Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/LU9TJt2LL7iufA1fezTStu_nbgo.roa
File: LU9TJt2LL7iufA1fezTStu_nbgo.roa (raw, json)
Hash identifier: ZLG7AEVpbFh4VQfCGS/bSc3rX2rZrDe2ycNcXspgGPQ=
Subject key identifier: 2D:4F:53:26:DD:8B:2F:B8:AE:7C:0D:5F:7B:34:D2:B6:EF:E7:6E:0A
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01856F15110BE82D6912FDF5885FA2CDC3F5
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/LU9TJt2LL7iufA1fezTStu_nbgo.roa
Signing time: Sun 01 Jan 2023 20:45:29 +0000
ROA not before: Sun 01 Jan 2023 20:45:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210840
IP address blocks: 85.120.22.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:15:11:0b:e8:2d:69:12:fd:f5:88:5f:a2:cd:c3:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 20:45:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2d4f5326dd8b2fb8ae7c0d5f7b34d2b6efe76e0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0b:11:14:f8:6c:7d:00:51:83:9a:03:9d:41:
ac:35:bd:31:77:6a:7e:b5:bc:ef:35:14:59:a9:86:
49:8b:88:08:ca:9c:39:99:90:93:95:5d:6a:85:e5:
9f:57:4b:39:75:6e:7c:41:b5:77:3d:06:be:e2:37:
23:70:7f:3d:70:7e:e4:0c:89:41:70:8c:f4:40:68:
b0:9c:fc:bd:bc:40:52:58:4e:02:44:8a:49:3d:13:
4e:3a:13:41:15:9a:f2:ff:96:06:7a:d3:64:8c:61:
a0:b3:8b:e9:86:56:b5:66:23:74:28:1b:7a:46:7d:
2d:b8:d8:86:04:2e:5e:92:03:85:b0:1f:bf:b4:3a:
2b:84:22:d9:ce:9a:04:99:f2:e7:bd:bc:d8:7d:ec:
6a:07:6d:b6:4b:a6:ec:12:a4:53:d4:37:8c:ae:12:
87:c7:e9:af:27:b3:e1:e9:d0:b0:11:31:7c:41:a4:
1f:d9:4c:35:8c:bc:3e:27:66:0d:1d:3e:12:b8:47:
fd:25:57:f0:b4:1b:0a:19:c4:cf:27:11:02:e8:04:
73:ff:c1:22:b1:46:06:c9:76:4f:9b:0f:b2:da:36:
0f:29:e7:0e:fa:1e:1f:f5:af:06:61:12:68:77:78:
b5:36:5a:c0:74:b1:44:9b:fa:6a:38:0f:b2:b9:d0:
f4:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:4F:53:26:DD:8B:2F:B8:AE:7C:0D:5F:7B:34:D2:B6:EF:E7:6E:0A
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/LU9TJt2LL7iufA1fezTStu_nbgo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.120.22.0/24
Signature Algorithm: sha256WithRSAEncryption
83:1f:84:f3:59:87:9c:02:a5:3d:65:f6:76:78:eb:59:4b:f8:
98:ed:be:3e:c2:a6:40:21:93:03:2d:f8:78:ef:7c:5c:e8:a8:
b8:7e:c8:8d:f5:fa:37:39:1a:c2:f3:aa:aa:bb:82:d2:52:cf:
16:bb:af:a7:5d:08:09:67:90:58:2f:85:99:c6:3e:ce:ef:7c:
a0:af:d0:a3:16:24:b0:3e:fd:42:87:6a:46:14:eb:01:28:3e:
44:2c:4b:4d:c3:37:15:92:27:3c:49:cd:e7:48:3b:7c:09:7a:
aa:c0:c7:c6:3c:f1:be:f4:21:cd:6e:6e:97:73:cf:a8:b6:6f:
87:f1:85:e0:28:50:3c:27:82:00:10:18:e2:ab:c4:8b:fc:1a:
8c:ba:ab:ee:eb:63:84:3e:3a:fc:7f:18:98:c8:37:13:7e:22:
e8:ae:de:f6:00:b3:ce:91:75:ac:5b:ef:94:a2:31:ec:79:bd:
44:c3:58:61:c3:81:0d:7e:ca:d5:39:dc:37:aa:be:bc:0c:e6:
c2:0a:48:14:80:ba:40:a5:a7:59:af:da:4a:7a:1c:60:5a:3c:
2c:9e:68:e8:d7:66:3b:53:1c:e9:b6:c0:f5:8f:2a:90:c4:a4:
11:ab:24:45:0e:62:d4:f9:8a:00:ab:09:91:38:f5:ac:8a:2b:
c9:21:9b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:18:48 2024 by rpki-client on console-ams.rpki-client.org