Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/979d20-2ff2-4f92-9c27-d6092a9fbe6c/1/LONzSfFw-5hu14Nf-zcH5EfOLiM.roa
File: LONzSfFw-5hu14Nf-zcH5EfOLiM.roa (raw, json)
Hash identifier: 2zPqaIB67AZ9RGQ7GHNqg2UYUiDjVwIz38AV/tH9sWM=
Subject key identifier: 2C:E3:73:49:F1:70:FB:98:6E:D7:83:5F:FB:37:07:E4:47:CE:2E:23
Certificate issuer: /CN=2e5c571bf9bfa7e21bc7e339f9b8eebe06133711
Certificate serial: 01856F26EB41C9A427F9851AA1ACA23E0DD6
Authority key identifier: 2E:5C:57:1B:F9:BF:A7:E2:1B:C7:E3:39:F9:B8:EE:BE:06:13:37:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LlxXG_m_p-Ibx-M5-bjuvgYTNxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/979d20-2ff2-4f92-9c27-d6092a9fbe6c/1/LONzSfFw-5hu14Nf-zcH5EfOLiM.roa
Signing time: Sun 01 Jan 2023 21:04:59 +0000
ROA not before: Sun 01 Jan 2023 21:04:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3303
IP address blocks: 194.147.52.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:26:eb:41:c9:a4:27:f9:85:1a:a1:ac:a2:3e:0d:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e5c571bf9bfa7e21bc7e339f9b8eebe06133711
Validity
Not Before: Jan 1 21:04:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2ce37349f170fb986ed7835ffb3707e447ce2e23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:47:3d:f8:de:9b:1e:73:f8:64:7d:cc:d6:67:
b6:f1:0b:84:82:7c:e5:3d:f3:41:07:e6:fe:72:c2:
d7:63:dd:99:e8:39:ea:c3:07:71:cf:b1:e0:08:b9:
1c:5c:e1:a1:72:a8:35:a1:20:2a:3d:7b:30:25:ba:
06:ab:2e:8c:7d:b2:6d:58:76:db:00:e2:88:93:f8:
eb:e7:55:1c:a3:6a:27:b5:ed:14:eb:df:64:3a:88:
6c:23:1f:d8:37:4e:94:f1:47:a9:06:6a:05:ab:5c:
a7:1f:82:7e:bf:cf:e9:5f:5f:46:a2:55:73:f4:65:
df:cf:26:c4:26:0c:e0:1f:0e:30:d7:ab:c7:8a:56:
97:10:d3:98:f7:a4:9c:74:47:f8:ad:8a:e6:e3:64:
91:3e:0e:53:73:7b:cd:ee:be:a7:2a:2c:3e:44:69:
dc:fd:95:10:cd:bc:2f:4d:90:45:52:f2:c3:05:9a:
97:16:fa:f1:4b:30:ca:bf:a5:a5:83:7c:58:76:45:
29:e8:10:52:67:3c:4e:52:74:52:12:43:56:c3:29:
c4:04:5d:e1:26:4c:91:47:ce:22:7b:cd:50:ba:d7:
f6:48:14:0b:f0:3b:85:7d:c7:d9:87:d0:21:9c:13:
98:26:49:88:95:7e:fa:56:20:1d:8c:f9:52:c2:4e:
bf:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:E3:73:49:F1:70:FB:98:6E:D7:83:5F:FB:37:07:E4:47:CE:2E:23
X509v3 Authority Key Identifier:
keyid:2E:5C:57:1B:F9:BF:A7:E2:1B:C7:E3:39:F9:B8:EE:BE:06:13:37:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LlxXG_m_p-Ibx-M5-bjuvgYTNxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/979d20-2ff2-4f92-9c27-d6092a9fbe6c/1/LONzSfFw-5hu14Nf-zcH5EfOLiM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/979d20-2ff2-4f92-9c27-d6092a9fbe6c/1/LlxXG_m_p-Ibx-M5-bjuvgYTNxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.52.0/22
Signature Algorithm: sha256WithRSAEncryption
96:84:c3:21:2d:c2:1d:f5:98:ac:ca:ef:d6:a7:d3:b1:5c:90:
a2:d9:eb:91:0d:ad:e4:8a:2f:0a:9b:62:40:32:04:4b:75:e9:
57:99:1b:00:34:02:ce:e9:c8:e5:eb:d1:2a:2d:f2:f2:81:93:
5a:da:07:82:4a:51:eb:f7:0d:03:96:3f:79:19:16:db:0f:e1:
63:57:76:09:7b:07:4e:43:ef:15:54:2b:02:b6:93:8f:5e:73:
00:21:30:6b:41:6d:33:f0:4f:fe:97:78:98:7e:b7:78:3f:1c:
ce:e2:fc:4b:92:4d:8a:22:4f:18:0a:df:86:c9:58:bb:65:3e:
ae:54:9d:89:9e:fc:43:f8:89:0e:10:3f:98:1e:11:f1:1b:2c:
e1:33:ef:e8:b4:3c:fb:36:9c:43:3f:fe:8e:fc:b8:9c:ae:e1:
fb:95:06:16:ea:99:0b:9a:24:f0:70:cb:3e:5a:70:62:6f:c3:
b3:9e:cf:95:b9:e1:8a:5d:83:0a:ac:a7:f9:8c:e8:01:bb:71:
03:86:62:79:0f:83:1b:d8:9e:fb:6c:df:d4:1d:e1:bc:c3:2b:
0a:b7:4f:a9:6f:22:1b:c4:7d:e2:b7:18:64:f8:f5:3a:fb:1b:
7c:38:f5:2d:85:11:97:2b:88:76:56:35:b6:8d:75:de:61:e3:
1b:74:e8:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:11 2024 by rpki-client on console-ams.rpki-client.org