Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/6914ce-66c2-4238-92b7-a2d636f325e6/1/LuZkazpYjjv5IbE3lQ2bqqXA9DI.roa
File: LuZkazpYjjv5IbE3lQ2bqqXA9DI.roa (raw, json)
Hash identifier: JSTw5HeHDQRUSOWSr7jMzU1IWGjpQ33fwy0AykGpAx8=
Subject key identifier: 2E:E6:64:6B:3A:58:8E:3B:F9:21:B1:37:95:0D:9B:AA:A5:C0:F4:32
Certificate issuer: /CN=d0113dd5d0759c03009380140c668ebbd1f9c168
Certificate serial: 0189FD2F6434BF316C3BA274ABFA181FB6E1
Authority key identifier: D0:11:3D:D5:D0:75:9C:03:00:93:80:14:0C:66:8E:BB:D1:F9:C1:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0BE91dB1nAMAk4AUDGaOu9H5wWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/6914ce-66c2-4238-92b7-a2d636f325e6/1/LuZkazpYjjv5IbE3lQ2bqqXA9DI.roa
Signing time: Wed 16 Aug 2023 07:11:28 +0000
ROA not before: Wed 16 Aug 2023 07:11:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209916
IP address blocks: 193.39.79.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 29 Oct 2023 03:29:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:fd:2f:64:34:bf:31:6c:3b:a2:74:ab:fa:18:1f:b6:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0113dd5d0759c03009380140c668ebbd1f9c168
Validity
Not Before: Aug 16 07:11:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2ee6646b3a588e3bf921b137950d9baaa5c0f432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:5b:dd:e7:54:29:2d:3c:8b:73:a9:ed:54:ae:
23:eb:e0:8c:cb:31:0f:54:8f:48:c3:58:17:56:ab:
47:8d:22:87:9e:48:4a:16:2c:d6:8e:d9:b0:8d:67:
f1:c8:a6:52:40:ef:30:36:2c:0b:3f:7e:5f:76:c1:
7b:6b:bf:65:27:b0:0b:31:93:1e:89:cd:ba:a8:0f:
cd:a5:de:44:80:8f:af:86:84:79:98:5a:c9:49:8f:
c1:b3:5b:87:b7:7e:98:37:95:7c:62:c5:cb:91:f3:
9a:c0:c1:cf:12:3b:3c:b5:f3:10:2c:e3:9e:22:fa:
39:b0:b2:5e:48:db:e6:4a:9c:62:8b:6c:5c:ac:98:
d9:4a:5f:8c:f8:a5:05:9f:e9:37:3a:f3:24:16:40:
f9:8d:5b:5d:f6:08:1e:5a:c5:f7:5f:2f:f7:06:a9:
f3:31:ba:3d:2f:91:f7:b6:9f:33:67:80:9a:fd:a3:
eb:6b:a3:47:c4:13:17:46:33:41:53:92:39:d8:b1:
4f:69:83:46:75:50:9e:e5:89:b6:dd:5c:fa:d1:fb:
68:f0:57:a1:d1:ad:ad:7d:7d:d4:f9:6e:cd:3e:b9:
13:4d:cf:6d:d6:3a:2b:b9:80:42:3a:7e:43:c2:56:
83:0f:9a:03:84:7c:df:14:59:56:41:bc:4d:d0:14:
4f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:E6:64:6B:3A:58:8E:3B:F9:21:B1:37:95:0D:9B:AA:A5:C0:F4:32
X509v3 Authority Key Identifier:
keyid:D0:11:3D:D5:D0:75:9C:03:00:93:80:14:0C:66:8E:BB:D1:F9:C1:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BE91dB1nAMAk4AUDGaOu9H5wWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/6914ce-66c2-4238-92b7-a2d636f325e6/1/LuZkazpYjjv5IbE3lQ2bqqXA9DI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/6914ce-66c2-4238-92b7-a2d636f325e6/1/0BE91dB1nAMAk4AUDGaOu9H5wWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.39.79.0/24
Signature Algorithm: sha256WithRSAEncryption
09:2e:ef:c3:3c:5e:55:ac:64:01:c8:ce:c9:bf:ee:c2:79:e5:
38:fa:c1:12:f0:5d:02:86:64:ea:08:10:31:b5:52:17:13:7f:
64:0e:96:13:d6:6e:10:af:61:53:27:df:e5:c9:37:fe:df:22:
ae:74:14:99:f4:0a:ae:00:91:e2:a2:83:a4:5a:31:97:15:af:
35:60:76:13:e5:ba:58:f5:67:d7:e7:0f:ba:fe:09:82:ce:10:
b6:5f:8d:ae:c8:88:72:63:0f:a2:63:66:5c:33:42:f1:10:1a:
c9:f9:02:68:89:95:97:51:14:39:39:40:4e:91:0a:b4:53:7f:
74:fd:08:50:e1:8f:dc:54:2b:5b:0c:e0:06:91:ee:db:44:d5:
4d:61:a5:ce:7f:60:9d:3d:47:78:db:39:83:ce:06:0b:85:bf:
4b:0e:c9:53:f4:96:f4:5f:d0:f9:7a:12:2c:b2:7c:2c:17:8b:
52:53:b4:fb:98:22:43:35:c6:60:ed:d1:fb:f4:3e:79:0a:9b:
73:87:c9:27:6c:8d:fc:61:51:86:02:b2:ce:c8:6b:91:5b:88:
58:f8:3f:e1:80:78:31:78:b4:24:55:02:9f:6b:10:9c:bf:fa:
80:b9:c6:10:14:fb:7f:79:35:6f:16:7d:a5:e5:43:74:a6:81:
ee:8f:36:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:01 2024 by rpki-client on console-fra.rpki-client.org