Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/LxqmaTHbAgfT7H-PEQInfzsAH2I.roa
File: LxqmaTHbAgfT7H-PEQInfzsAH2I.roa (raw, json)
Hash identifier: zRq4z07hhH1ako7iMMYUhqcgGZJGlhjY6f1seXhRqxw=
Subject key identifier: 2F:1A:A6:69:31:DB:02:07:D3:EC:7F:8F:11:02:27:7F:3B:00:1F:62
Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Certificate serial: 018972C03B555095A653036585382E83A694
Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/LxqmaTHbAgfT7H-PEQInfzsAH2I.roa
Signing time: Thu 20 Jul 2023 10:02:27 +0000
ROA not before: Thu 20 Jul 2023 10:02:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206760
IP address blocks: 91.107.118.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:72:c0:3b:55:50:95:a6:53:03:65:85:38:2e:83:a6:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Validity
Not Before: Jul 20 10:02:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2f1aa66931db0207d3ec7f8f1102277f3b001f62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f8:08:87:bd:1a:7c:e2:dc:9b:1b:de:63:dd:
bd:5a:b2:01:96:a9:0e:3e:4b:d0:92:c6:80:0f:e4:
af:48:47:7f:1b:0c:d8:5c:6a:23:d8:17:d8:f5:cd:
10:dd:8d:ea:45:80:0b:db:b7:8c:93:98:38:62:eb:
d0:4b:d7:1b:b3:a7:8b:81:71:a6:6e:02:35:7a:1f:
fe:65:fc:79:b2:c2:1d:a1:22:c7:25:43:eb:12:63:
6f:57:f3:92:97:d9:5d:3e:9c:2a:9d:04:47:55:91:
f0:43:bd:0e:64:89:d0:e8:67:68:5b:dd:4d:57:da:
bc:a9:09:a9:3a:bd:65:04:43:cc:b6:34:85:58:2c:
8f:b1:18:a9:33:62:7b:a7:02:22:85:98:c9:84:6b:
dc:03:f4:c4:52:a0:7c:fa:d8:92:0d:a0:52:a7:63:
98:63:79:14:5c:33:9a:e2:79:38:a3:e3:49:bf:f7:
7e:73:4d:c2:70:e8:f9:a7:95:1f:16:d3:dc:da:26:
18:81:86:b0:b4:67:99:3c:62:fc:8c:52:17:f4:3e:
42:00:a5:cb:64:b0:33:76:e1:d3:71:e6:26:9a:59:
43:03:0f:58:c6:97:65:d2:30:09:e8:af:f0:c8:4a:
cd:bc:df:a1:65:c3:3b:3d:68:8e:75:a9:d6:30:ff:
7b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:1A:A6:69:31:DB:02:07:D3:EC:7F:8F:11:02:27:7F:3B:00:1F:62
X509v3 Authority Key Identifier:
keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/LxqmaTHbAgfT7H-PEQInfzsAH2I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.107.118.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:97:a6:82:ad:37:eb:dc:2f:f3:bf:47:e9:d8:f4:10:91:12:
fc:fc:fc:72:79:4c:06:b2:21:33:f6:0c:44:8e:76:53:11:cd:
63:7f:a6:35:c6:af:f4:40:ef:45:66:e6:a5:fa:5c:b7:a8:d9:
55:e6:33:da:25:6e:26:a8:1a:20:d3:0b:e1:da:d6:66:cf:78:
ec:6e:2e:0f:6b:e8:eb:ae:5e:28:c7:8f:86:d0:d3:b4:ec:21:
be:33:91:ae:e3:62:9b:bb:bd:29:9f:23:2f:8d:59:66:3b:01:
3a:86:08:02:c8:7a:80:45:7a:30:cf:7a:cd:2a:c1:a3:69:ec:
a5:c1:2d:e2:e9:d9:a2:09:7a:3f:66:38:49:26:7a:5c:64:5f:
0e:f8:b2:55:0a:62:99:96:2b:6b:b9:5f:f8:20:e1:f9:42:5d:
9a:e3:0d:4e:01:ea:c5:58:b7:1a:9d:93:2e:a9:96:16:78:ef:
e9:1f:b7:63:99:ed:c7:5b:58:b2:c9:44:12:da:06:6d:2f:ad:
dd:42:bd:8f:fc:0e:42:ff:45:21:07:d4:2d:1b:95:2e:39:e1:
a0:12:8b:da:e4:5c:68:23:6a:e0:d9:bd:3c:53:f0:93:54:ac:
17:bc:3f:c3:1b:b7:7e:6a:b4:5d:83:59:42:fc:cb:4b:7d:8d:
55:2d:f4:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:26:15 2024 by rpki-client on console-fra.rpki-client.org