Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/4de889-dc9d-41e5-b3aa-0d7b551f828c/1/LdpFTGBdJibblsLM4OBKv4_T2Tg.roa
File: LdpFTGBdJibblsLM4OBKv4_T2Tg.roa (raw, json)
Hash identifier: YaZFFYJgOeM7z/3GLpwl60I7wn7hrO6Nj3JyUbJ87b4=
Subject key identifier: 2D:DA:45:4C:60:5D:26:26:DB:96:C2:CC:E0:E0:4A:BF:8F:D3:D9:38
Certificate issuer: /CN=5b2dd9fe628b6bc10141de0241766a1b7a63193f
Certificate serial: 01856CB85B9A3F902609943912A2DF361399
Authority key identifier: 5B:2D:D9:FE:62:8B:6B:C1:01:41:DE:02:41:76:6A:1B:7A:63:19:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/4de889-dc9d-41e5-b3aa-0d7b551f828c/1/LdpFTGBdJibblsLM4OBKv4_T2Tg.roa
Signing time: Sun 01 Jan 2023 09:44:59 +0000
ROA not before: Sun 01 Jan 2023 09:44:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 55933
IP address blocks: 193.42.24.0/22 maxlen: 24
193.42.24.0/23 maxlen: 24
193.42.26.0/24 maxlen: 24
2a06:5040:3::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:b8:5b:9a:3f:90:26:09:94:39:12:a2:df:36:13:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b2dd9fe628b6bc10141de0241766a1b7a63193f
Validity
Not Before: Jan 1 09:44:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2dda454c605d2626db96c2cce0e04abf8fd3d938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:62:0f:3a:91:5b:8e:fc:7e:7e:3c:ab:23:9f:
21:86:c9:37:8e:6b:db:d2:8f:f1:84:df:ea:a5:47:
77:f7:96:70:aa:82:e3:d6:59:4c:9a:5f:69:e8:d5:
21:60:e3:d3:d4:60:c5:65:e1:96:45:d8:b8:39:91:
20:e3:77:ff:d1:dc:10:2a:ab:48:c9:48:3e:c8:f6:
da:f6:91:ad:18:9b:97:f8:44:83:f1:01:fe:1d:39:
f1:1d:88:59:0a:b6:3d:04:9a:9d:c1:fd:84:6f:f4:
53:fc:86:8d:63:54:63:d8:14:a9:32:72:0b:f8:c6:
7f:23:a5:cf:da:c8:b6:ff:0f:4e:06:65:ca:4f:19:
df:f0:78:ba:88:6a:63:a5:de:df:20:75:b4:27:e4:
f2:3f:cc:dd:3f:1a:8c:bf:58:c8:14:a7:ea:63:bd:
ae:ba:b4:69:64:7c:b5:c7:8f:91:0a:f8:95:e9:27:
fb:75:49:b4:09:00:b8:ea:2a:16:9c:94:43:4c:51:
a2:00:5f:b2:20:1c:7a:87:b1:38:57:7f:c2:09:ff:
91:b3:ac:5c:e7:ed:59:4b:24:d7:04:9c:73:23:65:
d3:43:84:bc:9a:a3:10:e0:f7:20:37:98:a1:cd:84:
79:f1:1a:df:e8:bd:28:78:79:9a:e8:db:7e:a6:d7:
e9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:DA:45:4C:60:5D:26:26:DB:96:C2:CC:E0:E0:4A:BF:8F:D3:D9:38
X509v3 Authority Key Identifier:
keyid:5B:2D:D9:FE:62:8B:6B:C1:01:41:DE:02:41:76:6A:1B:7A:63:19:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4de889-dc9d-41e5-b3aa-0d7b551f828c/1/LdpFTGBdJibblsLM4OBKv4_T2Tg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4de889-dc9d-41e5-b3aa-0d7b551f828c/1/Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.42.24.0/22
IPv6:
2a06:5040:3::/48
Signature Algorithm: sha256WithRSAEncryption
23:54:a1:a2:60:6a:ed:8c:06:ce:72:4c:25:8b:a1:20:b9:e5:
c3:1d:a8:b2:82:57:a6:75:a8:54:2c:68:4f:b8:52:84:17:a7:
f3:64:63:b0:b7:b9:df:95:a2:63:31:27:87:0f:30:e7:e0:e0:
0a:e6:80:f0:d0:7d:60:f5:cb:44:30:e3:f2:6b:7d:64:83:23:
7e:14:e4:cb:b4:2c:91:7b:06:cd:2f:f0:c0:30:4e:f3:63:90:
15:1c:ab:ae:b3:9b:e5:b0:79:dc:b4:fd:27:d8:34:e9:3a:07:
eb:20:e8:9e:34:23:70:df:08:6b:b2:cf:b8:28:fa:4d:9e:b0:
bb:e4:2e:74:c8:66:d0:99:21:6d:b3:13:98:3a:29:07:82:0f:
c0:62:9e:c5:db:e8:b5:28:5b:58:28:57:0b:c6:8f:c9:3f:31:
ef:f5:8a:4f:84:95:57:d3:8a:8d:b0:2d:1b:57:a9:af:ca:00:
61:b4:a9:7e:7b:e9:25:28:c4:51:31:b2:86:17:bf:89:c8:19:
93:50:29:e6:f4:82:58:ca:32:37:90:71:d1:42:7b:9b:1a:d6:
d5:0a:ed:93:07:1f:66:16:6d:18:74:a1:d5:92:02:c7:55:5a:
ac:1c:d9:08:5a:df:a3:48:f2:c9:e9:e7:5e:c6:57:f6:7d:36:
69:99:93:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:41 2024 by rpki-client on console-fra.rpki-client.org