Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f4ea59-1810-4210-98f3-709f03624e7e/1/lhI3quMYcX-0VuN9RWptOOuqy4k.roa
File: lhI3quMYcX-0VuN9RWptOOuqy4k.roa (raw, json)
Hash identifier: S293Y/uOccPafvWTf0fjJb28oC6v1s+qSNCJPdy7hOk=
Subject key identifier: 96:12:37:AA:E3:18:71:7F:B4:56:E3:7D:45:6A:6D:38:EB:AA:CB:89
Certificate issuer: /CN=34bca94f6b61e10100dc3a7186ffa3f9b00c69dd
Certificate serial: 018CC3B68B738AE5E728112823166FFE3FDD
Authority key identifier: 34:BC:A9:4F:6B:61:E1:01:00:DC:3A:71:86:FF:A3:F9:B0:0C:69:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLypT2th4QEA3Dpxhv-j-bAMad0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f4ea59-1810-4210-98f3-709f03624e7e/1/lhI3quMYcX-0VuN9RWptOOuqy4k.roa
Signing time: Mon 01 Jan 2024 06:29:29 +0000
ROA not before: Mon 01 Jan 2024 06:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51162
IP address blocks: 91.216.178.0/24 maxlen: 24
91.103.107.0/24 maxlen: 24
91.103.106.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 26 Mar 2024 10:03:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:8b:73:8a:e5:e7:28:11:28:23:16:6f:fe:3f:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34bca94f6b61e10100dc3a7186ffa3f9b00c69dd
Validity
Not Before: Jan 1 06:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=961237aae318717fb456e37d456a6d38ebaacb89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:93:37:ff:7b:c4:3c:33:41:10:b9:fc:0c:da:
06:b9:56:3d:a9:9b:7a:91:73:7f:38:5f:ca:64:41:
b2:49:31:86:a9:a2:0b:05:38:55:69:a6:4e:c9:3a:
5f:07:16:69:ac:fd:35:06:86:c6:c1:cd:b7:6a:22:
72:a4:6b:3a:7c:f7:97:48:c7:8d:7b:f5:2b:7a:61:
1d:f4:b5:ef:00:2d:62:89:ce:9f:83:79:8f:45:e3:
74:0a:2e:0c:5f:0d:62:5f:7f:cf:46:3a:b7:50:4f:
04:e6:ff:cc:94:45:97:a8:5e:cd:68:e7:ee:c5:ec:
77:4e:9c:bc:9e:34:32:b6:13:fc:28:9a:b0:e3:b3:
5e:69:61:14:c8:09:94:cf:71:ba:45:c6:b1:8e:9d:
c0:90:fa:9d:3a:40:68:05:c2:82:39:65:61:4f:32:
57:4c:c5:d5:2d:85:30:2f:2a:35:61:f0:1d:ef:7a:
a2:7d:b7:69:9f:8f:e4:ae:34:a9:88:01:bc:35:04:
7b:47:aa:5f:dc:b1:24:aa:ba:e4:af:67:fd:74:de:
1e:05:7e:d7:99:2d:d3:6c:40:0b:91:95:b9:5e:61:
29:46:9d:32:83:ef:a2:6e:db:22:b6:fc:bb:b6:41:
79:22:54:33:e7:87:2c:af:ea:4d:36:15:14:83:5f:
67:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:12:37:AA:E3:18:71:7F:B4:56:E3:7D:45:6A:6D:38:EB:AA:CB:89
X509v3 Authority Key Identifier:
keyid:34:BC:A9:4F:6B:61:E1:01:00:DC:3A:71:86:FF:A3:F9:B0:0C:69:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLypT2th4QEA3Dpxhv-j-bAMad0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f4ea59-1810-4210-98f3-709f03624e7e/1/lhI3quMYcX-0VuN9RWptOOuqy4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f4ea59-1810-4210-98f3-709f03624e7e/1/NLypT2th4QEA3Dpxhv-j-bAMad0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.103.106.0/23
91.216.178.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:cb:ff:c7:4e:f4:b2:64:39:d0:e2:91:fd:c9:8c:65:5a:c9:
97:75:74:be:4f:81:7e:68:18:cf:f4:a8:85:27:d8:93:cc:f2:
89:e1:28:83:45:8e:4f:a1:b3:4a:4e:d7:03:43:8d:ac:b2:7b:
5d:1e:47:f1:0d:6c:8e:40:ca:59:0f:4f:85:b4:0c:7e:d7:49:
b8:74:25:76:50:eb:74:d8:8c:df:89:e8:13:11:42:72:7d:4a:
df:80:70:64:17:dd:3e:fc:07:a0:f4:e1:3d:c1:4f:6d:12:3e:
d0:fc:6f:4a:ed:a2:e0:ba:b5:91:c4:70:07:64:31:fc:50:4a:
a0:a9:6f:db:9c:00:fa:cb:cd:ad:7b:93:ab:96:56:5e:b9:61:
11:ed:35:9a:04:68:7c:b6:14:92:d1:ee:d8:88:6d:58:39:5a:
d1:19:b1:66:1f:93:41:59:02:e9:c8:b7:f7:e2:b7:a8:ad:db:
50:a5:41:b6:47:b2:fc:fb:c4:66:0f:63:a1:af:ca:24:29:70:
4e:d1:36:cd:99:7a:7b:4d:04:57:d3:e9:47:c7:ed:10:07:27:
04:c9:83:6a:82:cd:5e:c3:44:6e:94:77:d9:cb:40:50:4d:11:
22:d1:dd:68:f7:85:b5:a5:d6:48:48:22:23:89:0a:a1:75:e0:
c5:c2:ed:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:08 2024 by rpki-client on console-ams.rpki-client.org