Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/LWehFtvdWst02UA0vC2HrOXE8Pc.roa
File: LWehFtvdWst02UA0vC2HrOXE8Pc.roa (raw, json)
Hash identifier: nYt7spNsGJGVUKhau6vHMLfDu6eW9WUB972dZg2cAB4=
Subject key identifier: 2D:67:A1:16:DB:DD:5A:CB:74:D9:40:34:BC:2D:87:AC:E5:C4:F0:F7
Certificate issuer: /CN=f4b762950eb7916668bbfa8d1b870560b1ca7739
Certificate serial: 0190063105CEDB26E0E7BCC34E49519BC851
Authority key identifier: F4:B7:62:95:0E:B7:91:66:68:BB:FA:8D:1B:87:05:60:B1:CA:77:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/LWehFtvdWst02UA0vC2HrOXE8Pc.roa
Signing time: Tue 11 Jun 2024 07:26:34 +0000
ROA not before: Tue 11 Jun 2024 07:26:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12444
IP address blocks: 84.17.67.0/24 maxlen: 24
84.17.68.0/24 maxlen: 24
84.17.70.0/24 maxlen: 24
84.17.71.0/24 maxlen: 24
84.17.75.0/24 maxlen: 24
84.17.76.0/24 maxlen: 24
84.17.78.0/24 maxlen: 24
84.17.79.0/24 maxlen: 24
84.17.84.0/24 maxlen: 24
84.17.86.0/24 maxlen: 24
84.17.87.0/24 maxlen: 24
84.17.89.0/24 maxlen: 24
84.17.90.0/24 maxlen: 24
84.17.91.0/24 maxlen: 24
84.17.93.0/24 maxlen: 24
185.118.176.0/24 maxlen: 24
185.118.177.0/24 maxlen: 24
185.118.178.0/24 maxlen: 24
185.118.179.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 Jul 2024 08:35:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:06:31:05:ce:db:26:e0:e7:bc:c3:4e:49:51:9b:c8:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b762950eb7916668bbfa8d1b870560b1ca7739
Validity
Not Before: Jun 11 07:26:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2d67a116dbdd5acb74d94034bc2d87ace5c4f0f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a9:73:eb:39:05:05:5a:88:ea:08:ac:00:8f:
f7:b3:10:06:2b:a9:a4:73:c7:81:b9:cf:fb:b4:eb:
7f:00:50:a3:1f:1c:79:05:b9:17:0c:2e:19:57:a6:
75:c8:86:b0:fd:69:0a:60:79:17:72:c3:ef:ca:b8:
76:02:16:68:b4:c7:eb:9a:7c:c0:de:73:cd:9c:15:
f6:a1:5e:e5:ae:82:31:f5:8f:ec:cb:95:9a:de:6e:
7d:4b:84:0c:c1:f2:65:95:21:16:36:72:a1:43:61:
a7:f7:41:19:2f:57:36:19:4a:10:07:56:0d:cc:80:
f2:79:60:ba:ac:8d:be:89:92:31:04:32:16:0e:95:
78:c1:62:42:d8:b4:79:a6:28:cf:df:8f:73:9c:11:
a5:c3:51:62:7f:34:0e:c3:11:ab:a5:49:b0:99:c5:
6d:70:e9:0a:d4:46:6f:cd:56:3b:48:1c:29:90:e7:
05:eb:cf:5c:b8:eb:ca:56:15:52:16:98:53:b0:b8:
3a:18:2a:78:fe:f3:61:7a:0e:c5:17:b8:0c:17:f7:
8c:f8:68:27:b1:38:06:28:92:b0:e2:8a:64:01:fd:
a5:9d:88:c8:3f:d0:00:d0:92:de:a5:bd:5d:e8:56:
0e:2d:f3:3c:bf:c0:11:fc:e4:0d:70:e9:4b:4d:d6:
10:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:67:A1:16:DB:DD:5A:CB:74:D9:40:34:BC:2D:87:AC:E5:C4:F0:F7
X509v3 Authority Key Identifier:
keyid:F4:B7:62:95:0E:B7:91:66:68:BB:FA:8D:1B:87:05:60:B1:CA:77:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/LWehFtvdWst02UA0vC2HrOXE8Pc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.17.67.0-84.17.68.255
84.17.70.0/23
84.17.75.0-84.17.76.255
84.17.78.0/23
84.17.84.0/24
84.17.86.0/23
84.17.89.0-84.17.91.255
84.17.93.0/24
185.118.176.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:13:5d:d7:82:62:bc:b5:6a:4b:f6:10:4a:8a:ea:f8:56:ac:
9c:c8:09:87:36:d0:8c:f4:52:53:fc:83:b2:d2:4b:b8:3a:33:
c3:62:a1:9c:f0:dd:7c:40:41:09:66:0b:c3:be:e7:d9:fa:d4:
00:24:64:21:7b:8a:35:d1:75:b2:6d:2b:6f:75:37:ac:5d:77:
0b:5a:0f:3f:8e:c4:3b:2d:36:ae:7d:97:87:fd:d8:6d:8d:7d:
39:4e:5f:96:03:92:e0:13:86:d6:27:d9:1e:a4:c4:9d:a3:db:
35:73:f6:5f:35:7d:b7:6f:4b:28:c3:88:39:af:9e:7d:93:b7:
19:7a:01:04:7c:dc:85:dd:56:9e:27:76:65:0a:dd:8f:9c:33:
de:5e:29:14:7b:a8:61:b6:18:6b:7e:6f:9e:db:09:54:52:be:
d0:7d:85:ee:c9:cf:08:a2:f4:57:78:19:7d:49:83:ef:25:9d:
d7:24:f4:33:45:9f:27:4a:26:eb:42:d6:4b:bb:6b:bb:47:21:
eb:be:3c:29:7e:89:c3:21:e3:e9:a2:6a:9e:00:92:40:fb:39:
e7:c7:91:81:16:c1:dc:a2:b1:e3:94:8e:2c:09:a5:4c:bd:52:
f4:10:43:72:5f:4b:4f:5e:86:7a:c5:28:bb:be:68:85:e6:44:
d7:ae:99:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 8 10:02:28 2024 by rpki-client on console-fra.rpki-client.org