Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/lgI3Ec-uQ7wG_FqYCvRTS9L6rkY.roa
File: lgI3Ec-uQ7wG_FqYCvRTS9L6rkY.roa (raw, json)
Hash identifier: rFMJUUlUgpJj6uCpBwFpzvhbIjW3+WyqpC1fGU0oFew=
Subject key identifier: 96:02:37:11:CF:AE:43:BC:06:FC:5A:98:0A:F4:53:4B:D2:FA:AE:46
Certificate issuer: /CN=b9b87b3b09ccb69a6de20468e90ecbb18f5ecbb6
Certificate serial: 018A5F6C8F6EFA0320CE1F6D8CDAA5C21B6B
Authority key identifier: B9:B8:7B:3B:09:CC:B6:9A:6D:E2:04:68:E9:0E:CB:B1:8F:5E:CB:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/lgI3Ec-uQ7wG_FqYCvRTS9L6rkY.roa
Signing time: Mon 04 Sep 2023 09:01:04 +0000
ROA not before: Mon 04 Sep 2023 09:01:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201925
IP address blocks: 94.246.179.0/24 maxlen: 24
94.246.180.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:31:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:5f:6c:8f:6e:fa:03:20:ce:1f:6d:8c:da:a5:c2:1b:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9b87b3b09ccb69a6de20468e90ecbb18f5ecbb6
Validity
Not Before: Sep 4 09:01:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=96023711cfae43bc06fc5a980af4534bd2faae46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:56:d6:b3:d6:47:2e:e4:1c:37:4d:20:73:13:
99:c9:b9:01:70:76:e7:5e:41:76:58:60:1e:83:36:
15:2e:2a:74:07:cb:b5:83:de:4e:2b:28:77:76:45:
41:33:fd:89:16:2d:d2:4d:04:fd:df:0e:9d:0a:13:
70:28:7b:ad:4c:37:4b:e4:a1:22:27:b3:3b:60:7b:
8d:5c:72:45:81:67:a2:15:66:e4:c2:c5:03:f3:e6:
f8:45:bd:70:a5:9b:f9:35:15:6c:77:e6:f9:91:8e:
b6:97:0e:14:86:7a:cc:60:42:9a:80:90:2b:a6:4f:
fc:45:ab:be:8b:40:e2:25:ee:4d:fe:7f:58:6f:34:
ef:21:b3:29:2c:45:30:44:68:4c:e6:0f:b7:87:3a:
16:14:97:8b:05:7f:b2:a1:bf:08:bf:9a:0d:6a:d6:
b8:48:df:87:f9:1e:c3:81:c9:6a:ba:4f:d1:f4:58:
43:18:85:0c:2d:54:fd:d5:e2:c6:52:9e:80:2a:f0:
b6:cf:02:f2:6c:dc:cb:b5:e9:69:8b:63:22:4f:74:
c5:81:a7:20:0a:0e:2c:15:6c:8b:75:30:ab:5a:8e:
ef:e9:ac:85:e1:92:17:b5:e6:13:3d:39:84:88:43:
2d:1b:a8:f2:8b:dd:3d:73:a9:e8:86:ee:b5:a1:ae:
e2:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:02:37:11:CF:AE:43:BC:06:FC:5A:98:0A:F4:53:4B:D2:FA:AE:46
X509v3 Authority Key Identifier:
keyid:B9:B8:7B:3B:09:CC:B6:9A:6D:E2:04:68:E9:0E:CB:B1:8F:5E:CB:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/lgI3Ec-uQ7wG_FqYCvRTS9L6rkY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.246.179.0-94.246.181.255
Signature Algorithm: sha256WithRSAEncryption
63:94:6c:3f:ce:1e:8e:15:3e:57:4d:38:f8:26:9c:b6:12:cc:
21:f1:d5:14:a2:7d:bf:df:93:9e:2a:64:03:99:f9:5a:fa:6f:
9c:27:3a:f8:06:c1:8d:95:76:bf:52:c8:5d:fc:9e:eb:29:d9:
7c:82:f8:30:9f:cb:25:e9:4c:d3:72:75:4f:3a:48:c9:44:42:
b4:f1:9e:1d:71:f9:7e:02:af:02:61:68:63:64:29:c1:91:89:
46:4f:53:6c:c7:e8:35:0b:d0:0e:17:13:8b:72:61:ce:18:b6:
72:2f:35:5e:09:25:a2:89:37:28:6b:96:f6:4c:16:94:79:1a:
3a:ff:66:3e:4b:b0:97:20:28:fc:da:86:dc:14:d0:57:ff:1f:
dd:2d:fc:16:d5:78:f4:cd:b8:8b:26:39:be:3f:25:87:8c:1d:
3e:ba:ff:b3:a0:b0:63:e4:f2:b2:db:4b:3a:39:12:be:c9:e6:
fa:c4:0d:92:3a:a2:61:6c:5a:3d:1e:76:58:15:ae:45:26:d1:
54:73:b7:9c:e6:33:ce:b1:73:40:0b:47:f7:0e:11:2a:14:eb:
7b:06:04:e0:e2:90:f8:f0:91:a1:6f:bf:82:a3:57:be:74:e4:
9d:f6:8a:2b:60:af:7c:19:44:76:48:47:be:09:18:e5:2e:3c:
cd:15:26:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:11 2024 by rpki-client on console-fra.rpki-client.org