Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/9f5b81-ae4d-46a4-bb82-7655c89f14d6/1/Lwz4orAOlSCEjDVhJCyhxip3T30.roa
File: Lwz4orAOlSCEjDVhJCyhxip3T30.roa (raw, json)
Hash identifier: FZVdFHg4rYvmyFHJcz6OSip4w3ABxFA8cJyrrtlTl+c=
Subject key identifier: 2F:0C:F8:A2:B0:0E:95:20:84:8C:35:61:24:2C:A1:C6:2A:77:4F:7D
Certificate issuer: /CN=c0cac8d524a5fec7fc83a23830fbf9226a7601ae
Certificate serial: 0188FD23B895261BD45E212244158ADB5E7E
Authority key identifier: C0:CA:C8:D5:24:A5:FE:C7:FC:83:A2:38:30:FB:F9:22:6A:76:01:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/9f5b81-ae4d-46a4-bb82-7655c89f14d6/1/Lwz4orAOlSCEjDVhJCyhxip3T30.roa
Signing time: Tue 27 Jun 2023 13:55:56 +0000
ROA not before: Tue 27 Jun 2023 13:55:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35575
IP address blocks: 84.19.40.0/21 maxlen: 21
84.19.48.0/21 maxlen: 21
185.25.236.0/22 maxlen: 22
84.19.56.0/21 maxlen: 21
185.152.216.0/22 maxlen: 22
185.219.92.0/22 maxlen: 22
84.19.32.0/21 maxlen: 21
84.19.32.0/19 maxlen: 19
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:fd:23:b8:95:26:1b:d4:5e:21:22:44:15:8a:db:5e:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0cac8d524a5fec7fc83a23830fbf9226a7601ae
Validity
Not Before: Jun 27 13:55:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2f0cf8a2b00e9520848c3561242ca1c62a774f7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:16:a3:c4:00:bc:7e:24:65:25:80:9c:3e:45:
2c:cd:02:ab:f0:64:6a:6e:0f:db:a0:b9:4b:90:d4:
e7:ca:52:f6:39:89:bc:80:cb:d9:9b:1f:80:50:d9:
01:b3:56:d7:35:ef:ea:a6:89:42:d1:e9:f8:ec:8a:
24:65:21:66:e2:47:b7:06:c2:cb:7d:70:7c:09:9d:
94:3f:ce:81:96:fe:f2:6a:a3:67:47:a2:c3:03:01:
b5:0e:2f:9b:1a:ab:ff:c5:18:25:7f:c2:c7:8e:95:
50:09:36:3a:4e:7d:1e:f4:e1:a7:a8:c6:b5:46:fe:
fc:75:ae:5b:c6:cd:f6:2c:1e:9e:bd:47:2d:6e:2d:
b4:a9:b6:ee:3b:89:34:c2:cc:03:a6:a5:f4:a9:f1:
bf:0f:dc:b9:cf:ba:bb:50:82:fd:fb:f2:55:12:e1:
6e:c6:ff:54:6a:ce:48:bb:59:32:63:7c:2e:be:60:
a7:15:32:32:94:b6:71:ee:24:2e:3e:fb:a2:86:e7:
0b:a2:93:de:0e:15:05:b5:77:44:ef:6e:1d:6a:23:
cc:a3:f4:83:d9:6f:09:87:77:21:44:0f:48:24:b1:
fb:51:4a:33:fe:18:5b:d4:49:90:e3:08:3d:83:74:
7b:55:da:24:a4:ea:dd:44:6a:31:d4:1f:86:70:2a:
c3:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:0C:F8:A2:B0:0E:95:20:84:8C:35:61:24:2C:A1:C6:2A:77:4F:7D
X509v3 Authority Key Identifier:
keyid:C0:CA:C8:D5:24:A5:FE:C7:FC:83:A2:38:30:FB:F9:22:6A:76:01:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9f5b81-ae4d-46a4-bb82-7655c89f14d6/1/Lwz4orAOlSCEjDVhJCyhxip3T30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9f5b81-ae4d-46a4-bb82-7655c89f14d6/1/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.19.32.0/19
185.25.236.0/22
185.152.216.0/22
185.219.92.0/22
Signature Algorithm: sha256WithRSAEncryption
34:b0:20:b1:40:08:78:19:32:33:ac:62:3a:7b:5f:52:f9:d7:
62:e1:60:3b:35:37:9e:1d:c8:1a:db:c2:0b:c7:6f:9e:c5:ae:
c5:36:78:a7:0f:0e:f9:4c:77:a7:c7:0a:94:0a:74:6a:4e:da:
12:c8:45:0f:c4:63:a3:69:67:bd:94:1c:b0:fb:f3:45:03:bf:
d2:18:24:e0:45:b6:42:32:19:0a:33:c2:84:9c:db:0e:8b:43:
e0:b8:5b:a5:18:81:0f:ef:b4:c4:48:5c:b0:e5:24:3c:c1:cb:
06:8f:6e:71:81:0f:9e:b4:67:cd:33:b8:fb:c5:43:7e:da:69:
d8:48:fd:77:40:4b:3e:5a:46:ae:70:54:11:b9:c8:c0:28:40:
82:0c:b4:0e:11:f0:12:04:79:8d:62:a4:4f:97:b3:ab:38:42:
4c:06:a4:57:38:05:1b:0e:55:7f:f2:45:e2:b6:b0:df:28:50:
32:82:47:fb:b0:14:44:2e:71:bb:e5:2b:bd:7b:69:68:58:f1:
66:dc:ea:01:76:1f:7f:c0:8b:5d:bc:68:87:77:72:6a:45:40:
44:63:e7:0d:74:3d:28:a8:c3:7d:7b:31:ec:3a:f8:62:dd:6d:
4c:8b:b5:35:65:86:11:bd:72:d6:a3:b4:c3:d9:1a:4a:0d:65:
78:8d:60:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:28 2023 by rpki-client on console.sobornost.net