Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/lbGYU6LV0L5IZ0PNsJWXaNyyzYU.roa
File: lbGYU6LV0L5IZ0PNsJWXaNyyzYU.roa (raw, json)
Hash identifier: dbU++psU+eDZ7O8wXPaH3Csxx0jVJS+IHnKMPSQoDNg=
Subject key identifier: 95:B1:98:53:A2:D5:D0:BE:48:67:43:CD:B0:95:97:68:DC:B2:CD:85
Certificate issuer: /CN=4dd1b2587490ad061cb207176bdeec81a531588c
Certificate serial: 01856E0B11C0F4045F34D1FA573997CDB7CF
Authority key identifier: 4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/lbGYU6LV0L5IZ0PNsJWXaNyyzYU.roa
Signing time: Sun 01 Jan 2023 15:54:57 +0000
ROA not before: Sun 01 Jan 2023 15:54:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 27173
IP address blocks: 80.231.225.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:0b:11:c0:f4:04:5f:34:d1:fa:57:39:97:cd:b7:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd1b2587490ad061cb207176bdeec81a531588c
Validity
Not Before: Jan 1 15:54:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=95b19853a2d5d0be486743cdb0959768dcb2cd85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:7d:64:1e:28:09:c6:09:97:55:fa:ed:78:bf:
64:f0:0b:a4:db:c1:e2:ae:cb:63:3c:98:a1:d5:ce:
ba:91:cd:24:d6:da:12:7d:70:52:3c:52:61:44:00:
e5:49:7a:3e:4a:f3:ac:ae:7e:84:a0:ec:13:6c:03:
66:85:8a:70:5c:a8:26:73:cb:53:8c:81:5d:71:2a:
7f:c5:43:cc:bc:c3:30:d5:c2:a7:b0:72:e2:94:f3:
5c:88:3b:fc:a4:b5:31:52:d1:de:c6:e6:88:04:41:
fb:3d:6b:23:49:24:51:de:80:ac:50:13:6f:4f:03:
03:26:f4:08:43:bb:15:3b:66:25:b3:a0:ef:32:72:
8e:5f:3e:62:e8:a7:11:29:ad:28:b4:c3:3d:c4:8c:
47:40:ab:3b:85:d5:19:18:da:62:6e:09:88:91:ff:
22:5b:78:ec:2b:a2:c1:65:da:33:7f:68:b2:4f:90:
5b:57:c0:46:87:05:72:b7:78:ec:26:f3:d8:8b:56:
4c:0f:fa:f7:85:60:dc:25:3b:e4:50:0a:25:98:d5:
71:0e:5a:1a:ab:ad:21:09:51:e1:04:29:26:ca:aa:
ca:6d:1f:13:fa:6c:ae:12:8f:93:9e:d6:9c:ab:36:
3f:23:cb:b6:6b:d6:bd:77:0e:45:a4:f7:f6:63:bf:
95:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:B1:98:53:A2:D5:D0:BE:48:67:43:CD:B0:95:97:68:DC:B2:CD:85
X509v3 Authority Key Identifier:
keyid:4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/lbGYU6LV0L5IZ0PNsJWXaNyyzYU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.231.225.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:c5:7e:62:aa:39:ae:6d:5c:42:45:12:52:40:65:fd:a1:e8:
a5:aa:ac:12:08:3f:ed:72:86:96:7e:ba:2e:d6:a2:5b:48:1f:
f7:5b:38:05:0d:1f:57:19:c3:27:bb:13:a7:a7:02:d8:ff:7b:
0f:60:99:d6:c7:31:45:de:00:bf:b3:f3:97:59:95:54:dd:eb:
cb:ca:2d:53:d8:30:4c:60:ae:99:db:85:ac:da:de:b3:45:4a:
84:69:30:02:4b:af:1e:2e:e3:46:92:6b:8c:b8:a7:78:23:e4:
3a:28:7b:17:83:2a:cf:e4:59:8e:93:a8:e7:af:40:27:c9:47:
a0:58:37:46:01:b1:2d:da:01:bf:a9:76:e5:44:8a:0e:1c:f2:
86:2a:73:d7:c8:23:45:ca:d1:87:37:8d:fa:8f:57:e5:e8:83:
0e:de:6b:c0:77:42:32:a5:77:93:c2:6c:27:85:ee:05:66:0a:
ff:cf:7f:9d:ff:b7:e4:14:29:26:8e:59:1f:3c:44:63:a4:30:
d8:6f:83:6b:34:f2:7d:2c:8a:33:1e:d8:cf:24:b8:b3:00:e2:
1c:ce:74:61:71:af:79:11:f3:f6:56:28:2c:1f:02:c6:6a:f7:
86:cc:fd:87:7f:97:92:6b:10:8a:0e:a7:61:38:a9:27:66:34:
4b:b5:2e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:30 2024 by rpki-client on console-fra.rpki-client.org