Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/lCZxpF1L8S6tkmp-24DlC5l76nw.roa
File: lCZxpF1L8S6tkmp-24DlC5l76nw.roa (raw, json)
Hash identifier: HCvpeM5g9xvyw8aw471b2CrdUdBNDSFBz5tlIhR1l0Y=
Subject key identifier: 94:26:71:A4:5D:4B:F1:2E:AD:92:6A:7E:DB:80:E5:0B:99:7B:EA:7C
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 01856CE6647512181DB5F6A121E46F7175B1
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/lCZxpF1L8S6tkmp-24DlC5l76nw.roa
Signing time: Sun 01 Jan 2023 10:35:16 +0000
ROA not before: Sun 01 Jan 2023 10:35:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197304
IP address blocks: 213.91.136.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 16 Oct 2023 08:10:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:e6:64:75:12:18:1d:b5:f6:a1:21:e4:6f:71:75:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 1 10:35:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=942671a45d4bf12ead926a7edb80e50b997bea7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:0a:15:b1:4f:44:25:53:af:0f:56:6e:5b:21:
bd:b5:eb:3d:22:a0:e5:03:f4:28:2a:f7:19:b3:45:
ba:00:60:f9:70:c8:b0:ce:07:ea:bd:47:97:f5:69:
ba:18:af:e6:f6:7d:d1:c7:1c:5d:c5:b3:27:ca:e7:
5e:bf:5e:6a:66:89:35:c8:1f:79:7e:a5:37:28:96:
58:25:f0:3e:e3:bc:f4:eb:e1:1a:d0:33:b6:fb:dc:
67:05:3f:47:e8:02:1b:26:88:9e:49:ba:c5:03:48:
0b:54:1d:f4:ea:3e:1e:2e:3e:cf:70:47:aa:19:13:
3c:4c:02:59:e3:cb:64:43:79:eb:a6:e6:c1:16:b5:
5a:46:47:2e:82:74:3a:f5:19:60:96:fb:34:7c:26:
a5:7e:35:ab:a6:b0:cc:ec:c7:4f:e2:9b:21:71:17:
f6:d3:84:59:6e:74:10:3d:0d:30:43:78:c4:fb:67:
59:8d:ad:d6:e3:87:9e:af:06:2a:89:c3:e3:70:70:
1b:11:99:e9:3b:9f:fd:72:95:c3:3d:70:54:03:d2:
20:12:eb:9e:da:43:91:35:de:15:65:22:6f:0a:17:
1e:8b:e2:8b:b8:38:ec:46:4c:d4:7d:ab:f0:db:5f:
58:77:d5:21:d1:f5:6a:42:dd:90:a7:2d:01:ad:a3:
6b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:26:71:A4:5D:4B:F1:2E:AD:92:6A:7E:DB:80:E5:0B:99:7B:EA:7C
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/lCZxpF1L8S6tkmp-24DlC5l76nw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.91.136.0/23
Signature Algorithm: sha256WithRSAEncryption
19:df:2d:c3:09:dc:e7:aa:e0:0a:65:30:28:cb:dd:56:20:5c:
84:a1:88:e2:6f:43:65:68:e6:73:5c:5d:43:db:22:04:52:b0:
e2:ee:ef:f7:0c:d9:58:19:41:43:49:58:b5:5e:6a:62:ef:f2:
3a:ba:dd:e2:f4:72:d9:97:4b:44:a4:da:3a:9b:3d:39:e5:d5:
d8:45:0a:3b:e5:b2:e9:1a:b2:1b:19:2c:4d:f5:3d:d7:91:b9:
b5:ac:a6:a3:02:b6:08:c8:e2:02:52:20:2c:8d:22:3a:7f:2a:
8a:06:b4:b7:59:40:69:61:92:c8:16:73:98:59:d6:67:e3:a8:
d9:df:b1:bc:bc:30:5c:a2:b7:66:15:2e:10:5e:45:88:3a:45:
19:42:bd:03:4f:f5:b8:ff:ec:50:1a:c7:c3:49:15:2a:7e:a3:
15:35:c1:89:8f:e2:8c:cb:20:1f:05:38:82:60:66:13:d4:08:
6a:47:03:96:96:f9:f9:7d:cb:2a:2a:11:92:a6:04:fb:55:32:
90:ce:89:e3:f0:87:89:3f:00:87:dc:8e:74:83:18:1a:05:dc:
d1:e4:54:39:be:74:06:93:4c:cd:f5:d0:39:8c:a9:78:5b:ab:
a1:e8:72:5f:85:83:af:6b:83:c7:f0:45:8c:14:21:e5:54:d4:
0e:77:b0:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:05 2024 by rpki-client on console-fra.rpki-client.org