Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/Lqli3889F-1ikIkWT34O-Iwx8pY.roa
File: Lqli3889F-1ikIkWT34O-Iwx8pY.roa (raw, json)
Hash identifier: BB/YUIg+l+qIhpb+eORuJdWq9qhNRdl1sY3kODHJ/es=
Subject key identifier: 2E:A9:62:DF:CF:3D:17:ED:62:90:89:16:4F:7E:0E:F8:8C:31:F2:96
Certificate issuer: /CN=58015cc8da1f1bbf343e26ab208df8bb26fd53ae
Certificate serial: 01856DC1BB0C9B8B2FCE6238A69821AEB17F
Authority key identifier: 58:01:5C:C8:DA:1F:1B:BF:34:3E:26:AB:20:8D:F8:BB:26:FD:53:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAFcyNofG780PiarII34uyb9U64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/Lqli3889F-1ikIkWT34O-Iwx8pY.roa
Signing time: Sun 01 Jan 2023 14:34:50 +0000
ROA not before: Sun 01 Jan 2023 14:34:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39040
IP address blocks: 77.95.120.64/26 maxlen: 26
77.95.120.0/26 maxlen: 26
77.95.120.192/26 maxlen: 26
77.95.120.128/27 maxlen: 27
77.95.120.160/27 maxlen: 27
77.95.120.0/24 maxlen: 24
212.103.64.0/24 maxlen: 24
2a02:388::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 17 Jan 2023 05:29:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:c1:bb:0c:9b:8b:2f:ce:62:38:a6:98:21:ae:b1:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58015cc8da1f1bbf343e26ab208df8bb26fd53ae
Validity
Not Before: Jan 1 14:34:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2ea962dfcf3d17ed629089164f7e0ef88c31f296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:d5:21:16:3c:72:00:20:41:f7:57:3c:11:17:
f1:d0:69:52:e8:52:f0:6c:1b:5a:fb:75:38:a8:f9:
81:62:69:b4:43:e9:d5:5c:64:49:80:0a:7b:5e:9b:
00:bd:d5:59:24:be:a1:ee:8c:68:f7:cb:24:62:68:
6d:47:d3:8e:b2:9b:e5:15:f6:ea:72:b6:d7:41:79:
be:99:9d:2a:93:0b:20:e1:40:f8:bb:0e:aa:87:de:
0b:90:f6:a6:13:36:5e:c2:d9:f5:b4:31:b2:64:22:
32:a2:71:55:b2:1b:e1:f5:74:06:61:d5:d6:33:af:
c0:64:ed:29:41:07:0d:a9:aa:4a:d4:7a:70:ce:cf:
17:c3:88:cb:6f:ff:a9:37:df:2a:1b:1b:39:93:59:
5b:67:f9:3d:31:70:b9:e5:85:c7:7d:fa:5a:bb:dd:
ce:38:1a:05:4a:9b:17:d6:a7:ac:26:85:9f:02:08:
0f:50:0b:0b:d2:10:41:5c:28:50:07:ac:92:7f:e2:
41:7a:78:83:7f:83:5e:68:5d:89:0a:2a:8a:f6:12:
2a:39:5f:26:21:88:f3:00:0b:7b:7f:75:50:a0:db:
81:51:96:67:0e:93:7c:d3:96:39:db:35:76:fd:6d:
62:39:91:23:01:3e:fe:29:62:45:21:c3:8a:36:cb:
0d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:A9:62:DF:CF:3D:17:ED:62:90:89:16:4F:7E:0E:F8:8C:31:F2:96
X509v3 Authority Key Identifier:
keyid:58:01:5C:C8:DA:1F:1B:BF:34:3E:26:AB:20:8D:F8:BB:26:FD:53:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAFcyNofG780PiarII34uyb9U64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/Lqli3889F-1ikIkWT34O-Iwx8pY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.95.120.0/24
212.103.64.0/24
IPv6:
2a02:388::/32
Signature Algorithm: sha256WithRSAEncryption
a5:6b:c2:5e:95:14:01:84:5f:89:32:03:9c:c5:64:bd:9a:c7:
b5:94:d4:ae:71:bc:d0:e7:37:11:a0:e0:66:63:23:48:e6:8c:
15:24:95:f8:9a:64:08:ad:3c:b9:79:43:e0:95:8d:c8:cf:d9:
13:bc:2a:94:6c:57:d4:79:b9:7c:87:34:aa:69:88:a2:47:42:
8f:65:e6:25:cd:1d:78:15:0c:1c:1d:5c:53:76:90:a7:08:67:
59:cc:8c:02:6c:42:d8:70:ad:63:1e:1a:0c:a6:f1:96:56:61:
8b:db:48:d6:46:0b:0a:f2:c7:38:47:fc:c2:8e:88:cb:29:c5:
5b:44:54:60:72:2e:e2:f2:58:18:cd:1f:fb:7d:b5:2f:c7:08:
e4:89:c2:9f:11:de:85:29:ab:28:1a:61:37:41:06:fd:3a:89:
ec:b9:82:e6:6f:e0:3e:c9:7f:3b:a9:49:ec:d3:55:f7:ce:22:
0b:53:f3:c0:36:37:75:9d:15:8e:ae:ef:4c:dd:04:33:e7:57:
46:80:55:f4:bf:c2:dc:07:70:80:5a:55:09:5d:61:56:49:d8:
a4:c9:c8:f8:54:9f:b4:3b:aa:d4:1c:8a:5b:f7:41:34:1e:76:
b4:ea:88:a3:a7:6e:d2:6b:e2:78:ce:c8:5a:df:10:fd:49:47:
54:a4:63:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:37 2024 by rpki-client on console-fra.rpki-client.org