Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/LoJbP1tIRl-YYKiAO4SD8l_SjD4.roa
File: LoJbP1tIRl-YYKiAO4SD8l_SjD4.roa (raw, json)
Hash identifier: cPx4SKtifiUaoerFWr2348v2lKYT5PlZPkKm5K+6pgw=
Subject key identifier: 2E:82:5B:3F:5B:48:46:5F:98:60:A8:80:3B:84:83:F2:5F:D2:8C:3E
Certificate issuer: /CN=1492a20754c9a7650b8279b9390689c469d73595
Certificate serial: 018570DE2E3C1F8CD547834A6C540DC54607
Authority key identifier: 14:92:A2:07:54:C9:A7:65:0B:82:79:B9:39:06:89:C4:69:D7:35:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FJKiB1TJp2ULgnm5OQaJxGnXNZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/LoJbP1tIRl-YYKiAO4SD8l_SjD4.roa
Signing time: Mon 02 Jan 2023 05:04:47 +0000
ROA not before: Mon 02 Jan 2023 05:04:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15600
IP address blocks: 185.74.140.0/22 maxlen: 22
83.219.112.0/20 maxlen: 24
2a00:d2e0::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:de:2e:3c:1f:8c:d5:47:83:4a:6c:54:0d:c5:46:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1492a20754c9a7650b8279b9390689c469d73595
Validity
Not Before: Jan 2 05:04:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2e825b3f5b48465f9860a8803b8483f25fd28c3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c4:8a:ff:9a:76:1b:1b:7a:c4:ff:0e:9f:9c:
97:c7:36:d7:81:17:63:8d:0e:0a:6d:0d:c7:d2:0a:
12:53:29:9d:15:ce:a9:e3:e1:43:2c:3e:e4:ce:c3:
9f:fb:74:84:23:32:db:80:dd:35:5c:26:14:b1:98:
a2:c5:ad:b1:00:81:16:12:c9:e7:10:22:f6:2c:f5:
50:06:44:9c:16:af:1c:d7:5a:b2:48:58:9f:46:b5:
14:6c:9b:1d:89:a7:13:8c:1a:f9:35:3b:cc:b6:3a:
19:24:1b:79:17:c9:86:84:2f:31:3d:78:c3:5b:c9:
e0:1f:6a:15:ba:68:ed:d4:96:f8:17:57:32:5f:fe:
86:0a:1e:85:5f:1b:04:15:06:27:67:c9:4b:da:a8:
0c:e4:c1:40:cc:2e:db:b5:ee:56:04:48:a2:8f:ac:
94:e6:b9:0e:08:8c:f5:82:05:f8:18:ab:a1:0c:84:
5f:8d:bd:39:22:12:1e:ed:ee:2a:b0:ff:4c:19:69:
dc:19:aa:44:07:11:1f:2a:68:0f:21:dd:6e:43:3c:
83:60:0d:5d:0d:00:7c:c0:3e:62:1c:7c:a4:6b:b0:
25:0d:99:e7:32:3f:7f:26:a7:7e:7a:9d:1c:43:ef:
7f:f6:28:c6:0d:b6:fb:01:da:cc:56:26:b3:78:1f:
3e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:82:5B:3F:5B:48:46:5F:98:60:A8:80:3B:84:83:F2:5F:D2:8C:3E
X509v3 Authority Key Identifier:
keyid:14:92:A2:07:54:C9:A7:65:0B:82:79:B9:39:06:89:C4:69:D7:35:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJKiB1TJp2ULgnm5OQaJxGnXNZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/LoJbP1tIRl-YYKiAO4SD8l_SjD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.219.112.0/20
185.74.140.0/22
IPv6:
2a00:d2e0::/29
Signature Algorithm: sha256WithRSAEncryption
84:73:be:2f:a4:a4:37:32:c6:79:38:49:e1:13:5a:c2:74:8d:
1d:f1:14:70:0a:dc:58:eb:37:94:9b:51:68:4f:f7:61:95:c3:
ce:70:de:cb:14:3d:10:4d:f9:e0:3d:40:06:d6:c0:69:0b:36:
a1:5e:5e:c6:80:9e:b8:16:e9:01:18:7c:c2:61:63:92:c9:9a:
71:91:ce:71:9a:4c:74:ba:a2:e4:f4:62:4f:da:cf:a6:69:5d:
5f:95:0c:67:35:88:6d:bd:2a:d9:15:97:50:69:a2:af:00:4f:
6a:53:44:0e:8f:30:12:ce:ea:7f:fd:8c:28:d5:ac:da:a4:50:
08:1b:9e:15:c0:5e:35:4a:35:49:4b:36:41:3d:88:ae:e1:8c:
f9:30:d5:ee:58:81:d2:d4:1d:61:20:af:12:c6:43:ca:4b:64:
d7:48:f8:85:8e:94:04:ec:f8:ef:cb:a6:7a:86:5f:1b:94:1d:
b9:9b:bb:d7:8f:0a:a4:f8:d2:04:50:97:9e:cf:c2:48:33:4d:
31:f8:45:7f:a4:b3:c2:b3:b7:aa:75:3e:af:04:0c:11:ba:af:
8e:ee:b0:7d:a0:92:f9:3a:e9:4b:8a:4a:c0:cd:3e:19:f2:22:
12:5a:8e:dc:b5:42:48:f5:32:fe:6d:8a:61:68:a8:37:fa:69:
14:14:c6:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:50 2024 by rpki-client on console-ams.rpki-client.org