Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/lwlEWpylCaqoBCerwjTIGBgALeI.roa
File: lwlEWpylCaqoBCerwjTIGBgALeI.roa (raw, json)
Hash identifier: 6ajv1EEYIlbm8gc8/VFgLwtB5KRKZjnPzTSoNS1GDJo=
Subject key identifier: 97:09:44:5A:9C:A5:09:AA:A8:04:27:AB:C2:34:C8:18:18:00:2D:E2
Certificate issuer: /CN=622ecc6cc5903aea0db61200f4ccd4f824cdd54f
Certificate serial: 018AD2227216B92D0A648F8E968C5989A095
Authority key identifier: 62:2E:CC:6C:C5:90:3A:EA:0D:B6:12:00:F4:CC:D4:F8:24:CD:D5:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yi7MbMWQOuoNthIA9MzU-CTN1U8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/lwlEWpylCaqoBCerwjTIGBgALeI.roa
Signing time: Tue 26 Sep 2023 15:36:27 +0000
ROA not before: Tue 26 Sep 2023 15:36:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 137502
IP address blocks: 213.248.219.0/24 maxlen: 24
213.248.218.0/24 maxlen: 24
213.248.254.0/24 maxlen: 24
213.248.255.0/24 maxlen: 24
2a01:618:407::/48 maxlen: 48
2a01:618:402::/48 maxlen: 48
2a01:618:405::/48 maxlen: 48
2a01:618:400::/48 maxlen: 48
2a01:618:403::/48 maxlen: 48
2a01:618:406::/48 maxlen: 48
2a01:618:401::/48 maxlen: 48
2a01:618:404::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d2:22:72:16:b9:2d:0a:64:8f:8e:96:8c:59:89:a0:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=622ecc6cc5903aea0db61200f4ccd4f824cdd54f
Validity
Not Before: Sep 26 15:36:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9709445a9ca509aaa80427abc234c81818002de2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:39:69:95:f9:a9:1e:b6:db:bc:57:76:1d:4c:
bb:7e:15:6e:d9:41:18:0f:a7:35:6b:5b:b1:2b:25:
e7:25:8f:63:73:9a:cb:69:86:48:68:17:0f:52:bd:
ee:a5:13:4f:48:55:25:15:60:0b:59:45:14:1f:77:
bc:25:a0:49:7c:10:98:4c:e9:f7:3d:e5:ce:7f:7a:
de:23:d0:e1:b2:3a:7b:9a:78:40:fd:74:2e:f8:04:
1c:9e:8e:41:fc:87:35:3f:32:e5:25:f3:dc:50:83:
53:ba:38:de:32:5f:9f:c3:9b:16:df:3d:8e:2b:0e:
7a:ee:94:25:03:14:59:f2:d6:cc:73:2e:c6:67:7e:
4c:1b:f2:4b:22:9c:ad:95:8a:c3:15:15:ba:e3:93:
00:b1:fc:0a:fa:f0:9f:4f:95:b2:c9:a5:25:28:9c:
63:4d:3b:f9:50:38:95:53:27:2d:a1:dc:89:86:7d:
5f:50:8a:e7:62:53:01:e4:d7:95:76:5d:98:b9:52:
db:ba:47:d1:95:9d:b3:48:f0:79:7b:03:e6:82:ae:
5e:92:2d:1f:5a:77:89:3a:19:aa:ab:04:fb:e1:38:
49:3a:67:07:78:cb:16:ad:c5:7d:37:f8:92:0f:f6:
2b:09:72:3b:cc:3a:af:28:24:7e:9b:63:e2:2b:44:
62:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:09:44:5A:9C:A5:09:AA:A8:04:27:AB:C2:34:C8:18:18:00:2D:E2
X509v3 Authority Key Identifier:
keyid:62:2E:CC:6C:C5:90:3A:EA:0D:B6:12:00:F4:CC:D4:F8:24:CD:D5:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yi7MbMWQOuoNthIA9MzU-CTN1U8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/lwlEWpylCaqoBCerwjTIGBgALeI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Yi7MbMWQOuoNthIA9MzU-CTN1U8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.248.218.0/23
213.248.254.0/23
IPv6:
2a01:618:400::/45
Signature Algorithm: sha256WithRSAEncryption
5e:7e:90:0b:73:ef:a0:65:ee:c3:aa:2c:9c:06:fe:40:8c:88:
9a:b2:ba:29:fc:ba:ad:69:9f:39:6c:a8:cb:48:d8:f6:b9:4a:
45:d6:29:77:1f:82:0b:3f:58:cf:98:62:27:a7:da:c1:c2:ad:
22:05:fc:a8:8b:42:ee:ac:5d:87:1d:e6:5d:43:4c:b4:43:38:
65:84:6e:81:c4:60:4f:19:36:1a:4c:4c:5c:09:d6:ff:43:8d:
03:c2:1e:93:19:e3:54:44:5f:cb:d4:63:78:6d:ab:97:74:f4:
17:e9:bb:28:17:52:b7:74:37:a9:5d:d8:ae:76:3f:ee:90:0d:
63:56:61:a8:98:64:ab:4c:99:6e:5b:1c:b8:1a:8c:4b:8c:dd:
4e:ca:fe:cb:cb:81:53:18:bf:23:71:f7:11:3f:fd:82:d5:d6:
a8:70:65:91:ae:90:d5:a3:42:8b:f3:a0:c7:23:16:ba:4d:62:
53:4f:8e:e9:30:ad:c9:95:c4:f5:2d:87:03:d4:c7:4e:37:17:
41:de:aa:2b:18:43:ce:ed:3a:ca:e8:04:9f:1e:25:b3:e4:80:
64:d0:5d:1c:1e:5a:82:6b:39:67:c4:10:26:d7:53:6c:05:12:
93:fb:f4:4c:2a:05:4c:a4:8d:8b:7a:44:56:3a:8b:38:6a:66:
d8:24:00:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:34 2023 by rpki-client on console.sobornost.net