Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/lexaK6IIKbEOOLXmSl5YeeJfN7c.roa
File: lexaK6IIKbEOOLXmSl5YeeJfN7c.roa (raw, json)
Hash identifier: rzzmBSphEN/OzTvFxeUE1uWJG3vj0eHg7t1tNFGpxSw=
Subject key identifier: 95:EC:5A:2B:A2:08:29:B1:0E:38:B5:E6:4A:5E:58:79:E2:5F:37:B7
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01881E670AD1F44102D2394FEC8B653900A9
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/lexaK6IIKbEOOLXmSl5YeeJfN7c.roa
Signing time: Mon 15 May 2023 07:54:09 +0000
ROA not before: Mon 15 May 2023 07:54:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208485
IP address blocks: 194.180.51.0/24 maxlen: 24
80.76.48.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 Jun 2023 14:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:1e:67:0a:d1:f4:41:02:d2:39:4f:ec:8b:65:39:00:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 15 07:54:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=95ec5a2ba20829b10e38b5e64a5e5879e25f37b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c7:e8:69:47:73:24:69:11:fc:8c:36:3a:0f:
40:e7:91:c4:cb:df:d1:53:d0:7d:5c:e4:2e:f7:a4:
16:44:f5:0d:08:2c:a1:bd:53:2b:d0:af:9a:4d:a6:
4d:ea:24:91:51:e8:cc:47:c1:f9:86:19:b8:42:55:
93:21:e2:77:f5:8b:2e:b0:f5:5b:8c:69:95:37:46:
ce:aa:5b:15:95:bf:af:ae:e9:17:e5:f4:3e:ad:4e:
79:36:95:36:22:f7:1c:73:2d:f5:83:4d:61:ea:b4:
1d:36:e1:ca:76:4e:47:16:52:d9:72:a9:26:b1:b9:
b4:b4:11:e4:af:9f:5d:17:30:c2:a6:fc:6b:cd:1f:
3a:7a:a1:76:72:9a:81:a7:da:ed:ba:9d:b6:a3:a1:
48:0c:c1:d4:71:8f:8d:06:83:da:ff:9c:9b:e7:e2:
21:28:33:6b:78:ef:ae:34:5b:60:02:9d:f2:c1:75:
4f:4f:98:c6:98:08:bb:e7:8b:e7:29:24:36:a2:90:
56:35:69:e8:0e:db:62:fe:47:64:24:37:d6:a3:ad:
ec:b5:dc:a7:2b:0e:11:74:65:cc:42:0d:17:95:3a:
b9:6c:88:34:72:e9:41:77:be:89:ce:07:b0:01:4c:
99:37:03:ef:44:33:c6:c3:4c:f7:27:a7:19:d7:a1:
e5:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:EC:5A:2B:A2:08:29:B1:0E:38:B5:E6:4A:5E:58:79:E2:5F:37:B7
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/lexaK6IIKbEOOLXmSl5YeeJfN7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.76.48.0/24
194.180.51.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:d5:d9:e4:47:86:1e:98:84:7f:ad:62:f9:4e:3c:fc:68:42:
0b:04:47:0a:58:f2:8f:83:bf:fc:e0:b7:00:d1:dc:0e:6a:b6:
db:27:2f:b0:c7:91:4f:65:e3:28:a5:f4:06:15:56:b0:39:53:
65:7b:54:d6:32:8e:c2:4a:21:fa:82:c1:11:fd:eb:00:71:da:
ad:15:7a:49:10:62:59:7e:eb:37:79:4a:bc:84:14:4a:85:ee:
2c:d5:8b:6d:c9:05:db:02:4d:95:fe:bb:f1:38:01:3d:dc:c2:
c4:96:43:cc:9f:18:2d:18:11:bc:c1:12:d2:6a:5e:c4:60:8c:
73:5b:0a:23:e4:65:db:b3:18:1a:03:ea:7a:e1:77:ed:e6:2b:
78:a9:37:d8:bc:a7:70:e3:b2:aa:c0:fd:34:9c:99:d0:86:0f:
92:cf:4d:ad:12:10:60:3a:0d:60:e7:47:27:87:35:9b:5a:e5:
ee:b9:d4:47:ba:5b:00:10:bc:a2:97:d2:73:20:25:9a:39:f1:
69:3c:af:0a:c9:f8:a5:56:f3:b2:6a:82:40:4e:e6:e2:51:a9:
90:27:ef:08:a1:00:2f:8a:53:5b:4e:17:55:e8:90:d8:77:f3:
0a:bd:06:26:40:9a:55:f9:d4:47:13:8c:84:ab:83:ef:2e:81:
a6:af:3b:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:18 2024 by rpki-client on console-fra.rpki-client.org