Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/lZyskz-IYP4wiWQItk3EO9MxCYk.roa
File: lZyskz-IYP4wiWQItk3EO9MxCYk.roa (raw, json)
Hash identifier: RSgjKT5Fzb7U53Jtec4qCgDr5eHgFlBPgMciOObLQzU=
Subject key identifier: 95:9C:AC:93:3F:88:60:FE:30:89:64:08:B6:4D:C4:3B:D3:31:09:89
Certificate issuer: /CN=855be74d09d9b05251dad2c9696793c04b40f241
Certificate serial: 01856E1D381AF576EE16973EF853BE26071B
Authority key identifier: 85:5B:E7:4D:09:D9:B0:52:51:DA:D2:C9:69:67:93:C0:4B:40:F2:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hVvnTQnZsFJR2tLJaWeTwEtA8kE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/lZyskz-IYP4wiWQItk3EO9MxCYk.roa
Signing time: Sun 01 Jan 2023 16:14:46 +0000
ROA not before: Sun 01 Jan 2023 16:14:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210570
IP address blocks: 176.126.127.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:1d:38:1a:f5:76:ee:16:97:3e:f8:53:be:26:07:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=855be74d09d9b05251dad2c9696793c04b40f241
Validity
Not Before: Jan 1 16:14:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=959cac933f8860fe30896408b64dc43bd3310989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:0f:b9:e7:88:52:d9:bd:de:fa:8e:f6:71:0b:
43:90:06:1c:70:ea:17:2c:a2:e0:ff:3a:05:db:6c:
ee:5a:e5:ba:1e:e1:da:66:e2:1e:1a:13:85:e0:a5:
79:9a:01:fb:2c:0f:c5:6e:3c:d1:01:63:92:99:56:
c8:99:dc:21:dd:e0:1b:1e:4e:29:ca:bd:84:62:f2:
dc:14:94:45:06:f0:84:03:54:96:14:e1:9a:82:d9:
d0:6d:4a:1d:9d:09:40:c8:ac:e5:a5:bb:17:61:95:
ff:2b:f4:b6:29:c5:f8:8d:f7:d0:20:6e:5d:69:d3:
45:69:21:50:5e:dc:59:c5:03:9b:b3:82:ac:f9:9e:
c9:6b:55:da:c9:3a:e0:df:bd:ce:7e:42:97:d6:7a:
37:57:e5:33:d1:73:72:e7:2e:45:5d:76:98:f8:7f:
f1:97:cc:52:82:f7:02:33:4c:12:22:f1:93:5a:5b:
a6:47:ed:70:47:a0:42:9e:f5:78:42:92:66:90:7c:
c3:74:a8:18:4c:8f:b3:a5:fd:9d:4f:75:3d:0a:0d:
55:cb:03:94:e6:b5:8d:18:6b:de:c0:b2:e7:1d:d2:
9a:76:a2:34:9e:57:d0:db:7d:3a:55:8e:2d:83:ff:
bf:50:37:cb:2d:5c:f8:59:ec:6f:32:47:66:d5:96:
ff:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:9C:AC:93:3F:88:60:FE:30:89:64:08:B6:4D:C4:3B:D3:31:09:89
X509v3 Authority Key Identifier:
keyid:85:5B:E7:4D:09:D9:B0:52:51:DA:D2:C9:69:67:93:C0:4B:40:F2:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hVvnTQnZsFJR2tLJaWeTwEtA8kE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/lZyskz-IYP4wiWQItk3EO9MxCYk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/hVvnTQnZsFJR2tLJaWeTwEtA8kE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.127.0/24
Signature Algorithm: sha256WithRSAEncryption
04:ac:2a:49:d4:66:6a:5a:2a:5c:68:1f:90:45:42:83:ea:79:
e5:9a:bd:1a:7c:75:d5:f8:ac:74:95:8a:d8:18:80:4e:b0:c4:
ec:93:e0:f1:30:7e:62:8e:3f:8b:5c:4f:54:86:ab:16:ff:cb:
27:42:11:9b:64:59:fd:9b:54:aa:c0:86:57:dc:d3:a0:a8:25:
23:c5:12:85:af:1e:ef:79:e2:1a:5c:f0:6f:b5:c0:7b:6b:b6:
a1:37:f6:c5:5e:8f:87:2c:48:3b:ac:88:46:84:c8:4e:ca:26:
ea:0e:ec:7b:65:13:82:8e:94:4e:9d:0f:88:aa:20:88:b8:6a:
45:0e:ac:67:89:cf:45:00:80:f9:26:43:a9:51:8f:fa:5a:bb:
9d:64:f5:53:a3:70:48:59:56:ff:7d:54:70:71:6d:76:90:5c:
76:25:4d:ad:0c:95:f3:94:d7:a3:5e:a8:8a:4f:5e:a8:50:fc:
dc:86:b3:08:54:c1:b3:3b:2a:62:d5:fc:20:71:58:51:e3:e4:
8c:fd:8b:66:ee:0b:25:64:fe:b3:30:70:a5:4f:1a:53:2a:c4:
08:c7:7d:78:83:9c:cd:04:29:c5:40:d5:bf:c7:02:89:c2:88:
76:fa:3a:01:36:6d:e7:bf:59:0b:7a:a2:6f:a3:db:64:da:48:
eb:c6:f5:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:39 2024 by rpki-client on console-ams.rpki-client.org