Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/7ccd2c-2c05-453a-b7be-08da420f28c8/1/LBLY3wsk9oBPBlwzVfsKTBC5yqc.roa
File: LBLY3wsk9oBPBlwzVfsKTBC5yqc.roa (raw, json)
Hash identifier: jzs4N3JKVQZzlkk81HyesXUMgrYhNxMOJieQu62KUUQ=
Subject key identifier: 2C:12:D8:DF:0B:24:F6:80:4F:06:5C:33:55:FB:0A:4C:10:B9:CA:A7
Certificate issuer: /CN=560805b7301871169bd09b886569d1f69dc19b57
Certificate serial: 01856CCACEC8BBA15A6CCE3DE0EE54E47C3D
Authority key identifier: 56:08:05:B7:30:18:71:16:9B:D0:9B:88:65:69:D1:F6:9D:C1:9B:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VggFtzAYcRab0JuIZWnR9p3Bm1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/7ccd2c-2c05-453a-b7be-08da420f28c8/1/LBLY3wsk9oBPBlwzVfsKTBC5yqc.roa
Signing time: Sun 01 Jan 2023 10:05:08 +0000
ROA not before: Sun 01 Jan 2023 10:05:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20681
IP address blocks: 185.16.140.0/22 maxlen: 24
193.178.175.0/24 maxlen: 24
193.219.31.0/24 maxlen: 24
46.19.248.0/21 maxlen: 24
2a01:8300::/32 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ca:ce:c8:bb:a1:5a:6c:ce:3d:e0:ee:54:e4:7c:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=560805b7301871169bd09b886569d1f69dc19b57
Validity
Not Before: Jan 1 10:05:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2c12d8df0b24f6804f065c3355fb0a4c10b9caa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b9:3c:95:4f:ae:a8:11:b5:33:d2:d4:95:b3:
6d:16:73:a9:db:7e:13:93:8f:fc:58:55:5d:0a:44:
35:40:97:2b:27:11:aa:6a:d4:a4:ee:bd:f9:bd:ac:
03:88:04:3b:df:64:34:61:06:3e:dc:a5:72:a7:68:
70:a3:b2:5f:b8:e6:d1:48:79:59:db:7d:c8:db:52:
18:7c:f9:9f:b8:39:11:10:b7:6c:fe:6c:3e:0c:b5:
5f:f9:de:9a:b3:89:2d:0d:34:a1:f7:7f:e5:2f:dc:
97:9a:58:a8:57:77:ee:64:1b:07:48:51:6e:91:e0:
f4:0d:4b:7d:e7:1b:89:44:13:60:95:d7:41:d5:d2:
90:66:12:69:6b:11:af:34:dd:96:82:58:eb:4b:9a:
c0:f4:cd:45:20:d2:5e:e8:c8:43:fd:cb:57:3f:6e:
a1:7d:a4:6c:6b:56:b5:18:42:6f:95:ae:de:84:ab:
1a:0f:52:c1:36:c8:21:f4:85:03:21:64:d4:98:fa:
dd:72:29:c7:5f:9f:8e:44:de:70:d2:1c:3c:3b:ac:
57:1c:3a:e0:e0:24:8a:49:c6:23:19:42:78:06:63:
ef:90:df:f2:cb:dc:39:18:48:27:eb:d0:65:88:39:
c2:5d:1e:8e:33:0a:d7:f7:01:88:f3:2f:cf:7b:92:
1e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:12:D8:DF:0B:24:F6:80:4F:06:5C:33:55:FB:0A:4C:10:B9:CA:A7
X509v3 Authority Key Identifier:
keyid:56:08:05:B7:30:18:71:16:9B:D0:9B:88:65:69:D1:F6:9D:C1:9B:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VggFtzAYcRab0JuIZWnR9p3Bm1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7ccd2c-2c05-453a-b7be-08da420f28c8/1/LBLY3wsk9oBPBlwzVfsKTBC5yqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7ccd2c-2c05-453a-b7be-08da420f28c8/1/VggFtzAYcRab0JuIZWnR9p3Bm1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.19.248.0/21
185.16.140.0/22
193.178.175.0/24
193.219.31.0/24
IPv6:
2a01:8300::/32
Signature Algorithm: sha256WithRSAEncryption
9c:58:7c:13:86:6f:19:93:b4:32:74:0a:4e:17:54:93:99:a4:
8d:92:43:90:37:a3:3c:a2:96:b0:9a:5a:08:b2:42:85:19:1a:
11:12:b5:5a:a8:3e:3b:aa:50:9e:48:4d:27:3d:4c:1f:1d:c3:
cd:fd:31:34:a3:a3:5c:02:5f:35:01:f2:43:a5:a6:57:2a:4f:
51:32:d7:f6:73:61:e1:b9:b3:68:4d:78:33:8a:0a:f4:3e:da:
b2:d6:b6:6e:5c:5e:68:d6:79:ad:4b:a6:b9:5b:ed:cd:27:9b:
3f:8e:de:c5:c4:12:4c:da:99:d8:dc:1a:a0:11:51:ba:ff:a0:
90:56:cd:5e:9c:02:1a:35:ba:53:5c:cc:01:8c:65:90:a1:5b:
f9:0d:9e:ae:e1:e3:66:cb:7d:a4:ff:d2:01:c2:85:ad:0f:32:
96:2b:e8:a5:12:40:46:32:16:98:3f:9e:cb:f6:b3:ad:c3:dc:
09:0a:c2:84:3b:5e:f8:65:3f:d7:b8:94:10:52:5e:b1:a3:38:
04:e2:99:cb:56:8d:ed:ef:d1:68:de:d9:0f:55:74:f5:c2:70:
39:f6:ac:16:55:fa:46:ec:e3:f6:80:4e:46:5e:3a:df:e4:2e:
fc:32:56:66:5c:05:a4:b4:5a:d8:83:fc:c7:bf:71:9c:91:5f:
3c:24:a3:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:46 2024 by rpki-client on console-fra.rpki-client.org