Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/LgbJgZ9pq2NQGcqhXTsnkQRHbCo.roa
File: LgbJgZ9pq2NQGcqhXTsnkQRHbCo.roa (raw, json)
Hash identifier: Dm6fpYxXrKHcve80iLWwlbmAD7elA1yGP7smyM7Xsyk=
Subject key identifier: 2E:06:C9:81:9F:69:AB:63:50:19:CA:A1:5D:3B:27:91:04:47:6C:2A
Certificate issuer: /CN=c6d11b64ffe18efa42f43a6c765639dee38d027e
Certificate serial: 01856FC278E87A75780643634D60969602C1
Authority key identifier: C6:D1:1B:64:FF:E1:8E:FA:42:F4:3A:6C:76:56:39:DE:E3:8D:02:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xtEbZP_hjvpC9DpsdlY53uONAn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/LgbJgZ9pq2NQGcqhXTsnkQRHbCo.roa
Signing time: Sun 01 Jan 2023 23:54:54 +0000
ROA not before: Sun 01 Jan 2023 23:54:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 33965
IP address blocks: 193.73.114.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:c2:78:e8:7a:75:78:06:43:63:4d:60:96:96:02:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6d11b64ffe18efa42f43a6c765639dee38d027e
Validity
Not Before: Jan 1 23:54:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2e06c9819f69ab635019caa15d3b279104476c2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:6f:89:d1:b4:d0:88:b2:76:74:df:89:eb:3c:
d0:76:cd:10:82:66:fe:b8:73:99:a5:4e:51:de:33:
bf:42:a4:ed:b2:00:c7:33:63:84:71:df:bb:01:44:
3c:98:60:a1:a1:8d:f9:dc:9c:d7:ba:04:fc:38:e8:
80:3c:c5:0a:07:c8:e9:37:87:50:ed:4d:1d:e9:a5:
c8:91:6b:ab:46:00:c6:af:b4:d5:3e:0c:53:76:aa:
80:a1:e0:d1:ca:27:9d:a7:22:ec:b5:d8:ef:03:d0:
fc:5e:3d:5b:85:4d:20:74:09:52:c3:de:e2:44:6b:
6d:5b:1d:b7:5a:10:84:35:a6:d8:8b:dc:41:42:94:
d8:01:5f:c5:b7:84:51:8d:45:17:b7:51:e8:67:ae:
04:b2:a0:2d:6a:a9:02:be:9d:ce:09:3c:4c:e9:a9:
81:e4:d8:62:f7:e3:c1:a4:2d:a7:5b:2a:3d:a2:97:
25:14:40:a4:ce:48:dd:2a:2a:2b:a7:f4:f5:89:ef:
f6:b6:92:f1:98:c9:f7:7d:f1:ad:c6:73:3f:37:57:
c9:64:c6:c4:e6:66:b1:32:47:db:c0:53:9a:52:5c:
ec:66:ac:22:f5:5a:8b:27:ba:7b:b2:fd:b0:54:5b:
e5:b4:69:b7:05:3b:61:b0:49:e6:a3:c9:dd:fc:1e:
d7:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:06:C9:81:9F:69:AB:63:50:19:CA:A1:5D:3B:27:91:04:47:6C:2A
X509v3 Authority Key Identifier:
keyid:C6:D1:1B:64:FF:E1:8E:FA:42:F4:3A:6C:76:56:39:DE:E3:8D:02:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xtEbZP_hjvpC9DpsdlY53uONAn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/LgbJgZ9pq2NQGcqhXTsnkQRHbCo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.73.114.0/24
Signature Algorithm: sha256WithRSAEncryption
59:05:7a:6c:b4:8e:83:3b:e4:47:ea:b2:c2:04:4e:68:5d:54:
b7:f8:0d:9b:3a:57:d6:b9:d5:ae:62:77:ef:bd:e9:63:48:ab:
ed:98:54:54:d9:c1:55:41:21:ce:fb:31:81:b5:65:89:a8:e5:
4a:af:96:79:12:01:1b:6d:19:97:c5:cf:7a:da:b1:7b:a2:84:
07:b7:a3:7c:af:74:f3:1d:c1:d7:73:c2:56:bc:bf:f7:f5:d4:
2a:23:8d:4b:2f:d4:97:64:a9:0c:cd:93:15:5a:f4:7c:59:45:
96:39:10:22:cb:51:5c:82:c8:6e:2f:15:9e:19:6e:71:23:17:
e2:f9:ab:be:2f:40:5d:5a:b8:8e:c0:8c:ed:59:34:f7:6b:ab:
6b:02:7d:b9:fd:f9:96:63:81:41:3e:a2:42:43:4f:42:e3:7f:
11:85:98:98:c3:a5:db:be:ea:fe:75:1a:83:ce:35:15:e7:a2:
48:d9:c4:b0:74:fa:1e:81:74:04:c7:ef:6c:14:75:6b:ee:4d:
49:b3:23:b6:26:a2:ec:8c:fc:c8:b2:2d:1b:4c:a5:3f:d0:74:
ed:e1:5c:c3:d9:69:a5:40:78:22:74:8e:b3:53:86:e7:1a:98:
54:cd:0d:1d:1f:21:05:0a:67:85:89:fe:e1:ec:9e:b1:ba:5b:
5b:48:84:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:58 2024 by rpki-client on console-ams.rpki-client.org