Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/ld76lpscWYNgEh0TVOz8W04vB08.roa
File: ld76lpscWYNgEh0TVOz8W04vB08.roa (raw, json)
Hash identifier: Wd9kk1PE0EdUZyciKAIUznQp2OblEorm60oZ+bxw40c=
Subject key identifier: 95:DE:FA:96:9B:1C:59:83:60:12:1D:13:54:EC:FC:5B:4E:2F:07:4F
Certificate issuer: /CN=1a29b2a45de0136feabbfae4baa70172aa86619b
Certificate serial: 01857169D9F154E6B7E52F8FAECED8DFAD53
Authority key identifier: 1A:29:B2:A4:5D:E0:13:6F:EA:BB:FA:E4:BA:A7:01:72:AA:86:61:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GimypF3gE2_qu_rkuqcBcqqGYZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/ld76lpscWYNgEh0TVOz8W04vB08.roa
Signing time: Mon 02 Jan 2023 07:37:20 +0000
ROA not before: Mon 02 Jan 2023 07:37:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61201
IP address blocks: 193.36.189.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 28 Mar 2023 05:43:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:69:d9:f1:54:e6:b7:e5:2f:8f:ae:ce:d8:df:ad:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a29b2a45de0136feabbfae4baa70172aa86619b
Validity
Not Before: Jan 2 07:37:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=95defa969b1c598360121d1354ecfc5b4e2f074f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:71:50:ee:d1:5e:6d:37:a2:89:f1:af:ab:f4:
9a:fb:08:17:9b:15:fd:56:38:f1:26:eb:c3:2b:be:
98:19:e4:b9:e6:b1:cc:9c:17:b2:64:30:74:bb:4d:
5c:af:9a:17:87:1d:df:23:ba:61:07:6e:aa:d3:34:
0a:20:d3:18:af:35:2f:ce:71:f4:f9:79:db:59:6c:
a6:8f:0f:90:4a:eb:04:43:49:9c:42:ac:b7:13:48:
5b:13:8e:f6:24:a1:31:63:93:45:58:04:eb:fa:b1:
8e:f6:fd:86:6a:91:a4:34:fa:90:c6:a6:73:da:e9:
46:d2:bc:b0:18:cc:4c:ff:72:a3:26:b4:02:d5:30:
b0:14:8a:bf:63:a6:9a:fb:53:1f:7f:32:3d:81:92:
6e:d3:aa:d4:7d:63:27:31:6f:fc:57:00:05:a3:03:
c9:b5:e4:ee:b0:85:6f:61:b3:7b:af:1c:80:e6:26:
07:a9:f1:3e:f9:7f:1f:5f:4b:1b:93:61:00:a0:5e:
4e:4a:78:4a:ca:c9:ad:0a:5f:cb:79:13:28:7e:61:
30:bb:0d:6b:a0:a8:cb:49:26:3e:9d:a8:a2:a3:26:
2b:f4:f6:c6:5d:58:a3:de:03:c9:8c:91:b1:0c:0f:
f6:d1:d4:91:d0:1c:8e:b4:11:93:88:bc:a7:de:a5:
a7:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:DE:FA:96:9B:1C:59:83:60:12:1D:13:54:EC:FC:5B:4E:2F:07:4F
X509v3 Authority Key Identifier:
keyid:1A:29:B2:A4:5D:E0:13:6F:EA:BB:FA:E4:BA:A7:01:72:AA:86:61:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GimypF3gE2_qu_rkuqcBcqqGYZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/ld76lpscWYNgEh0TVOz8W04vB08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d6c15a-3dff-44d7-a538-a951f200f652/1/GimypF3gE2_qu_rkuqcBcqqGYZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.36.189.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:26:e5:70:c6:66:29:f7:e5:04:fc:6e:91:1c:ef:70:32:f8:
0f:16:44:5d:d9:6f:69:fe:70:95:c4:06:13:67:09:ff:79:8e:
6d:35:a6:c4:41:ae:46:42:e2:1b:04:6b:ec:f0:4f:51:d8:0d:
5d:ba:af:7d:77:b8:7e:9c:c1:36:4f:2b:18:f4:83:05:fe:ec:
1b:a7:19:8a:b2:9c:9c:f2:31:9f:80:0f:96:53:d5:5d:25:0b:
49:07:ff:7f:b2:5b:32:29:f3:58:50:0c:7a:db:21:2b:fb:c8:
b8:fc:a4:aa:68:51:eb:6f:b4:f9:d8:b6:c5:9c:ee:b2:9c:ff:
e4:7e:ad:3d:c4:11:1d:65:24:10:4d:0c:89:a1:ed:0c:1a:58:
19:19:09:6f:8e:fb:70:d1:44:e1:5a:93:a2:e3:f6:6e:52:47:
0e:ea:8d:65:e6:b5:61:d6:73:74:b2:74:16:a4:c2:87:6f:f5:
3d:93:48:a3:fa:85:70:ca:e4:69:d5:c2:96:8a:41:6c:03:9b:
b9:56:d4:69:64:3c:58:2b:96:99:27:67:14:13:fe:57:96:ad:
ca:f3:c1:5c:ad:6f:ab:d7:e7:b1:86:fd:3d:41:cd:cb:67:4a:
72:f3:31:92:15:84:a9:d4:b0:e0:be:61:47:89:c7:86:0d:b9:
ea:54:6c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:41 2024 by rpki-client on console-ams.rpki-client.org