Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/lVQg1h9RUpMBDGPBz4KgX_iaH58.roa
File: lVQg1h9RUpMBDGPBz4KgX_iaH58.roa (raw, json)
Hash identifier: AKmjZRcqSrxo80mbfYlnzZJGG0NeyuApX9N0Puut84o=
Subject key identifier: 95:54:20:D6:1F:51:52:93:01:0C:63:C1:CF:82:A0:5F:F8:9A:1F:9F
Certificate issuer: /CN=5ceb0ebd878b77d42f2ca9dd08f70c323c5d03db
Certificate serial: 01872CCDFA92C41EC0363DCD01C459A9386E
Authority key identifier: 5C:EB:0E:BD:87:8B:77:D4:2F:2C:A9:DD:08:F7:0C:32:3C:5D:03:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XOsOvYeLd9QvLKndCPcMMjxdA9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/lVQg1h9RUpMBDGPBz4KgX_iaH58.roa
Signing time: Wed 29 Mar 2023 09:58:29 +0000
ROA not before: Wed 29 Mar 2023 09:58:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44700
IP address blocks: 185.6.68.0/22 maxlen: 24
88.151.64.0/21 maxlen: 24
185.59.12.0/22 maxlen: 24
95.129.208.0/21 maxlen: 24
2a02:21e0::/32 maxlen: 48
2a02:17f8::/32 maxlen: 48
Validation: Failed, certificate revoked on Thu 30 Mar 2023 20:31:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:2c:cd:fa:92:c4:1e:c0:36:3d:cd:01:c4:59:a9:38:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ceb0ebd878b77d42f2ca9dd08f70c323c5d03db
Validity
Not Before: Mar 29 09:58:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=955420d61f515293010c63c1cf82a05ff89a1f9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:4e:7d:e1:33:b4:e1:f5:e1:0c:f6:f1:8f:56:
ff:db:1e:3a:0d:a8:f4:a1:09:b3:8b:77:4a:2f:85:
dd:9f:dc:e4:5a:b6:a4:8b:f9:96:a6:3d:ee:cc:22:
bf:6b:f9:46:59:19:b2:23:f4:39:75:db:a1:84:aa:
a2:8c:bb:17:6b:c5:9f:b7:fe:49:ef:a8:a5:0d:66:
ab:87:b1:13:c2:b1:a6:21:4e:de:03:8f:0a:6c:e5:
15:51:68:f3:5e:44:71:b1:ea:b2:06:75:8c:8d:dc:
27:73:26:b3:94:78:7b:c9:e2:b5:2a:36:a5:25:3d:
a0:55:68:dc:5d:62:72:ef:a5:e2:25:10:dd:81:8c:
32:b1:ad:4a:ac:99:a0:d7:d0:44:d1:63:c4:71:81:
18:98:17:6a:bc:99:94:aa:3d:58:97:e2:5d:e3:92:
16:e3:36:65:52:af:80:52:07:af:12:3b:34:22:1d:
48:1e:c5:ed:9a:8f:41:00:41:4e:36:86:55:a6:1a:
de:e7:3d:9d:74:cd:26:7b:4b:2d:e1:5c:97:96:cb:
5c:ca:85:89:d4:b2:7d:26:22:c3:d8:98:d9:21:b3:
fa:ce:4b:05:4a:8f:e8:67:67:5d:ba:a2:9d:f5:17:
af:58:a8:9c:31:29:9e:f6:cc:14:eb:95:08:7b:3d:
78:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:54:20:D6:1F:51:52:93:01:0C:63:C1:CF:82:A0:5F:F8:9A:1F:9F
X509v3 Authority Key Identifier:
keyid:5C:EB:0E:BD:87:8B:77:D4:2F:2C:A9:DD:08:F7:0C:32:3C:5D:03:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XOsOvYeLd9QvLKndCPcMMjxdA9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/lVQg1h9RUpMBDGPBz4KgX_iaH58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/3e72ed-1d65-4982-ad9a-9c37478a593f/1/XOsOvYeLd9QvLKndCPcMMjxdA9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.151.64.0/21
95.129.208.0/21
185.6.68.0/22
185.59.12.0/22
IPv6:
2a02:17f8::/32
2a02:21e0::/32
Signature Algorithm: sha256WithRSAEncryption
7e:df:0a:31:6b:bf:fb:34:33:bd:fd:67:8c:7e:ec:9f:87:57:
43:52:bb:08:4b:43:be:8b:9d:c9:3a:be:ce:59:cd:e0:ae:59:
64:9e:47:c3:86:a6:3d:b6:f7:fa:88:ee:ea:14:ae:2b:8a:83:
3a:d2:7f:98:1c:7c:fc:04:58:db:9f:94:66:04:46:e4:6f:23:
41:ae:97:02:ca:3e:be:84:84:91:97:49:a1:6c:36:f8:84:b7:
cd:4c:40:4f:6e:85:06:fd:a6:98:f0:fb:fe:51:e6:bf:f4:09:
c7:c1:5c:9a:d9:c2:ea:24:dc:aa:c1:ac:d0:37:e5:f5:ff:d6:
b0:61:cf:e4:0a:4b:86:af:b7:e7:47:3f:ab:d6:f5:df:13:78:
95:44:a9:fa:96:ca:ed:20:8f:a5:66:7b:d8:f7:ba:39:0c:59:
c3:c6:bd:c0:b3:41:49:78:9a:70:56:7b:96:f7:2a:11:11:83:
8b:e2:9c:75:8a:6e:86:17:0d:92:08:2f:01:df:e3:89:fc:45:
54:36:f2:0f:4b:1c:01:de:29:b5:4e:26:5d:26:d4:ff:49:e3:
cc:19:2e:fd:c5:8a:da:68:90:36:9a:c3:bd:76:8b:0d:47:e2:
65:2c:d6:ca:21:3e:3c:7c:b0:4d:6a:94:fa:48:c5:55:b5:b0:
77:83:2f:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:24 2024 by rpki-client on console-ams.rpki-client.org