Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/ln-6qSKwjKbMlXB_9OyxumjGHF4.roa
File: ln-6qSKwjKbMlXB_9OyxumjGHF4.roa (raw, json)
Hash identifier: XGv3o8lxqsvFFQVhM9490i4SQEONOMzQVtXgwNnDdEo=
Subject key identifier: 96:7F:BA:A9:22:B0:8C:A6:CC:95:70:7F:F4:EC:B1:BA:68:C6:1C:5E
Certificate issuer: /CN=860d9f01a98b514ebd3c2723d7f7eb448326f5e2
Certificate serial: 01856CB820B686BA79731F1AA82E25286967
Authority key identifier: 86:0D:9F:01:A9:8B:51:4E:BD:3C:27:23:D7:F7:EB:44:83:26:F5:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hg2fAamLUU69PCcj1_frRIMm9eI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/ln-6qSKwjKbMlXB_9OyxumjGHF4.roa
Signing time: Sun 01 Jan 2023 09:44:44 +0000
ROA not before: Sun 01 Jan 2023 09:44:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39788
IP address blocks: 193.23.244.0/24 maxlen: 24
2001:678:558::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:b8:20:b6:86:ba:79:73:1f:1a:a8:2e:25:28:69:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=860d9f01a98b514ebd3c2723d7f7eb448326f5e2
Validity
Not Before: Jan 1 09:44:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=967fbaa922b08ca6cc95707ff4ecb1ba68c61c5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:f5:5a:bd:60:5d:05:f7:be:77:e9:26:66:b4:
8a:77:79:78:6d:d1:51:bb:9c:53:41:b0:f8:9b:b8:
e4:30:6f:1a:ef:f3:65:dd:8f:46:91:fb:35:50:96:
90:1b:7d:d9:fd:3d:a8:56:99:f6:39:b5:b3:e2:42:
8c:3c:c5:85:d5:e4:9d:e8:50:5a:10:1f:21:b3:25:
6a:3d:70:be:3a:66:8c:d6:6f:58:75:37:1e:fe:ef:
9d:1a:0a:9a:fb:40:4d:69:45:b2:b4:30:21:e8:50:
04:8f:c8:40:8a:fb:c9:71:ba:39:a0:79:5f:9f:ce:
d6:a8:37:16:ad:c7:28:bf:36:7d:f2:9d:7f:b2:3d:
c0:a2:3d:62:ee:d5:bd:50:9f:86:52:e3:ad:e0:96:
a4:b2:97:d1:44:61:e7:ea:48:15:8b:6a:2c:cb:dd:
93:c2:36:f0:e9:4e:09:9e:a8:6f:f7:2b:e3:94:39:
19:95:cb:40:37:0e:81:69:a3:a8:bc:a2:81:b6:75:
22:c0:bb:6a:49:b6:73:d2:57:7f:87:15:9a:f5:94:
34:a4:d1:55:88:3e:41:e9:78:7c:54:43:e6:ad:2c:
e0:cc:bc:aa:d5:d0:08:58:49:17:d7:0a:a0:b0:b9:
34:f9:02:ef:2c:42:9e:e3:bf:21:de:62:cc:3f:3c:
a6:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:7F:BA:A9:22:B0:8C:A6:CC:95:70:7F:F4:EC:B1:BA:68:C6:1C:5E
X509v3 Authority Key Identifier:
keyid:86:0D:9F:01:A9:8B:51:4E:BD:3C:27:23:D7:F7:EB:44:83:26:F5:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hg2fAamLUU69PCcj1_frRIMm9eI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/ln-6qSKwjKbMlXB_9OyxumjGHF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.23.244.0/24
IPv6:
2001:678:558::/48
Signature Algorithm: sha256WithRSAEncryption
0a:31:9c:82:82:da:b5:f9:a1:8d:66:ee:b8:77:ed:63:8b:3b:
da:8c:e2:67:ea:a1:85:9a:f5:4a:34:dd:74:06:98:6d:e1:28:
db:f2:22:4d:33:6f:13:4e:06:85:41:8e:c6:2d:56:f2:71:25:
ce:61:c5:61:87:42:7e:1d:59:e9:d1:0c:4a:d6:54:47:fc:ab:
14:18:da:6b:a7:fa:f0:62:aa:27:33:3f:19:cd:cf:95:54:75:
bf:5c:0b:9c:51:42:31:a3:34:9b:73:5d:25:0c:a8:f4:ae:61:
91:f2:40:e6:3b:ac:ce:9f:8b:1b:05:2f:79:45:6a:13:29:d5:
62:a1:ce:06:e5:92:ef:c7:98:1d:04:52:c6:d5:a0:ec:99:3a:
f6:54:d4:a8:ec:88:e8:07:c8:04:f0:be:c6:7c:8c:0a:23:1f:
2f:4d:34:b5:ed:23:f8:29:de:65:d7:5f:af:33:c0:70:60:41:
74:98:62:ee:db:34:cd:28:ed:9d:03:f5:e9:b9:c1:8c:46:93:
42:b1:e6:98:f7:e9:79:a1:c4:33:cd:37:2b:e6:98:0d:6e:3d:
42:a0:7b:ba:5a:12:25:e6:30:ce:65:85:f2:61:c7:1d:b9:23:
10:02:30:10:4b:8d:16:76:30:1e:8d:e9:69:3b:0d:aa:59:63:
7f:4e:c4:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:55 2024 by rpki-client on console-fra.rpki-client.org