Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/LxbPb9Tzjc4dW3ezbRogMmFIxvU.roa
File: LxbPb9Tzjc4dW3ezbRogMmFIxvU.roa (raw, json)
Hash identifier: nYKsD40tsCPPjGW3ZH29jB+gXpsSQS7o88H7B9Z0SCs=
Subject key identifier: 2F:16:CF:6F:D4:F3:8D:CE:1D:5B:77:B3:6D:1A:20:32:61:48:C6:F5
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 018CC5011C64AC69C0CEB760D5CB48FC18D8
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/LxbPb9Tzjc4dW3ezbRogMmFIxvU.roa
Signing time: Mon 01 Jan 2024 12:30:33 +0000
ROA not before: Mon 01 Jan 2024 12:30:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205585
IP address blocks: 193.109.137.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 23 Mar 2024 17:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:1c:64:ac:69:c0:ce:b7:60:d5:cb:48:fc:18:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Jan 1 12:30:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2f16cf6fd4f38dce1d5b77b36d1a20326148c6f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:0b:48:ed:61:e8:15:3f:ef:2d:91:1b:13:e0:
6b:c4:d4:bb:d7:da:fe:1b:2e:28:b0:39:ec:b7:1e:
53:5c:fd:19:2f:63:52:c2:36:5a:cf:1b:9f:2e:31:
45:b3:10:97:33:71:c1:63:47:0e:63:f9:90:73:29:
b9:30:0c:18:2d:d7:75:c5:a5:45:07:e0:a8:b2:f9:
dd:34:65:10:7f:43:03:19:f7:e1:e5:d9:db:0f:f9:
cc:c0:f9:12:30:51:1a:f1:66:13:b0:d5:4a:2b:5f:
50:40:93:cd:4a:6b:fb:5a:e5:c6:a9:62:5f:bc:13:
e2:9d:7d:19:55:d7:44:4d:73:f1:2b:65:ac:47:30:
5e:0d:7d:9d:5c:c1:d5:5d:4a:88:3e:ac:3d:96:cd:
15:13:21:ad:5b:19:ce:44:ad:ce:a0:78:2b:15:87:
01:83:5b:82:e6:d1:50:8d:e6:bd:15:f8:59:ae:77:
c9:42:76:34:d6:d0:a3:96:6d:99:e8:4b:82:8c:45:
07:4e:ca:93:57:4b:fe:c1:be:a2:e3:6e:dc:aa:7e:
fe:19:0f:d6:91:d5:be:8e:61:68:6a:80:36:72:20:
8b:51:22:51:a2:b6:e1:e5:6e:e8:ae:58:f5:15:d0:
c4:28:6a:60:99:99:5e:fc:46:f7:62:4a:fd:9b:a4:
e2:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:16:CF:6F:D4:F3:8D:CE:1D:5B:77:B3:6D:1A:20:32:61:48:C6:F5
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/LxbPb9Tzjc4dW3ezbRogMmFIxvU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.137.0/24
Signature Algorithm: sha256WithRSAEncryption
58:de:a8:3b:6e:41:3a:6c:cb:12:d8:7b:ca:cd:06:c4:72:78:
0b:af:e9:8e:f0:9d:7f:7f:b1:bd:4c:e5:f1:37:8a:71:b7:da:
ad:b9:6f:58:4f:78:50:9b:5d:42:05:87:98:84:42:a7:01:15:
27:4a:cc:49:eb:0f:8e:82:7b:c6:0b:b0:73:49:d9:26:67:e1:
e5:87:ed:8b:40:2c:5b:fd:e2:69:65:44:e6:33:23:92:a1:ca:
fd:4e:81:66:bf:be:6c:6b:92:21:3f:91:3d:c1:28:9f:85:52:
b8:72:81:71:2c:a1:1a:7a:ac:3a:14:e6:44:47:68:2f:3b:ce:
d0:1b:7c:55:c8:a5:d6:1d:32:f5:fa:7f:c5:13:c6:c2:78:f1:
5a:2f:e9:5e:81:91:5b:8e:93:fe:86:f9:03:5a:e0:5f:45:f3:
ba:f0:94:5a:43:59:d4:52:69:12:13:69:99:db:3b:3e:b8:82:
ad:dd:ad:f6:61:25:59:46:2f:b7:28:6f:85:9d:a0:57:44:e7:
8e:80:83:79:e1:56:fd:fe:83:e4:87:fa:4e:82:f4:f1:28:4b:
f9:b5:4e:4d:c2:20:37:59:3a:b2:f2:78:9e:72:20:d5:f5:66:
4b:41:f1:a7:c4:b7:22:e1:83:4e:39:2c:09:4b:c2:46:2c:4f:
57:c4:79:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:17 2024 by rpki-client on console-ams.rpki-client.org