Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/LbjzyIvezi9_TKrIAiebERuREpg.roa
File: LbjzyIvezi9_TKrIAiebERuREpg.roa (raw, json)
Hash identifier: NUmhUpxZO7Axwm/CZMF+3PrsXU45r/ri8cQztxP4yDE=
Subject key identifier: 2D:B8:F3:C8:8B:DE:CE:2F:7F:4C:AA:C8:02:27:9B:11:1B:91:12:98
Certificate issuer: /CN=9246785f469be8aa7151e3333e47465d478fd0e7
Certificate serial: 01856C4139102DD40FFDE1EE3530A8E77958
Authority key identifier: 92:46:78:5F:46:9B:E8:AA:71:51:E3:33:3E:47:46:5D:47:8F:D0:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/LbjzyIvezi9_TKrIAiebERuREpg.roa
Signing time: Sun 01 Jan 2023 07:34:51 +0000
ROA not before: Sun 01 Jan 2023 07:34:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39180
IP address blocks: 185.24.17.0/24 maxlen: 24
185.24.16.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 29 Mar 2023 12:08:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:41:39:10:2d:d4:0f:fd:e1:ee:35:30:a8:e7:79:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9246785f469be8aa7151e3333e47465d478fd0e7
Validity
Not Before: Jan 1 07:34:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2db8f3c88bdece2f7f4caac802279b111b911298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:29:2f:dc:f4:fa:79:e0:11:60:42:00:6a:b7:
74:32:6d:10:16:0f:5d:0d:00:7d:14:80:9a:71:1d:
a8:7c:ce:ec:12:e5:04:f1:cc:33:f1:fc:5a:7e:d7:
47:7c:3c:a4:42:b8:58:22:72:fd:63:fe:26:28:43:
7c:86:29:6c:88:47:ef:61:ea:51:ba:77:40:c2:ea:
77:1e:cc:83:2c:28:1e:84:0a:29:08:09:1f:49:3b:
7a:fa:ad:2c:c5:5e:68:04:1d:6c:99:f1:aa:80:9c:
9c:f4:14:04:4a:fb:3a:23:4e:95:8a:ae:62:89:a2:
20:67:36:9a:1f:0e:6c:1a:d2:c8:71:57:86:7e:7d:
62:a6:10:34:fb:7b:19:2a:c7:4b:b0:a3:a9:7d:a2:
fb:cf:87:16:b7:00:ac:4d:56:0f:cb:11:90:cb:de:
d8:b1:38:d1:ff:2d:12:93:b8:e3:b5:30:94:20:89:
3a:23:c9:ad:71:41:7d:2f:20:c9:6b:0f:a5:69:12:
52:54:8e:18:f7:a3:5a:f5:e6:77:6f:24:6e:b1:5a:
27:6a:d5:92:ff:4a:d5:e2:37:f9:5b:9c:5f:3d:f5:
2c:e0:5c:40:e8:c9:ec:6e:3b:cf:d5:17:d3:6d:62:
6d:79:ad:fe:26:5c:8a:04:e2:fb:84:fe:e3:c5:8c:
95:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:B8:F3:C8:8B:DE:CE:2F:7F:4C:AA:C8:02:27:9B:11:1B:91:12:98
X509v3 Authority Key Identifier:
keyid:92:46:78:5F:46:9B:E8:AA:71:51:E3:33:3E:47:46:5D:47:8F:D0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/LbjzyIvezi9_TKrIAiebERuREpg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.24.16.0/23
Signature Algorithm: sha256WithRSAEncryption
c1:47:61:0f:cd:48:9b:e8:67:d4:86:9a:b7:fc:c2:2c:85:12:
fc:df:45:54:b5:7f:4a:50:29:50:f1:5e:d5:e9:a5:f4:cb:4e:
fb:3f:d5:ab:55:e2:8f:bf:17:17:61:3b:f7:18:a3:7c:b6:0c:
5b:82:be:92:41:33:b1:97:3b:8a:b6:87:43:cc:0f:c0:68:dd:
fb:06:9f:bc:f0:15:9d:c9:59:64:9a:e2:4f:f7:11:f7:20:ba:
31:68:f9:4a:5b:05:29:51:79:90:b2:ed:2d:3d:28:11:0c:6e:
69:99:2f:d4:25:dc:ca:32:10:61:ae:3e:b4:05:4b:79:04:53:
3c:f0:bc:94:6a:d2:d2:65:60:16:3c:5d:42:60:5b:b8:66:87:
27:76:9b:30:fa:70:95:44:01:6c:2a:f0:e3:e3:12:76:70:0e:
dc:0e:11:ba:4b:e5:55:2b:f9:fe:3a:fb:c4:bd:dc:1f:a2:1a:
75:56:5c:9c:8b:2f:39:ef:f0:07:14:45:7f:a4:1c:e8:b5:92:
d8:cd:61:3a:d4:d7:be:50:f2:03:9a:1c:e2:86:65:46:83:12:
b4:74:9a:bd:5a:7e:96:a3:e6:4a:3b:9d:fd:0a:78:71:7d:03:
6e:6f:74:f7:2e:4f:5d:0b:a1:8d:24:bb:b4:a5:92:22:9d:7a:
4a:1f:b3:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:20 2024 by rpki-client on console-fra.rpki-client.org