Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/LBU7oIgLdBez5fb1LM1NSPIGP5I.roa
File: LBU7oIgLdBez5fb1LM1NSPIGP5I.roa (raw, json)
Hash identifier: jCgQK2qB3eEpdiZplD8XHkrZIAiKKZ62XgLSZp46SGE=
Subject key identifier: 2C:15:3B:A0:88:0B:74:17:B3:E5:F6:F5:2C:CD:4D:48:F2:06:3F:92
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 01863FFC5B8C8F3277A2E502ECA5DC87A3D6
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/LBU7oIgLdBez5fb1LM1NSPIGP5I.roa
Signing time: Sat 11 Feb 2023 10:19:08 +0000
ROA not before: Sat 11 Feb 2023 10:19:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 46.243.76.0/22 maxlen: 22
92.119.164.0/22 maxlen: 22
77.83.32.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 22 Mar 2023 15:41:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:3f:fc:5b:8c:8f:32:77:a2:e5:02:ec:a5:dc:87:a3:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Feb 11 10:19:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2c153ba0880b7417b3e5f6f52ccd4d48f2063f92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:57:83:d9:7f:66:1a:ba:22:3b:76:a0:b7:c6:
6e:26:be:b7:87:d7:0c:49:da:be:6a:35:d2:dd:59:
83:85:08:8b:7b:2e:4e:fb:6c:c7:1c:46:30:4a:e3:
63:a7:e8:42:8b:14:d1:23:99:3e:3b:bf:d0:5b:8e:
1c:2e:cf:de:85:47:a6:27:25:5d:88:e0:96:ab:50:
eb:ae:09:18:ae:ff:89:92:ca:05:61:25:08:bc:40:
b7:fb:02:2b:5c:73:9f:1d:9a:0c:e5:c6:e4:73:fd:
b7:77:37:7b:d5:c3:b7:4e:8d:64:aa:f0:9a:16:0d:
32:66:44:22:b1:ed:9c:fa:20:ec:e3:0d:79:40:74:
0e:c2:ba:9e:21:ac:af:54:80:77:29:fc:44:44:f3:
8c:05:89:b4:80:55:05:77:b4:a2:c6:14:17:56:41:
b6:40:79:d8:d6:af:dd:c6:ca:f9:68:d8:b9:b2:57:
09:f9:75:5e:75:ee:14:b6:ad:42:87:f7:19:1b:fe:
9b:ca:bd:d7:a9:e7:b2:4f:d8:ad:52:cb:1c:ec:41:
1c:5c:f6:a4:4d:77:61:a9:d4:3f:c8:1b:c9:ef:53:
97:bc:0d:e0:0a:30:7c:9d:ce:63:77:70:ca:f3:96:
90:be:33:3e:6f:f4:f0:4a:be:eb:49:8d:16:50:59:
01:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:15:3B:A0:88:0B:74:17:B3:E5:F6:F5:2C:CD:4D:48:F2:06:3F:92
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/LBU7oIgLdBez5fb1LM1NSPIGP5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.76.0/22
77.83.32.0/22
92.119.164.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:91:14:a4:bb:e7:22:e2:8e:53:ab:c3:42:15:b5:12:64:cb:
2b:7b:06:72:64:bc:a1:55:f7:a2:c6:df:07:51:e3:92:3d:5d:
4c:82:54:76:dc:82:ef:bc:9a:e9:10:10:72:03:16:d5:df:6d:
95:ec:b2:19:f6:b8:76:30:dd:06:41:b0:58:44:52:13:68:6c:
04:4d:d7:60:44:b5:94:b8:11:86:c8:40:73:f3:a3:5d:a1:53:
77:ab:33:4b:20:1d:b1:d4:5b:5f:46:e8:83:c6:b5:fc:19:c6:
5d:e5:02:10:be:38:8c:4e:22:0c:3a:79:37:4a:8f:6e:d6:f9:
88:4c:2d:0d:8d:0e:46:11:10:21:40:b9:dd:da:58:6b:d4:f2:
15:3d:57:4f:16:fb:c5:8c:a2:b2:57:4d:aa:e4:d2:f6:9e:bd:
c7:eb:f8:b1:5c:37:ef:0e:81:8c:ef:24:55:c0:71:8b:df:74:
4f:b3:2d:31:f9:8e:95:c3:de:9d:a1:d3:f4:4d:da:02:16:7d:
35:52:df:11:6c:6d:83:76:13:0a:4d:07:95:d7:21:03:72:e0:
ce:0b:6c:40:dc:83:df:78:7d:9e:6d:df:f1:3b:9f:04:4a:39:
56:bd:75:9e:02:f5:04:66:f4:18:e5:59:21:4c:78:21:46:83:
49:a6:2b:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:13 2024 by rpki-client on console-ams.rpki-client.org