Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/Lt0l_VYhOAHFtviIEDLpQMC_fvQ.roa
File: Lt0l_VYhOAHFtviIEDLpQMC_fvQ.roa (raw, json)
Hash identifier: YP0sXhQorHqeG03TLXAyyMRK+I7N/1w12bUua53ZFnE=
Subject key identifier: 2E:DD:25:FD:56:21:38:01:C5:B6:F8:88:10:32:E9:40:C0:BF:7E:F4
Certificate issuer: /CN=a4b18f96aaa03567f22fc02c42a6935708655aa9
Certificate serial: 018738F1A9C5863EAB94E1A53EE1006543FD
Authority key identifier: A4:B1:8F:96:AA:A0:35:67:F2:2F:C0:2C:42:A6:93:57:08:65:5A:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLGPlqqgNWfyL8AsQqaTVwhlWqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/Lt0l_VYhOAHFtviIEDLpQMC_fvQ.roa
Signing time: Fri 31 Mar 2023 18:32:54 +0000
ROA not before: Fri 31 Mar 2023 18:32:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21245
IP address blocks: 185.235.10.0/24 maxlen: 24
185.230.17.0/24 maxlen: 24
185.230.16.0/24 maxlen: 24
185.230.19.0/24 maxlen: 24
185.21.183.0/24 maxlen: 24
185.21.182.0/24 maxlen: 24
185.21.181.0/24 maxlen: 24
185.21.180.0/24 maxlen: 24
31.3.3.0/24 maxlen: 24
31.3.2.0/24 maxlen: 24
31.3.1.0/24 maxlen: 24
31.3.0.0/24 maxlen: 24
31.3.4.0/24 maxlen: 24
31.3.6.0/24 maxlen: 24
31.3.5.0/24 maxlen: 24
31.3.7.0/24 maxlen: 24
185.241.63.0/24 maxlen: 24
185.87.172.0/24 maxlen: 24
185.87.175.0/24 maxlen: 24
185.87.174.0/24 maxlen: 24
185.87.173.0/24 maxlen: 24
185.22.160.0/24 maxlen: 24
185.22.163.0/24 maxlen: 24
185.22.162.0/24 maxlen: 24
185.22.161.0/24 maxlen: 24
2a03:3f00::/48 maxlen: 48
2a03:3f00:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 14 Dec 2023 14:31:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:38:f1:a9:c5:86:3e:ab:94:e1:a5:3e:e1:00:65:43:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4b18f96aaa03567f22fc02c42a6935708655aa9
Validity
Not Before: Mar 31 18:32:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2edd25fd56213801c5b6f8881032e940c0bf7ef4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fd:ce:6d:cf:32:bb:b0:bc:b2:31:15:41:cd:
e7:9e:58:38:68:63:55:93:74:9e:3f:09:da:28:9c:
82:04:1b:70:cd:c4:04:ad:c5:56:60:89:3e:33:e1:
dd:d4:dc:b9:cc:9b:93:4e:41:24:8e:84:2f:6a:13:
29:1d:6c:7d:8b:11:5d:80:12:93:e4:b8:fc:39:a6:
93:3f:f4:74:29:c9:06:23:ad:e4:8a:13:8e:83:99:
70:19:99:fd:95:4e:3c:ae:40:f6:a1:e9:a7:bb:bf:
9c:5b:77:3a:41:13:f6:de:65:f2:ed:2a:a0:7e:b4:
d9:e5:d3:1a:d0:45:b5:89:24:8f:17:81:93:eb:89:
e7:0a:51:7a:de:95:8a:ef:43:21:a4:e6:7e:db:09:
5f:68:a8:20:79:a9:e3:37:57:98:06:b0:2b:bc:0b:
8b:e9:ef:4a:ab:c2:92:08:80:96:c5:b6:c4:a0:96:
a6:74:ef:d8:60:88:cf:84:9f:6e:a4:57:70:cf:1f:
df:e4:48:41:ae:32:79:ba:25:0c:a6:29:6c:6a:30:
49:1a:5d:2a:f5:58:a6:5b:02:a6:d2:17:8a:d0:b6:
8d:cc:ee:6d:ea:98:45:ee:80:d3:60:78:f7:b5:68:
e7:28:ef:22:c4:f0:27:a2:1d:3f:3a:13:42:62:69:
72:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:DD:25:FD:56:21:38:01:C5:B6:F8:88:10:32:E9:40:C0:BF:7E:F4
X509v3 Authority Key Identifier:
keyid:A4:B1:8F:96:AA:A0:35:67:F2:2F:C0:2C:42:A6:93:57:08:65:5A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLGPlqqgNWfyL8AsQqaTVwhlWqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/Lt0l_VYhOAHFtviIEDLpQMC_fvQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.3.0.0/21
185.21.180.0/22
185.22.160.0/22
185.87.172.0/22
185.230.16.0/23
185.230.19.0/24
185.235.10.0/24
185.241.63.0/24
IPv6:
2a03:3f00::/47
Signature Algorithm: sha256WithRSAEncryption
24:e8:6c:b3:fd:d0:7b:7d:20:83:7a:30:7b:d5:60:19:2c:82:
9e:e8:80:2a:15:29:df:59:62:1e:f8:96:e7:e5:25:44:8a:52:
a6:46:b7:3c:ef:1c:cb:70:5f:10:00:62:d5:47:40:c8:37:b3:
f4:94:38:a9:a5:db:58:6f:4b:05:2f:9f:c9:23:5f:b9:d0:2d:
aa:ec:53:50:b0:48:73:d8:1f:a1:c8:f6:3d:7a:8e:00:cd:fe:
08:4d:b6:94:29:fc:8c:e6:6b:16:9e:c2:91:e8:b3:b5:6b:12:
1a:7f:51:a1:0f:ab:b8:4b:1e:25:5f:7b:a1:60:5e:3a:0d:4c:
2a:db:95:13:7b:44:fc:4e:11:45:42:bf:5e:8a:b3:65:d0:35:
46:6a:ea:25:b1:2f:f4:68:79:0f:38:f0:31:9f:41:05:04:89:
68:9a:8a:cf:45:36:31:bf:93:52:4e:28:e0:96:77:b4:9c:91:
6a:b5:e9:00:12:b7:ef:99:8c:0e:29:3d:23:38:d4:51:ce:fc:
bd:84:6e:05:4c:7c:21:24:74:d6:ba:25:59:19:99:da:f0:0d:
d4:a2:7f:64:23:85:c6:c8:ea:a9:d4:90:bb:d6:5f:ae:91:5a:
65:e9:23:d7:e2:f0:7e:df:c3:49:94:9f:4f:98:cc:01:a2:e0:
49:ad:4b:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:40 2024 by rpki-client on console-fra.rpki-client.org