:6b:b9:ff:4f:90:23:d7:7a:9a:c7:00:51:b6:4b:06:c6:
68:83:80:4a:ce:dd:ef:4f:40:47:b9:b9:5d:33:0e:96:8d:f0:
be:07:8d:14:f4:dc:d7:85:94:80:42:a0:27:11:e5:73:34:dc:
8a:6d:1d:75:14:80:9f:8e:63:e7:eb:6c:14:0a:05:90:e5:ee:
10:0b:1b:d6:99:e3:3c:6c:74:f4:16:b5:4d:e8:78:01:2a:36:
6b:c0:c8:ea:1f:37:b9:6f:55:f2:3c:28:9b:33:2b:78:74:0e:
d6:64:2f:18:32:06:b1:5e:57:2f:58:98:f8:97:e2:cb:b2:fa:
11:c6:aa:6d:9c:1a:20:c8:81:fc:2a:e0:54:d7:b8:d8:dd:77:
2f:4b:0d:17:8a:24:91:7f:b6:7d:d5:71:49:cb:85:12:df:32:
d6:8e:f8:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:46 2024 by rpki-client on console-fra.rpki-client.org