Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/95e949-bf34-4122-8fa8-a1ae5892d421/1/letr1_woQMCdBXzTmjKpTDrM7sE.roa
File: letr1_woQMCdBXzTmjKpTDrM7sE.roa (raw, json)
Hash identifier: VS0x57GXYcbtOmV+cE7vub/8LxoHT3P0FNMa5qX7I+Y=
Subject key identifier: 95:EB:6B:D7:FC:28:40:C0:9D:05:7C:D3:9A:32:A9:4C:3A:CC:EE:C1
Certificate issuer: /CN=937f12abaf613973feb3073d8ce637f1b00cbfa9
Certificate serial: 018DC66FED3290CE2CD93BC569E060B34F1F
Authority key identifier: 93:7F:12:AB:AF:61:39:73:FE:B3:07:3D:8C:E6:37:F1:B0:0C:BF:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k38Sq69hOXP-swc9jOY38bAMv6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/95e949-bf34-4122-8fa8-a1ae5892d421/1/letr1_woQMCdBXzTmjKpTDrM7sE.roa
Signing time: Tue 20 Feb 2024 12:14:00 +0000
ROA not before: Tue 20 Feb 2024 12:14:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19905
IP address blocks: 79.140.139.0/24 maxlen: 24
82.195.139.0/24 maxlen: 24
82.195.141.0/24 maxlen: 24
84.51.229.0/24 maxlen: 24
212.78.237.0/24 maxlen: 24
212.78.239.0/24 maxlen: 24
212.78.241.0/24 maxlen: 24
212.84.40.0/24 maxlen: 24
212.84.43.0/24 maxlen: 24
212.84.44.0/24 maxlen: 24
212.84.45.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 Feb 2024 17:49:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c6:6f:ed:32:90:ce:2c:d9:3b:c5:69:e0:60:b3:4f:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=937f12abaf613973feb3073d8ce637f1b00cbfa9
Validity
Not Before: Feb 20 12:14:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=95eb6bd7fc2840c09d057cd39a32a94c3acceec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3c:ca:8b:00:39:0d:a6:ab:c7:8b:90:62:b0:
1b:71:df:13:46:a5:c8:bb:eb:66:1a:64:1a:11:e9:
2e:20:ac:4c:f2:16:a4:4e:30:84:69:64:77:1c:ca:
01:22:1e:13:65:8b:42:30:c0:ad:6e:99:70:6a:ea:
70:7a:e0:2d:a1:51:fd:2a:20:8a:ac:ed:e9:55:3a:
ba:9b:a8:0c:bb:5c:46:dc:a9:a8:11:b9:4f:6a:36:
ac:86:bc:12:f1:3b:97:2a:68:f8:9a:d0:3f:c9:e3:
c6:99:f2:dd:1e:0b:c8:3a:77:43:fe:8c:b2:8d:c0:
38:10:65:67:85:91:44:96:6d:b8:cb:6c:36:da:2b:
70:07:bf:53:b5:d1:95:e2:09:34:71:d6:6d:3a:b8:
b8:ab:ef:8b:b5:a4:fe:58:a4:ae:89:bd:8a:45:05:
76:38:dd:89:15:fe:78:23:07:67:a6:64:3c:7d:02:
b7:3f:f2:ab:b0:2f:ad:33:fd:71:3a:bf:15:03:c1:
e3:a6:4e:4a:c7:48:56:18:c1:6e:df:2c:86:1d:44:
00:7a:3d:9f:8a:b0:7d:8a:72:31:37:fc:6c:82:ef:
b6:21:ac:5a:83:87:a0:57:49:a5:37:cd:77:20:fe:
3a:de:bb:e3:5b:78:21:e9:c0:49:b8:d3:ec:8c:a7:
65:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:EB:6B:D7:FC:28:40:C0:9D:05:7C:D3:9A:32:A9:4C:3A:CC:EE:C1
X509v3 Authority Key Identifier:
keyid:93:7F:12:AB:AF:61:39:73:FE:B3:07:3D:8C:E6:37:F1:B0:0C:BF:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k38Sq69hOXP-swc9jOY38bAMv6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/95e949-bf34-4122-8fa8-a1ae5892d421/1/letr1_woQMCdBXzTmjKpTDrM7sE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/95e949-bf34-4122-8fa8-a1ae5892d421/1/k38Sq69hOXP-swc9jOY38bAMv6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.140.139.0/24
82.195.139.0/24
82.195.141.0/24
84.51.229.0/24
212.78.237.0/24
212.78.239.0/24
212.78.241.0/24
212.84.40.0/24
212.84.43.0-212.84.45.255
Signature Algorithm: sha256WithRSAEncryption
10:20:de:8b:4f:ac:f1:c6:43:3a:23:2a:a8:39:56:33:85:c8:
cb:12:90:ed:b0:27:c9:00:79:81:72:45:d7:1f:b0:94:08:db:
2e:cf:c6:74:ed:db:c6:b5:37:07:62:9c:a5:b7:f8:1e:a1:d0:
96:9c:1a:d4:ac:52:87:36:40:0b:b7:5b:5c:e9:69:2b:33:d7:
56:73:90:22:3a:03:73:1d:76:b7:6b:dc:97:07:b2:a7:8d:ef:
88:bb:b8:2e:d5:00:00:e3:4e:b8:60:5e:98:d8:51:5b:f3:17:
b1:d0:4f:53:0b:af:93:9a:cd:f5:02:f4:fe:2a:cb:90:a0:8e:
d6:d7:5e:71:30:73:d2:05:7a:1f:10:66:38:f9:09:6b:a6:1b:
57:21:a5:6d:d0:4c:b0:f5:0c:9d:2e:40:44:51:68:4a:b3:45:
ac:86:e9:b4:3f:11:48:43:51:c8:ca:0b:92:e7:d0:b2:85:4e:
9e:9b:00:78:5c:64:62:de:8c:fd:6b:65:6a:6d:7e:33:da:44:
f7:71:0f:1b:84:06:55:2d:d9:8f:90:f1:10:e2:85:0b:4d:73:
54:48:ed:a0:98:5d:83:7b:8e:30:08:d3:c7:1b:7f:43:a0:1e:
88:a9:78:f4:8f:50:0f:54:2b:d7:ee:fa:6c:10:ba:e2:53:51:
4c:fc:05:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:39 2024 by rpki-client on console-ams.rpki-client.org