Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/_lpbn_HHuTbNDZIGFCHX-QsDQ_0.roa
File: _lpbn_HHuTbNDZIGFCHX-QsDQ_0.roa (raw, json)
Hash identifier: lGem13afdU5wtoGIDAkY5hEBrQoNVa6aIQ4ckz5E9vY=
Subject key identifier: FE:5A:5B:9F:F1:C7:B9:36:CD:0D:92:06:14:21:D7:F9:0B:03:43:FD
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01856F14FF0BA20C8DE9684D0DAF1DA1C353
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/_lpbn_HHuTbNDZIGFCHX-QsDQ_0.roa
Signing time: Sun 01 Jan 2023 20:45:24 +0000
ROA not before: Sun 01 Jan 2023 20:45:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48571
IP address blocks: 81.181.168.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:14:ff:0b:a2:0c:8d:e9:68:4d:0d:af:1d:a1:c3:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 20:45:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fe5a5b9ff1c7b936cd0d92061421d7f90b0343fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fe:bc:73:65:de:fe:ae:f8:15:06:6c:d8:7e:
6e:ab:04:b2:1e:db:1b:11:9f:f6:dd:c7:c5:3f:b0:
e5:35:c7:81:0c:5b:e7:30:8b:f6:45:83:c4:b9:4f:
70:03:1b:2c:52:f2:fd:de:ba:e4:7c:90:d8:b5:37:
6c:99:16:30:26:79:b2:c5:1f:23:d6:ff:b6:f4:f9:
ef:65:19:a3:74:4d:c7:1f:ca:34:d4:b4:16:9d:72:
9f:a5:ca:91:0a:c3:c4:52:b9:a7:22:8b:d4:45:c6:
ed:dd:27:84:c0:03:4e:0b:26:93:b5:f4:96:67:c8:
2b:cd:04:8c:77:19:79:45:7b:49:e9:dd:a0:d3:08:
b9:9c:d8:85:9d:ef:12:56:14:e1:84:7e:f0:0d:94:
0f:63:28:15:41:b7:e7:71:8d:6b:7d:f7:a0:63:dc:
b0:71:35:b8:b4:db:f4:4a:14:54:fc:5d:e4:54:1c:
2f:15:cd:83:f5:28:6b:e8:6d:8b:ce:22:66:ff:0b:
11:3d:df:bb:70:98:77:73:d8:8c:c6:53:f0:5c:32:
5e:ba:9c:76:de:87:d1:46:fc:6d:b5:4c:0a:3b:5c:
6a:8a:a4:71:a1:7c:39:a2:a8:91:fc:72:40:57:4d:
63:61:e2:b5:63:56:27:8a:b7:9a:fe:de:0c:dc:cf:
ea:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:5A:5B:9F:F1:C7:B9:36:CD:0D:92:06:14:21:D7:F9:0B:03:43:FD
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/_lpbn_HHuTbNDZIGFCHX-QsDQ_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.181.168.0/23
Signature Algorithm: sha256WithRSAEncryption
76:c3:62:ed:c5:cc:5b:e9:06:8b:20:e8:e7:f3:2b:14:89:3a:
52:ab:e1:36:ce:2e:0d:17:b6:6c:16:5e:5d:1a:63:db:d0:d4:
1f:75:9d:55:3b:4a:4f:d0:8c:99:fd:73:51:12:ee:f8:3b:6f:
e4:c3:54:ad:05:f8:c8:b5:3b:c8:f0:42:52:fe:aa:f9:9c:d1:
19:67:cd:99:56:d7:26:7d:04:74:29:72:e2:31:ce:2b:cf:e6:
90:21:aa:7b:1d:b2:c7:3e:b0:c3:4c:5c:cb:b8:05:fc:d9:a1:
cc:de:b4:3e:0d:05:93:cc:a4:ef:b0:dd:b1:93:3f:59:c0:b9:
be:6d:98:95:6b:52:d1:7c:77:b1:4b:13:ca:40:0f:be:42:52:
48:55:f0:b8:b4:68:3b:d5:df:aa:10:fb:c9:5c:96:6a:07:f5:
f8:7f:b9:b3:99:8d:fa:0a:3a:92:24:e0:e3:46:5b:c0:ef:6c:
7a:65:af:93:f8:a2:21:32:e5:14:d9:f3:3f:e7:d1:d5:1b:8a:
76:f9:93:03:f1:5b:85:85:3b:ee:dd:36:07:52:00:c9:cf:34:
8d:93:3f:54:a4:6b:4f:dd:ad:a3:8e:27:b4:df:dc:1c:f3:8f:
18:62:ea:92:f4:9d:42:6d:cb:ad:1d:70:19:49:bc:5b:08:ea:
50:74:a7:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:05 2024 by rpki-client on console-ams.rpki-client.org