Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/LsZ_TKAtFGPgLbLPB9IVdn7TSKg.roa
File: LsZ_TKAtFGPgLbLPB9IVdn7TSKg.roa (raw, json)
Hash identifier: LGJI9hsIjlMcA9NyVcZAFt/sC2zB6vexoQ3wmhwQ3Ek=
Subject key identifier: 2E:C6:7F:4C:A0:2D:14:63:E0:2D:B2:CF:07:D2:15:76:7E:D3:48:A8
Certificate issuer: /CN=7cfc92b0a75b89ad2e3c57f7cba0e478684219ce
Certificate serial: 01856FF054C387207CB37EB8C0B410999CBD
Authority key identifier: 7C:FC:92:B0:A7:5B:89:AD:2E:3C:57:F7:CB:A0:E4:78:68:42:19:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fPySsKdbia0uPFf3y6DkeGhCGc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/LsZ_TKAtFGPgLbLPB9IVdn7TSKg.roa
Signing time: Mon 02 Jan 2023 00:44:59 +0000
ROA not before: Mon 02 Jan 2023 00:44:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201966
IP address blocks: 185.92.219.0/24 maxlen: 24
185.92.218.0/24 maxlen: 24
185.92.217.0/24 maxlen: 24
185.92.216.0/24 maxlen: 24
94.229.84.0/23 maxlen: 23
94.229.83.0/24 maxlen: 24
2a05:2c7:c000::/34 maxlen: 34
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f0:54:c3:87:20:7c:b3:7e:b8:c0:b4:10:99:9c:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cfc92b0a75b89ad2e3c57f7cba0e478684219ce
Validity
Not Before: Jan 2 00:44:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2ec67f4ca02d1463e02db2cf07d215767ed348a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:cd:1b:f5:db:f4:d0:f9:d3:99:03:00:c5:69:
79:cf:85:b4:49:61:17:d4:27:74:aa:13:92:30:20:
70:95:a6:3d:80:06:93:19:64:5f:92:48:20:f8:f4:
ab:12:07:76:19:e5:27:7c:58:67:2f:88:22:56:84:
34:9e:e7:a7:d9:28:50:c2:02:09:e2:33:a3:8a:ea:
e4:c6:c0:f5:c2:5c:97:35:85:af:d6:06:7f:14:50:
3e:8d:13:06:6b:e8:cd:88:f3:9a:2e:e9:11:ea:eb:
8d:a4:55:31:d3:84:e2:53:63:ac:53:d5:53:e1:ac:
e1:6f:45:cc:40:e0:bb:9a:22:3b:69:2e:c2:eb:64:
17:7f:2d:91:42:63:3c:09:75:b1:61:c8:66:d2:ae:
42:70:12:42:79:10:24:9b:ad:67:4a:9f:76:b7:12:
b2:dc:c3:15:1d:f3:1c:ab:8d:ed:77:87:72:7e:72:
a3:34:e5:58:67:19:53:29:e3:55:71:68:9e:b9:2f:
ea:33:36:fa:56:7e:d6:90:19:7a:a3:98:35:be:9a:
b5:d2:15:2b:48:ea:11:32:97:9d:18:da:6e:f5:f7:
1a:ba:a3:04:09:1a:bf:57:71:3e:8b:72:9d:3e:1c:
d3:a3:41:84:f0:44:f0:d1:46:2b:a5:72:d8:d6:78:
84:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:C6:7F:4C:A0:2D:14:63:E0:2D:B2:CF:07:D2:15:76:7E:D3:48:A8
X509v3 Authority Key Identifier:
keyid:7C:FC:92:B0:A7:5B:89:AD:2E:3C:57:F7:CB:A0:E4:78:68:42:19:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fPySsKdbia0uPFf3y6DkeGhCGc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/LsZ_TKAtFGPgLbLPB9IVdn7TSKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/fPySsKdbia0uPFf3y6DkeGhCGc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.229.83.0-94.229.85.255
185.92.216.0/22
IPv6:
2a05:2c7:c000::/34
Signature Algorithm: sha256WithRSAEncryption
50:f9:4b:99:81:8c:66:79:59:fd:0a:34:c7:aa:9d:c1:86:44:
8c:b7:08:18:f9:cc:90:68:e2:56:e3:07:4f:0e:de:76:59:f3:
69:a6:35:04:ad:d0:05:53:29:6b:72:6a:1d:ba:c8:f7:d1:15:
e2:fb:53:78:42:2e:f5:26:d6:26:f7:a8:d3:cd:f6:03:6d:91:
7f:6b:42:e6:f4:a4:ee:c5:32:66:79:25:de:af:ac:78:70:aa:
cc:0d:55:1f:8f:e0:f7:47:0e:ee:e7:39:a8:a1:11:f7:bc:f0:
c8:f2:66:a9:47:65:fb:ac:16:95:e5:20:95:3e:13:05:98:19:
8b:46:fe:f3:2b:45:ce:2f:b6:54:b4:33:21:5e:38:38:b4:33:
01:77:d0:59:f3:fb:ea:0f:63:17:f3:85:8e:49:fd:19:07:28:
fd:45:dc:1f:40:5f:6e:d1:9d:a7:22:af:00:c5:6f:9f:e5:2b:
6f:05:e2:bb:4c:51:ee:5c:a1:46:16:53:7f:86:9e:02:46:14:
9f:24:cc:3d:a1:f4:9e:bb:2d:58:39:97:6d:78:78:9d:a0:c8:
d1:c5:2c:26:8b:c8:9f:b9:f2:bf:56:0d:23:86:c1:a6:db:b6:
39:e1:f4:c9:53:b5:4d:b3:21:21:18:47:e1:95:c2:72:96:e7:
87:ee:c9:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:14 2024 by rpki-client on console-fra.rpki-client.org