Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/lte51S8iZoiFCKvGucJRgG_quJQ.roa
File: lte51S8iZoiFCKvGucJRgG_quJQ.roa (raw, json)
Hash identifier: XZQTy0WbBeZlmotetOASjSTezI0GN6SdFg7QlAO9Ex0=
Subject key identifier: 96:D7:B9:D5:2F:22:66:88:85:08:AB:C6:B9:C2:51:80:6F:EA:B8:94
Certificate issuer: /CN=c588a079e4ceb6bb24c23c5271e4583e1cf2f9a9
Certificate serial: 01856F391CFCB52E9010A42B7ED547C9D2DD
Authority key identifier: C5:88:A0:79:E4:CE:B6:BB:24:C2:3C:52:71:E4:58:3E:1C:F2:F9:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xYigeeTOtrskwjxSceRYPhzy-ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/lte51S8iZoiFCKvGucJRgG_quJQ.roa
Signing time: Sun 01 Jan 2023 21:24:51 +0000
ROA not before: Sun 01 Jan 2023 21:24:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42083
IP address blocks: 185.208.100.0/24 maxlen: 24
185.208.101.0/24 maxlen: 24
185.208.103.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 21 Jul 2023 09:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:39:1c:fc:b5:2e:90:10:a4:2b:7e:d5:47:c9:d2:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c588a079e4ceb6bb24c23c5271e4583e1cf2f9a9
Validity
Not Before: Jan 1 21:24:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=96d7b9d52f2266888508abc6b9c251806feab894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9e:af:d1:7e:27:de:c3:0e:f7:10:24:55:b0:
46:fd:c6:69:77:78:53:3c:31:6d:66:08:65:54:e6:
2b:83:7d:8b:05:2e:87:80:61:14:ab:f4:3c:13:57:
44:20:e8:56:50:7b:5e:78:28:d1:9b:72:4a:17:c1:
eb:be:40:a0:e0:9f:8c:46:07:96:31:12:17:8c:42:
da:37:50:b7:29:4b:08:74:fe:6c:04:46:e0:2f:27:
e1:b5:08:e0:19:45:d9:7d:6a:9a:ed:44:39:42:57:
2f:1b:bd:83:23:0c:ee:1e:48:27:19:38:a1:15:c8:
24:33:a0:e1:aa:27:90:45:90:11:c8:88:ea:8a:69:
2a:ea:af:4a:a2:38:4b:bf:be:77:a2:5c:a5:92:5a:
fb:9b:b2:4d:7e:ce:78:ad:8e:2e:da:01:2a:26:25:
31:98:91:ea:97:dc:5b:f5:fd:56:20:ae:44:f0:79:
21:f6:f0:13:ce:b7:4f:97:ca:9e:de:bf:16:48:03:
86:94:3b:92:f2:05:f8:c3:3d:16:44:be:46:85:d9:
d7:9e:16:0b:5a:23:73:bd:b5:fe:96:a3:a7:5b:13:
bd:1a:2d:a4:f4:11:d6:fc:8f:7e:c9:e7:65:0b:77:
9e:01:e9:cf:aa:84:eb:88:11:80:76:e8:06:5f:27:
15:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:D7:B9:D5:2F:22:66:88:85:08:AB:C6:B9:C2:51:80:6F:EA:B8:94
X509v3 Authority Key Identifier:
keyid:C5:88:A0:79:E4:CE:B6:BB:24:C2:3C:52:71:E4:58:3E:1C:F2:F9:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xYigeeTOtrskwjxSceRYPhzy-ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/lte51S8iZoiFCKvGucJRgG_quJQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.208.100.0/23
185.208.103.0/24
Signature Algorithm: sha256WithRSAEncryption
71:83:77:5f:12:d0:73:09:04:1c:0d:ec:a6:21:31:5f:92:62:
d0:da:41:a9:66:1f:57:c1:b2:f8:a4:8f:5e:45:67:12:b8:45:
be:f9:70:c6:44:f0:c3:9f:e4:2a:64:cd:29:16:66:dc:24:d5:
ca:ef:57:d3:95:4d:85:b3:98:2e:18:8e:9f:04:17:1b:bd:35:
35:86:a1:70:ce:7c:70:d1:66:81:b5:4a:4a:08:a0:fc:47:d0:
05:97:0d:85:f0:03:1b:9a:12:68:7c:8a:5f:0f:8f:4b:2f:a7:
15:9d:af:9d:de:cc:50:cb:07:00:3e:c7:24:27:27:42:e7:f6:
a9:e1:45:69:82:3a:41:f4:cb:3c:7e:23:e0:fd:db:b1:9b:27:
b5:10:b9:60:46:80:24:31:15:47:3c:74:c2:ab:c3:9c:6e:4a:
6a:9d:58:a8:86:16:c6:e1:3c:78:14:cc:1a:58:0d:e8:64:c8:
d5:01:16:d3:3f:23:b3:ee:2a:d5:f4:44:3c:c9:2b:ef:72:bd:
9f:18:4a:09:b2:1c:b4:85:28:f7:69:42:9a:6c:1c:b4:dc:89:
46:2b:cf:9a:70:b4:a9:68:6a:d1:6b:77:db:97:07:42:be:2a:
e0:a6:35:f7:41:c1:6c:88:4a:6a:ef:86:e7:3a:f4:2d:2a:b0:
04:b7:d1:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:17 2024 by rpki-client on console-ams.rpki-client.org