Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/lmz2Z0A30p-2vZEhA5PjdlNnWf8.roa
File: lmz2Z0A30p-2vZEhA5PjdlNnWf8.roa (raw, json)
Hash identifier: 7eqtrMcbYl+wUz02VYJwuTY4ajnjMBQCAGO+PnGKmU8=
Subject key identifier: 96:6C:F6:67:40:37:D2:9F:B6:BD:91:21:03:93:E3:76:53:67:59:FF
Certificate issuer: /CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Certificate serial: 018A097F7E3BE8A290669248197247370CFE
Authority key identifier: 27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/lmz2Z0A30p-2vZEhA5PjdlNnWf8.roa
Signing time: Fri 18 Aug 2023 16:34:24 +0000
ROA not before: Fri 18 Aug 2023 16:34:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41801
IP address blocks: 91.102.160.0/21 maxlen: 21
91.102.160.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 25 Aug 2023 15:46:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:09:7f:7e:3b:e8:a2:90:66:92:48:19:72:47:37:0c:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Validity
Not Before: Aug 18 16:34:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=966cf6674037d29fb6bd91210393e376536759ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:9f:20:1b:2c:3e:ca:64:77:df:6a:74:fe:2c:
81:91:31:3b:17:89:39:c7:5b:3f:86:a0:97:b3:3f:
e1:bf:7f:ee:15:d7:da:4c:c6:c6:2e:d4:47:dc:29:
d6:c5:b9:1e:ef:f3:62:20:40:6a:b7:85:3d:2d:cb:
cf:e8:8e:14:57:c5:e6:e8:7e:da:e5:a7:62:48:ac:
94:ad:62:36:c0:b0:0d:33:c8:13:45:fb:57:d2:26:
d7:40:c0:0d:8d:62:a2:46:a5:bc:45:72:a6:96:96:
21:19:13:89:10:e3:da:de:27:c6:71:d5:9c:72:cc:
34:38:4c:3d:8f:b6:fa:9e:ce:82:81:05:d0:d8:02:
43:13:2e:a6:a6:49:1f:2a:10:0e:11:d9:66:6c:fe:
74:90:b7:25:55:24:d8:a3:81:d4:d7:39:d7:3d:b3:
b9:0a:e6:0c:9d:a8:2d:db:02:22:8a:f8:d8:d9:4c:
0d:ae:9d:65:0b:e0:c9:35:50:e4:55:21:9b:5c:44:
a5:07:6c:06:9c:61:42:94:8d:61:36:df:12:ec:53:
0c:f0:05:a9:bb:41:de:8b:2e:68:2b:bb:e9:2c:b5:
db:22:0a:93:ce:a5:25:ec:0a:34:e1:e7:ac:db:26:
29:b3:f3:ae:e0:2d:63:c9:07:f8:7a:a1:90:06:9b:
15:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:6C:F6:67:40:37:D2:9F:B6:BD:91:21:03:93:E3:76:53:67:59:FF
X509v3 Authority Key Identifier:
keyid:27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/lmz2Z0A30p-2vZEhA5PjdlNnWf8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.102.160.0/21
Signature Algorithm: sha256WithRSAEncryption
01:d4:ab:03:7f:93:42:c6:19:5a:69:37:5d:b4:c6:30:8c:a7:
7e:af:d1:7d:2c:80:36:44:1e:2a:82:88:03:ae:c5:17:fd:9e:
4c:5f:16:c5:a4:f3:f9:0d:d9:7c:44:8c:e3:78:20:05:3e:84:
08:8f:b0:cb:3c:30:0d:fa:7e:53:55:f4:4b:85:48:df:cf:71:
97:63:7e:bc:a2:28:46:51:80:c2:43:80:5a:8c:51:03:86:ba:
9e:70:b4:24:46:80:1c:e7:08:78:f7:ae:8b:6f:5b:2b:ca:c3:
85:16:61:a7:ec:e1:02:a1:25:53:76:63:fa:6c:b2:da:e9:04:
a0:e5:79:75:22:0b:07:b9:f9:b9:41:b5:f5:35:b3:0c:81:0e:
2b:10:65:18:e0:9b:6b:e4:31:5e:67:0e:1e:e3:d7:5f:47:9a:
cf:a0:2d:4b:39:07:92:2b:ec:5f:e5:d6:cd:8e:cc:b8:be:2f:
50:1c:4f:c2:aa:64:de:cf:7d:cb:af:c5:0c:31:ad:c4:f8:80:
75:5e:7e:77:2a:c3:5f:d1:cd:32:9e:8e:00:f0:83:73:2b:6c:
53:7d:1b:df:ff:d1:40:b0:20:04:3b:c9:f8:14:5e:1c:10:4d:
16:4b:df:46:86:24:7d:d6:a6:b7:26:68:25:e6:ed:1f:42:02:
3a:c8:5d:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:51 2024 by rpki-client on console-ams.rpki-client.org