Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/LPTdDbbV-e3m29LcF64c2g0rBAE.roa
File: LPTdDbbV-e3m29LcF64c2g0rBAE.roa (raw, json)
Hash identifier: qxwsLxJSY0vb2MRwTbcxAB80oLwJ1xn2JHDzTbxYqi4=
Subject key identifier: 2C:F4:DD:0D:B6:D5:F9:ED:E6:DB:D2:DC:17:AE:1C:DA:0D:2B:04:01
Certificate issuer: /CN=04f46af885d1ccbb0c09b06870785b5e691787e1
Certificate serial: 018B70CE6378EFB719FE45A0DF54B8F87BFD
Authority key identifier: 04:F4:6A:F8:85:D1:CC:BB:0C:09:B0:68:70:78:5B:5E:69:17:87:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BPRq-IXRzLsMCbBocHhbXmkXh-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/LPTdDbbV-e3m29LcF64c2g0rBAE.roa
Signing time: Fri 27 Oct 2023 11:04:15 +0000
ROA not before: Fri 27 Oct 2023 11:04:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 91.235.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:70:ce:63:78:ef:b7:19:fe:45:a0:df:54:b8:f8:7b:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04f46af885d1ccbb0c09b06870785b5e691787e1
Validity
Not Before: Oct 27 11:04:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2cf4dd0db6d5f9ede6dbd2dc17ae1cda0d2b0401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:50:cf:c5:95:49:04:ec:52:a6:f4:01:0b:78:
8a:dc:d3:50:1d:f8:b2:39:d4:ad:3e:ba:ed:46:de:
8e:f2:ad:61:7b:70:76:49:65:94:b4:b6:f0:5d:88:
06:fa:9e:a8:b0:5a:fb:8a:d5:db:fb:2e:e5:9f:a2:
84:2b:5d:33:5c:38:64:fc:32:48:60:cd:cc:58:9c:
79:d4:d3:92:de:3a:f9:f2:95:9d:bc:fc:39:7a:eb:
2b:18:44:f2:c0:41:b3:4a:23:5d:20:c1:a4:6d:c5:
cc:53:9f:8f:40:e2:a9:e2:89:f0:2f:8c:43:36:b7:
64:d1:49:da:1e:e4:53:17:5a:53:b7:07:9c:57:3e:
47:51:01:d6:ee:29:10:89:5f:66:68:c7:f1:d3:e5:
18:85:4b:aa:92:96:d3:88:35:19:b9:97:2b:ad:26:
8c:a8:39:24:16:14:7c:39:b8:c7:40:63:2e:f9:79:
2f:aa:91:8d:ab:22:9b:30:f1:43:10:df:ec:7b:88:
2d:7c:a6:dd:9d:71:54:6c:c7:76:65:c1:01:dd:01:
2b:f2:94:20:5e:4e:fd:ea:4e:6e:af:a5:36:d8:ca:
fa:39:b2:92:28:7d:b2:67:a0:c4:81:a8:21:ff:69:
51:d2:51:e3:30:6a:db:cf:9c:38:8d:c3:ab:10:8e:
fd:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:F4:DD:0D:B6:D5:F9:ED:E6:DB:D2:DC:17:AE:1C:DA:0D:2B:04:01
X509v3 Authority Key Identifier:
keyid:04:F4:6A:F8:85:D1:CC:BB:0C:09:B0:68:70:78:5B:5E:69:17:87:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BPRq-IXRzLsMCbBocHhbXmkXh-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/LPTdDbbV-e3m29LcF64c2g0rBAE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.235.63.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:e2:03:a5:37:12:43:29:ae:e1:f0:27:6c:1a:79:7d:a1:8c:
25:4f:70:ee:e6:18:01:63:d7:5b:fb:9d:4c:ef:c2:33:1f:1f:
2d:a2:c3:2d:8e:a8:2f:e7:80:a9:b0:0b:e5:1f:59:16:a4:19:
16:18:20:37:ce:7f:41:05:9f:a8:94:25:04:57:ff:14:a5:4c:
64:95:24:09:81:48:7e:2c:34:d8:cc:b7:60:f9:b3:81:f1:18:
b8:fd:e2:76:5b:f0:15:97:f7:6b:bb:e3:96:83:8d:2f:ee:05:
ab:e8:f0:36:1b:e9:ee:d9:30:c5:1c:f7:1c:1d:14:62:07:5f:
31:6b:e5:4c:11:bf:5f:bc:2f:83:ab:7d:19:56:a1:59:25:4d:
97:3f:54:1f:6a:34:a7:c9:85:e1:90:e9:48:67:48:3e:08:ee:
4f:05:a6:aa:81:2a:a5:8b:7f:93:dd:43:7a:68:16:8b:ea:b1:
4a:ce:42:12:56:86:5c:73:56:d3:68:9e:ef:7c:34:d3:c6:82:
e3:02:62:28:c1:9e:f5:29:3c:53:a8:ea:b8:fb:7b:51:18:d5:
d0:1a:91:18:7c:df:7c:f1:aa:a9:19:34:93:64:4e:9e:9d:8c:
f5:28:64:e0:4c:c8:13:d5:d6:0c:3d:00:6f:d1:c3:aa:44:09:
06:cd:53:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:58 2024 by rpki-client on console-fra.rpki-client.org