Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/LSPfGJasuronUlb_rUic9tjw33I.roa
File: LSPfGJasuronUlb_rUic9tjw33I.roa (raw, json)
Hash identifier: JEzbn4+zvbnOTvRwT8r9xzWNeyyMcd25/xhr42xx4/k=
Subject key identifier: 2D:23:DF:18:96:AC:BA:BA:27:52:56:FF:AD:48:9C:F6:D8:F0:DF:72
Certificate issuer: /CN=b91464767773f1239b646bb66bdcf4f7fb1206ce
Certificate serial: 018CC5DC3AB47F792C63E6F6D2B944C805EB
Authority key identifier: B9:14:64:76:77:73:F1:23:9B:64:6B:B6:6B:DC:F4:F7:FB:12:06:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRRkdndz8SObZGu2a9z09_sSBs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/LSPfGJasuronUlb_rUic9tjw33I.roa
Signing time: Mon 01 Jan 2024 16:29:53 +0000
ROA not before: Mon 01 Jan 2024 16:29:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202651
IP address blocks: 91.192.6.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 18 Aug 2024 12:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:3a:b4:7f:79:2c:63:e6:f6:d2:b9:44:c8:05:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b91464767773f1239b646bb66bdcf4f7fb1206ce
Validity
Not Before: Jan 1 16:29:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2d23df1896acbaba275256ffad489cf6d8f0df72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:d1:19:4f:f6:72:c7:7e:42:6e:53:76:24:51:
2e:23:f6:07:fc:a3:4a:4b:4e:b3:ef:e5:10:00:22:
81:2b:f0:97:53:a6:97:54:74:10:43:1b:c4:da:ef:
11:53:87:bd:6a:17:9f:39:92:e3:2d:86:9a:4d:bc:
41:98:73:69:dc:16:56:82:3a:e3:8a:e3:60:7b:1a:
fd:c3:b1:3a:05:0b:d1:c0:04:a0:c1:52:40:60:a5:
ef:2c:71:bc:b2:b4:be:43:bf:cc:6b:f7:10:c8:6c:
9e:f8:47:3e:b3:0f:f1:eb:01:a6:e2:c5:69:89:fc:
7f:32:e4:03:25:d2:c6:9d:ae:30:ed:a4:ae:10:b4:
04:d6:db:9f:94:cb:3c:d4:5c:78:91:fa:5c:42:f3:
43:75:d5:28:87:0f:41:e0:39:4f:ac:fa:db:32:39:
d5:bd:01:8a:f5:15:ae:b1:6f:f7:e4:a2:2c:82:d9:
98:5d:57:0e:2a:df:f1:39:09:c5:05:71:c5:1b:9f:
8a:c6:b6:7d:b4:6e:6d:ee:61:c0:80:89:2c:93:85:
38:3c:2b:dd:7c:79:88:a4:2f:31:8e:ca:a3:24:b7:
52:da:b4:28:31:62:11:ac:4d:2a:dc:7a:43:8d:f8:
50:e3:06:4a:9d:ec:5c:18:98:5b:11:09:ab:e3:b4:
51:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:23:DF:18:96:AC:BA:BA:27:52:56:FF:AD:48:9C:F6:D8:F0:DF:72
X509v3 Authority Key Identifier:
keyid:B9:14:64:76:77:73:F1:23:9B:64:6B:B6:6B:DC:F4:F7:FB:12:06:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRRkdndz8SObZGu2a9z09_sSBs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/LSPfGJasuronUlb_rUic9tjw33I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.192.6.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:05:cd:6c:07:8b:2b:9a:7a:c2:b4:ba:33:47:8b:db:8b:b6:
01:6f:98:9e:7d:6f:88:6e:3a:4a:12:af:6a:7d:b3:99:0f:0d:
38:ab:3d:77:b4:a9:11:09:0b:2d:fa:98:56:67:39:0a:97:cf:
23:86:96:8d:c2:ca:a5:1a:3e:fc:f6:63:b5:8a:9c:57:6f:0a:
0c:c2:fe:27:48:14:20:2e:b7:a6:fa:99:45:53:25:11:1a:96:
b2:9d:49:69:a9:1a:55:53:eb:ae:b1:2e:c0:12:54:ef:f9:29:
02:b1:b4:c3:34:05:fe:ff:a6:7f:8c:1a:ae:47:f7:45:97:32:
64:38:12:f2:c2:0b:22:55:34:dd:c5:3c:4d:01:4e:e9:5d:57:
8a:b9:3f:ec:82:2c:d7:b1:3e:7b:b7:77:0e:a5:0d:6e:72:4a:
98:26:ea:75:88:cd:52:e8:ac:6f:bf:00:ad:2c:4c:ac:16:93:
9d:63:7b:24:d4:88:e1:8d:88:cb:ef:17:07:4e:77:66:b8:3a:
33:a2:d6:05:e9:0f:cd:56:56:34:87:35:72:4f:7a:2a:69:61:
71:5f:40:be:ec:b6:45:b9:1b:de:7f:c3:ce:8b:1f:0c:ec:34:
88:4e:4a:e2:4f:91:3f:5c:8c:eb:35:ec:7e:15:9b:42:c6:46:
63:f3:03:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 18 14:32:54 2024 by rpki-client on console-fra.rpki-client.org