Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/LUgNYFDIzG0T1zeAARrfP-pILXM.roa
File: LUgNYFDIzG0T1zeAARrfP-pILXM.roa (raw, json)
Hash identifier: akK/pv87ost9yyme45oK20X1nK7vftZtQlnXiOb1Iak=
Subject key identifier: 2D:48:0D:60:50:C8:CC:6D:13:D7:37:80:01:1A:DF:3F:EA:48:2D:73
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018F9F8687999FE7503572EC57915CDE68F3
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/LUgNYFDIzG0T1zeAARrfP-pILXM.roa
Signing time: Wed 22 May 2024 08:59:04 +0000
ROA not before: Wed 22 May 2024 08:59:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 87.120.68.0/23 maxlen: 24
93.123.74.0/23 maxlen: 24
93.123.119.0/24 maxlen: 24
185.252.160.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 28 May 2024 04:30:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:9f:86:87:99:9f:e7:50:35:72:ec:57:91:5c:de:68:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 22 08:59:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2d480d6050c8cc6d13d73780011adf3fea482d73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5b:f7:5b:b8:dc:71:3c:6c:75:59:9e:c8:f3:
e2:58:4d:28:3b:7d:62:f1:b5:67:80:65:6c:bd:a3:
3f:b0:61:84:77:a7:e3:e1:cb:52:89:84:c3:67:a1:
11:88:14:a7:f4:23:3d:81:15:c5:57:d7:6b:cb:93:
10:f5:b6:90:58:00:88:68:c6:61:54:24:11:6b:7a:
da:d1:b0:a1:41:47:a6:63:17:23:8a:db:8a:70:22:
4d:66:9a:eb:6e:d7:7c:bd:3c:ab:58:39:55:a4:bb:
03:0d:58:16:9e:cd:40:e5:63:3d:fd:5c:71:b9:2a:
9d:ac:24:ca:13:80:6d:c9:16:ba:a5:ff:a4:3f:aa:
b2:a6:ce:22:4f:ae:31:1b:4a:0d:c6:f7:c7:b6:86:
9b:f7:d2:5b:80:48:53:75:6d:08:50:43:89:9a:9c:
50:95:58:3d:00:cf:9a:97:a9:9a:04:6d:79:d9:2f:
60:b5:1a:d7:13:9d:2b:26:5d:86:8f:f2:03:da:b8:
26:dd:1d:98:71:05:1d:45:83:ef:4e:09:fc:32:20:
5e:e9:b1:f9:d4:89:ab:1a:bb:28:1c:12:8b:45:92:
17:fe:68:55:02:7d:65:e3:ec:ec:0c:00:10:74:2f:
89:e7:6a:d5:00:fb:7e:a3:a2:37:90:0e:5d:d5:af:
65:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:48:0D:60:50:C8:CC:6D:13:D7:37:80:01:1A:DF:3F:EA:48:2D:73
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/LUgNYFDIzG0T1zeAARrfP-pILXM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.68.0/23
93.123.74.0/23
93.123.119.0/24
185.252.160.0/23
Signature Algorithm: sha256WithRSAEncryption
15:19:92:c8:5e:f0:e6:bc:66:db:2e:19:0e:79:37:d6:4e:2d:
36:e2:6a:dd:df:53:7c:a4:bd:d5:26:cd:74:6b:0e:cb:62:f5:
d1:47:12:6e:ba:ce:72:19:71:81:2c:49:01:ad:22:53:2d:54:
58:66:97:76:22:cf:c9:35:10:b5:5f:e1:27:a7:34:4a:94:a4:
4a:72:2c:d0:cf:f2:c6:32:6b:9a:12:68:22:fb:73:62:cc:45:
22:da:e0:d6:0e:70:73:bb:75:cd:d5:22:61:c4:60:4b:2c:76:
27:36:c5:75:70:5f:30:ab:b5:f4:ed:b3:13:4e:50:55:d0:34:
61:05:3d:e0:07:ea:bc:1e:92:2e:73:ec:8f:ce:b9:cf:c7:11:
4d:c8:80:26:48:83:89:c2:a2:b2:2e:1a:92:e1:11:b0:09:96:
4f:98:99:a8:94:19:f4:fc:62:9d:0c:d4:33:f9:b1:8f:13:7c:
aa:8f:2e:07:1b:08:97:ae:24:94:6a:3e:6a:0f:c8:2c:cc:83:
57:1e:97:8a:84:ce:a5:9c:f7:a3:de:8d:e3:3a:e4:b8:e1:00:
db:00:a4:e8:17:98:7d:72:eb:71:42:f9:e2:e7:1e:b8:50:1d:
f7:50:0f:ac:ac:61:42:13:b7:a0:c3:df:d6:b5:2e:72:6e:4e:
a6:96:f0:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:30 2024 by rpki-client on console-ams.rpki-client.org