Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/LobbIW00i6SZflCE3HTr88o65uE.roa
File: LobbIW00i6SZflCE3HTr88o65uE.roa (raw, json)
Hash identifier: +o+YfuIYkhUALCuv1grIsAdTUD1peJUn+k2bKYmJQ3o=
Subject key identifier: 2E:86:DB:21:6D:34:8B:A4:99:7E:50:84:DC:74:EB:F3:CA:3A:E6:E1
Certificate issuer: /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial: 018F3FDDE1469CD10668080281ECBF8A3DE0
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/LobbIW00i6SZflCE3HTr88o65uE.roa
Signing time: Fri 03 May 2024 19:10:56 +0000
ROA not before: Fri 03 May 2024 19:10:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58212
IP address blocks: 85.117.243.0/24 maxlen: 24
185.236.11.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 16 May 2024 16:04:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:3f:dd:e1:46:9c:d1:06:68:08:02:81:ec:bf:8a:3d:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Validity
Not Before: May 3 19:10:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2e86db216d348ba4997e5084dc74ebf3ca3ae6e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:72:63:96:79:3f:12:86:66:b7:9f:c3:13:c5:
ec:86:a8:7d:36:a4:cd:be:e3:9d:d1:29:bd:8a:1b:
5f:a2:c7:57:bf:82:b4:b1:51:60:5e:d4:b6:24:36:
6c:bf:0b:17:21:ba:ec:32:18:9e:23:ab:9d:61:9d:
39:9a:88:d0:af:3d:ce:4b:a9:75:f2:da:d4:5c:74:
38:ae:5e:15:bf:fe:5a:c9:d0:39:d6:f1:76:c6:c3:
53:48:3d:b6:dc:f7:95:60:c8:93:09:fa:bc:e3:77:
8f:5b:05:47:46:fc:71:94:2a:77:ee:84:1d:89:6a:
f0:7b:a5:6a:eb:74:66:c9:f6:0a:a9:16:b6:76:27:
90:1b:17:26:37:7b:19:a0:77:4e:8e:c6:b0:58:6b:
0c:47:95:3c:56:55:d1:f5:ee:97:7f:86:3f:98:72:
53:bf:1e:32:a6:8e:a7:d7:01:23:32:ac:54:55:f8:
11:65:60:68:16:53:ea:d6:34:49:48:ca:10:a1:fd:
c6:28:09:17:87:aa:b8:3d:d8:a6:a8:5b:0f:fa:cb:
13:06:29:b4:a2:e9:9e:fa:8c:32:9a:44:1b:44:8e:
3c:73:3b:9d:47:92:e5:69:68:94:d6:39:5f:4d:0e:
03:43:3a:30:21:50:64:38:68:64:6b:77:fa:48:e3:
99:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:86:DB:21:6D:34:8B:A4:99:7E:50:84:DC:74:EB:F3:CA:3A:E6:E1
X509v3 Authority Key Identifier:
keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/LobbIW00i6SZflCE3HTr88o65uE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.117.243.0/24
185.236.11.0/24
Signature Algorithm: sha256WithRSAEncryption
58:25:ae:51:98:e8:43:22:bf:f1:c8:b5:a9:7e:25:54:27:13:
94:d2:4c:0e:d8:44:97:32:ab:55:d6:f7:c7:75:42:f0:50:bc:
ed:68:1f:cf:b0:89:03:23:06:b6:80:50:11:79:62:49:f5:76:
08:b0:57:bf:2d:f7:d3:32:e0:72:63:d6:d0:1e:6a:72:e7:12:
ed:e0:0f:4c:ca:45:ee:65:ee:f3:dc:74:ef:4a:6c:1b:66:a8:
2e:65:0e:8c:fb:0f:ff:50:9c:3d:48:41:88:2f:3e:b6:2d:46:
c5:16:f7:7d:55:07:b0:af:f3:a5:53:b8:7e:ae:8e:0c:3f:ed:
7f:f2:6f:eb:86:b9:2d:22:06:71:bf:34:89:c3:d1:e5:f6:3b:
82:02:a4:ec:92:d5:54:fc:07:c2:a5:7b:30:19:81:98:71:26:
26:7f:c2:82:3a:68:94:bb:8a:01:c5:d0:0b:90:b5:47:f9:a2:
05:03:03:b0:95:42:9b:cf:3b:17:91:56:9c:02:45:d2:3a:1b:
2c:07:68:53:4a:ea:e2:07:16:ff:78:4b:b2:d8:5a:df:61:7c:
64:26:fc:15:8c:74:69:3b:6a:a9:c5:a3:b6:58:97:04:0a:cb:
c6:7b:9b:ac:b7:cf:f5:cc:8c:61:99:4f:b1:4d:48:3b:ec:d0:
5b:72:a2:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 19:18:54 2024 by rpki-client on console-ams.rpki-client.org