Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/lGnJl-PyUGLIpKba2eNlYfxEhDM.roa
File: lGnJl-PyUGLIpKba2eNlYfxEhDM.roa (raw, json)
Hash identifier: 416zyUcwmxS9M07K4X/HtC8wulvJh/v7ZJNZMErnAaQ=
Subject key identifier: 94:69:C9:97:E3:F2:50:62:C8:A4:A6:DA:D9:E3:65:61:FC:44:84:33
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 018A4ABA67FBCE9674BB82AE6320741C264E
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/lGnJl-PyUGLIpKba2eNlYfxEhDM.roa
Signing time: Thu 31 Aug 2023 08:34:04 +0000
ROA not before: Thu 31 Aug 2023 08:34:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 85.122.192.0/19 maxlen: 24
85.122.224.0/22 maxlen: 24
85.122.228.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 27 Nov 2023 19:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:4a:ba:67:fb:ce:96:74:bb:82:ae:63:20:74:1c:26:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Aug 31 08:34:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9469c997e3f25062c8a4a6dad9e36561fc448433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:63:ba:ed:bf:a0:e5:8a:2c:5e:f3:d1:bc:70:
c8:7d:fa:30:98:7f:0f:4d:73:41:c2:2f:f9:72:8d:
06:12:95:7c:ba:7b:8b:2a:39:a0:8e:29:cd:13:51:
f2:c7:8a:7a:12:e4:ef:dd:f2:f7:3d:8f:42:30:19:
a8:4c:6c:b7:7f:6b:91:81:fc:c0:98:ed:d7:8f:31:
bc:47:cc:d7:83:43:c0:64:b9:21:f2:f2:f5:f2:e7:
6a:a8:a6:b9:90:b4:ec:bb:6f:05:69:76:b9:54:a6:
21:81:4f:98:a8:32:41:14:50:60:d4:70:87:7b:49:
71:c0:5a:17:31:03:5c:da:fd:32:d7:0e:51:7a:5f:
89:0b:72:f3:e4:dc:20:83:5d:14:31:5a:60:91:bc:
2f:3e:99:b2:37:0b:10:8c:a9:6d:1f:8e:92:e3:3c:
21:0f:0f:a9:28:95:67:17:03:a3:d7:ce:e7:e9:45:
33:d5:2a:db:7c:78:1f:f9:9d:1e:02:1d:28:87:2f:
c9:3e:96:21:7c:58:f1:49:cb:f2:c7:c3:71:0e:ca:
06:95:ec:2f:0f:cf:36:20:1e:24:29:65:af:42:d2:
c5:cd:b9:a0:ce:1a:5d:7c:0c:bc:66:d1:c3:b6:84:
07:1a:a1:52:df:30:2e:ed:f9:58:34:4a:76:5e:1c:
05:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:69:C9:97:E3:F2:50:62:C8:A4:A6:DA:D9:E3:65:61:FC:44:84:33
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/lGnJl-PyUGLIpKba2eNlYfxEhDM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.122.192.0-85.122.228.255
Signature Algorithm: sha256WithRSAEncryption
7d:7f:7c:8c:68:57:b8:e6:67:ce:c5:08:8d:87:fc:77:52:f7:
65:8d:86:ca:cc:c1:95:df:87:f4:08:2c:3b:1f:25:80:4e:8c:
47:25:2d:d0:c6:1a:ed:4f:f5:9d:dc:d9:b5:9e:72:e2:06:ca:
fa:16:ed:2c:4b:3a:59:e2:f7:cd:6a:ca:53:c7:1e:ed:1b:9b:
8e:2f:ca:a7:6a:60:f3:1e:1d:43:01:5c:91:27:4d:84:41:8e:
a1:b4:57:6f:d2:9d:af:24:46:25:fa:d7:15:30:d9:74:98:27:
11:b3:1b:cd:69:9f:08:a5:e1:a9:f4:82:4a:b2:58:ac:0a:30:
d8:ea:8a:f8:9f:33:05:64:76:3b:61:e0:73:1f:f3:08:bd:d5:
a2:ee:cc:b3:39:ff:45:7c:1e:cd:17:7a:65:49:3d:fe:06:22:
5c:37:a8:84:a5:94:5e:f6:ba:ec:3c:9f:7b:f8:43:be:10:4e:
c0:27:d3:61:92:8d:fc:b9:78:e4:8d:f6:36:c7:d0:46:ab:0f:
86:99:31:21:e1:38:80:6d:db:3f:48:86:c2:0d:8d:87:49:c3:
db:78:ac:6a:83:e7:1c:03:ee:0a:07:8b:c5:88:75:5a:b8:82:
75:cf:bc:22:7c:b5:22:de:b6:27:44:26:2a:52:0e:8e:ef:18:
3a:b4:20:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:22 2024 by rpki-client on console-fra.rpki-client.org