Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/LKmsQFJZ_i0fiFc_JaNnKN9OWQ0.roa
File: LKmsQFJZ_i0fiFc_JaNnKN9OWQ0.roa (raw, json)
Hash identifier: yYnsuc6jm4voq34uZ7fWtHouBoeYiVNCVZm0jZ+oJEk=
Subject key identifier: 2C:A9:AC:40:52:59:FE:2D:1F:88:57:3F:25:A3:67:28:DF:4E:59:0D
Certificate issuer: /CN=9ba94bc14937bb0b3632374355a446724104a981
Certificate serial: 01939DE924717DB840D0A54EF1AE5E7836F6
Authority key identifier: 9B:A9:4B:C1:49:37:BB:0B:36:32:37:43:55:A4:46:72:41:04:A9:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m6lLwUk3uws2MjdDVaRGckEEqYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/LKmsQFJZ_i0fiFc_JaNnKN9OWQ0.roa
Signing time: Fri 06 Dec 2024 21:38:42 +0000
ROA not before: Fri 06 Dec 2024 21:38:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207957
IP address blocks: 91.196.32.0/24 maxlen: 24
91.196.33.0/24 maxlen: 24
91.196.34.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 16 Dec 2024 13:19:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:9d:e9:24:71:7d:b8:40:d0:a5:4e:f1:ae:5e:78:36:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ba94bc14937bb0b3632374355a446724104a981
Validity
Not Before: Dec 6 21:38:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2ca9ac405259fe2d1f88573f25a36728df4e590d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:71:cc:05:dd:2f:bf:e0:8e:14:44:0a:c3:8d:
6b:ef:76:8d:2b:d1:e8:dd:6c:05:23:f3:6b:bd:c4:
4d:45:99:37:4a:c4:8b:7f:5f:86:a3:5d:f0:29:8c:
39:6d:31:ed:ff:4d:32:37:58:e1:02:09:1e:c4:32:
76:da:fa:f9:98:c0:b1:3f:88:1e:82:84:9d:36:31:
56:e1:3b:a7:ed:1e:47:c7:ab:d9:a0:ed:81:52:33:
cb:16:5c:48:29:9e:37:23:62:87:93:c2:f9:6b:f4:
fb:08:80:13:08:32:32:f1:22:e9:05:8d:16:c2:2c:
91:65:b8:1e:c1:54:0c:94:50:d1:d2:50:a2:9b:47:
e6:ee:de:bc:92:04:b7:ad:b4:87:dc:30:26:17:e8:
98:71:8f:8a:1a:7e:2c:ae:ba:69:29:e7:7d:a4:d3:
18:b7:93:6d:32:80:a5:2d:65:ba:d2:6a:e6:f9:62:
1d:30:c1:a7:0f:40:c0:31:5b:f2:b9:40:cd:82:dd:
ec:9e:cb:07:04:18:27:6c:5a:3a:f1:2e:52:70:d7:
d2:e0:86:d6:68:52:a1:14:9e:5a:b2:9f:b7:f2:ef:
0a:de:13:dc:55:f5:85:ed:3b:b6:87:d8:c2:94:78:
d5:d3:93:15:00:99:81:9c:fe:26:b2:da:87:69:7e:
bf:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:A9:AC:40:52:59:FE:2D:1F:88:57:3F:25:A3:67:28:DF:4E:59:0D
X509v3 Authority Key Identifier:
keyid:9B:A9:4B:C1:49:37:BB:0B:36:32:37:43:55:A4:46:72:41:04:A9:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m6lLwUk3uws2MjdDVaRGckEEqYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/LKmsQFJZ_i0fiFc_JaNnKN9OWQ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.196.32.0-91.196.34.255
Signature Algorithm: sha256WithRSAEncryption
0f:00:66:d1:0d:49:ce:b5:9c:2f:45:70:2b:a5:56:0c:63:34:
ca:3d:01:ed:ff:aa:e7:e7:b7:11:5d:23:4d:eb:e7:a9:50:2b:
06:6a:4a:7d:91:00:89:f6:ba:c6:54:2e:3a:5f:9b:06:60:91:
0d:39:b9:e9:62:96:91:99:01:50:24:78:41:0a:cd:c1:2f:6a:
cf:5b:87:80:b2:2a:de:6c:f7:bc:e7:95:09:fb:a1:f3:b8:18:
c4:17:14:1d:99:30:8f:2c:bb:a7:e9:fc:0f:ee:fe:08:a0:80:
41:62:b0:dd:be:f5:52:53:4f:7f:18:dd:f6:d2:e1:8f:c0:37:
79:3e:45:b7:aa:48:ac:89:c6:73:3b:37:4d:7d:a7:33:cb:82:
19:18:40:61:b3:b5:23:b5:2d:75:3e:b5:db:79:b3:29:f4:55:
89:a9:06:c5:8c:c1:cf:7d:6d:be:1a:67:43:b0:fa:c9:7c:39:
c1:64:01:d9:32:d9:0c:e2:f8:7c:93:52:a4:d4:09:24:df:74:
56:2f:8c:7d:13:9d:3d:ab:06:45:a7:53:5b:68:61:2b:1e:5e:
5a:be:98:a0:46:4e:a5:9e:c2:0a:f3:76:ca:a4:8d:42:ee:f3:
56:7f:67:27:3d:52:88:2f:62:94:8d:2f:59:33:78:0c:94:81:
1f:aa:34:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:53:31 2025 by rpki-client