Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/LOyuMcHCEQwqUd-DrRTLQCuhFr0.roa
File: LOyuMcHCEQwqUd-DrRTLQCuhFr0.roa (raw, json)
Hash identifier: neAiRMn9efXnw8F3R8JNWcDVHvknwuDHCjkE+dPCVMQ=
Subject key identifier: 2C:EC:AE:31:C1:C2:11:0C:2A:51:DF:83:AD:14:CB:40:2B:A1:16:BD
Certificate issuer: /CN=702f4e00943700c0897de7adbcfced5d10bf2e01
Certificate serial: 01856BDC6BF8922AE372FE73A1CBED897031
Authority key identifier: 70:2F:4E:00:94:37:00:C0:89:7D:E7:AD:BC:FC:ED:5D:10:BF:2E:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cC9OAJQ3AMCJfeetvPztXRC_LgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/LOyuMcHCEQwqUd-DrRTLQCuhFr0.roa
Signing time: Sun 01 Jan 2023 05:44:45 +0000
ROA not before: Sun 01 Jan 2023 05:44:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13045
IP address blocks: 185.93.136.0/22 maxlen: 22
89.182.0.0/15 maxlen: 16
212.59.32.0/19 maxlen: 19
193.254.18.0/24 maxlen: 24
81.14.128.0/17 maxlen: 17
2a02:560::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:dc:6b:f8:92:2a:e3:72:fe:73:a1:cb:ed:89:70:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=702f4e00943700c0897de7adbcfced5d10bf2e01
Validity
Not Before: Jan 1 05:44:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2cecae31c1c2110c2a51df83ad14cb402ba116bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:36:0c:0a:48:90:d1:72:26:77:bf:e0:ac:8c:
67:ba:d2:4b:76:db:41:b5:be:ee:aa:35:17:82:87:
4f:c0:4b:3d:96:f1:fd:db:1b:81:81:a9:b5:81:83:
c2:5b:c7:4b:b3:11:8f:c1:33:41:d7:e3:06:20:63:
36:ec:29:f0:bb:2a:aa:0d:df:5e:89:34:a5:11:ab:
f3:5f:8e:21:b9:85:f5:e8:ea:98:4e:c8:4e:2f:a0:
ed:a8:46:f2:79:ed:d2:66:0d:1e:b6:20:17:21:99:
7e:8e:54:93:c1:3f:62:45:85:52:ae:24:a0:55:a5:
2b:d8:67:ee:cb:fd:e9:82:3a:6a:3b:f4:41:96:ff:
3c:67:c6:07:97:f2:32:75:f5:c0:a7:8a:46:b8:0f:
98:82:95:26:12:c7:06:82:21:b8:32:5f:d8:a1:69:
af:af:63:a7:58:06:f5:a3:4c:3f:35:b6:82:2d:b0:
22:ec:62:2e:e9:fc:c8:10:52:1f:9e:dc:a5:1a:9a:
b1:4c:a2:76:33:5c:3b:06:ef:97:1f:f5:6d:63:04:
3b:5c:e8:8e:cb:13:8a:fa:f6:0f:d3:02:78:e6:fd:
1b:0c:e3:bd:4d:9b:a5:30:1f:1f:a0:ec:16:aa:40:
b4:04:78:1d:59:13:b0:61:49:d9:b6:0a:62:9c:b9:
f1:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:EC:AE:31:C1:C2:11:0C:2A:51:DF:83:AD:14:CB:40:2B:A1:16:BD
X509v3 Authority Key Identifier:
keyid:70:2F:4E:00:94:37:00:C0:89:7D:E7:AD:BC:FC:ED:5D:10:BF:2E:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cC9OAJQ3AMCJfeetvPztXRC_LgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/LOyuMcHCEQwqUd-DrRTLQCuhFr0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.14.128.0/17
89.182.0.0/15
185.93.136.0/22
193.254.18.0/24
212.59.32.0/19
IPv6:
2a02:560::/32
Signature Algorithm: sha256WithRSAEncryption
1b:13:01:34:c9:3a:c0:25:7a:0a:7c:b0:43:bb:45:c2:1b:be:
e7:10:61:25:09:e0:f6:01:d2:1b:38:cf:ac:6e:ce:d7:cd:01:
0e:41:9d:4b:a0:76:a6:5b:d3:57:be:00:2a:1e:94:7c:e3:66:
24:3a:f9:99:61:16:f6:4b:31:7c:37:d5:17:12:4d:6c:8f:a3:
31:24:03:b8:60:b2:a4:5d:36:83:38:77:cf:0a:2b:43:dd:32:
c0:97:de:01:48:68:2e:cc:40:5f:fb:c4:2e:18:9f:1b:c8:7e:
22:d9:65:4f:f2:3b:43:d2:69:5f:c3:60:d6:b2:83:6c:4d:a5:
53:08:a5:0c:b5:55:2f:52:67:54:1f:4d:c6:da:b1:f2:3c:46:
92:1e:28:8b:d9:28:04:a2:d5:b0:3f:4e:0b:d3:88:73:07:ca:
08:6e:3c:d5:d1:1b:53:ea:57:29:92:83:36:62:c8:73:cd:e6:
45:93:43:31:c6:b5:fb:0e:8c:39:02:08:10:b3:3d:cf:f5:fd:
8b:a2:c4:c5:20:0c:b9:e3:d3:a1:8b:7b:69:57:52:db:fa:af:
8b:5c:76:3b:cf:a0:e4:88:75:d4:8f:da:7e:07:92:c2:6e:2d:
fe:7b:93:ae:12:82:09:d9:30:95:0e:65:ef:cc:57:d6:b6:9a:
43:1f:ce:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:22 2024 by rpki-client on console-ams.rpki-client.org