Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/Lfj9fQs6irtIjaEHybJFX9shM3M.roa
File: Lfj9fQs6irtIjaEHybJFX9shM3M.roa (raw, json)
Hash identifier: 35FKSIoFrDuh1JnqqNZJTZjo7JW+Qy9VC1DKgjY01d8=
Subject key identifier: 2D:F8:FD:7D:0B:3A:8A:BB:48:8D:A1:07:C9:B2:45:5F:DB:21:33:73
Certificate issuer: /CN=ff8208b129c53e87c3f0d0ed1bca85730140f390
Certificate serial: 018C00790A86A2822020824A877ADBC365EA
Authority key identifier: FF:82:08:B1:29:C5:3E:87:C3:F0:D0:ED:1B:CA:85:73:01:40:F3:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IIsSnFPofD8NDtG8qFcwFA85A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/Lfj9fQs6irtIjaEHybJFX9shM3M.roa
Signing time: Fri 24 Nov 2023 08:36:21 +0000
ROA not before: Fri 24 Nov 2023 08:36:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211309
IP address blocks: 46.227.152.0/21 maxlen: 21
185.190.36.0/24 maxlen: 24
185.176.245.0/24 maxlen: 24
185.176.244.0/23 maxlen: 23
2a0a:2780::/31 maxlen: 31
2a0a:2781::/32 maxlen: 32
2a0a:2780::/32 maxlen: 32
2a10:d640::/29 maxlen: 29
Validation: Failed, certificate revoked on Fri 24 Nov 2023 14:36:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:00:79:0a:86:a2:82:20:20:82:4a:87:7a:db:c3:65:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff8208b129c53e87c3f0d0ed1bca85730140f390
Validity
Not Before: Nov 24 08:36:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2df8fd7d0b3a8abb488da107c9b2455fdb213373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:93:be:cc:6f:9c:d7:7e:db:8b:15:75:15:4e:
ea:ab:7e:d1:4e:76:fd:78:4c:6c:97:54:99:5f:36:
43:01:62:5c:b1:f3:e5:05:e9:d7:6a:cd:7b:f5:e2:
35:07:87:23:7b:fa:ca:28:44:41:10:02:18:02:81:
55:21:6a:9f:80:c6:77:88:80:82:43:36:3d:a5:ef:
d2:ac:bf:ab:a0:3a:38:14:88:d9:92:f4:df:2e:f1:
5f:f3:99:cc:5b:33:26:a1:c5:17:ed:5a:64:eb:cd:
14:ca:7e:a0:f6:64:45:47:ae:81:90:e4:d7:e0:7b:
01:af:0a:14:1a:57:b0:a9:fc:6d:21:99:1c:34:b2:
e4:a7:6d:2e:90:3a:3d:8e:07:9b:80:2c:55:38:e9:
42:c1:c3:6c:71:a4:ae:f3:bf:cd:b7:d2:a0:43:29:
79:3c:fa:3e:36:09:97:97:b2:84:35:07:18:c5:51:
a2:95:93:2b:36:a5:d3:8a:e0:eb:4d:47:78:81:c1:
67:23:fd:fa:ce:39:cd:6f:e2:72:a5:1c:1d:15:9a:
9b:87:3a:89:3f:54:6a:b7:3f:28:7b:56:3a:ee:ec:
00:a9:54:9e:af:6b:06:9a:10:0d:10:33:45:5c:f8:
bd:65:18:a5:a4:b3:37:64:94:21:93:17:98:ac:44:
e7:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:F8:FD:7D:0B:3A:8A:BB:48:8D:A1:07:C9:B2:45:5F:DB:21:33:73
X509v3 Authority Key Identifier:
keyid:FF:82:08:B1:29:C5:3E:87:C3:F0:D0:ED:1B:CA:85:73:01:40:F3:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IIsSnFPofD8NDtG8qFcwFA85A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/Lfj9fQs6irtIjaEHybJFX9shM3M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.227.152.0/21
185.176.244.0/23
185.190.36.0/24
IPv6:
2a0a:2780::/31
2a10:d640::/29
Signature Algorithm: sha256WithRSAEncryption
17:a9:1e:25:6a:d8:db:95:80:d9:10:8a:b4:9f:fc:ba:14:98:
d5:cc:f5:3a:9a:f9:c2:09:6c:bb:25:db:69:83:9f:ae:aa:4a:
d3:f5:28:37:66:73:58:54:a7:66:2a:ec:63:95:93:ae:d5:fe:
47:80:ab:d4:62:85:05:c6:0e:20:2e:8b:9f:6f:ee:e0:1a:da:
4f:40:4d:b4:1a:1f:8f:ca:eb:28:de:c1:b6:bb:3c:5b:f3:b5:
92:0f:17:ff:59:33:5d:81:8d:1d:91:00:ae:8f:19:d8:98:1a:
0a:41:47:f1:4f:fb:0a:f2:07:a8:a5:65:3c:28:fe:28:1b:4a:
ab:a3:29:a7:02:76:b9:34:e8:6c:2c:65:84:da:70:86:89:26:
49:31:68:d6:17:cc:c7:a8:b9:ad:74:25:16:54:f8:07:14:ab:
73:cd:85:2f:a1:8f:56:87:f9:0d:6a:78:b7:85:89:f0:ca:26:
04:a5:89:a7:a4:d2:6b:f4:5c:89:86:df:4d:43:d2:bd:d6:f4:
ba:c0:0b:68:bb:07:8b:e9:08:af:58:cf:68:c7:bb:ce:10:dc:
55:21:b4:f0:a3:79:f1:8c:03:09:9d:92:65:97:67:f2:5f:5a:
6f:dc:26:94:1d:6c:80:62:88:eb:10:f0:5d:80:96:f0:32:d3:
d6:e7:4f:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:28 2024 by rpki-client on console-ams.rpki-client.org