Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/lVeZRANDF9LpWa7mnj6A2iYAQLY.roa
File: lVeZRANDF9LpWa7mnj6A2iYAQLY.roa (raw, json)
Hash identifier: p5lL47cBjgid/IRKE1V3GyTFAjzVAOrYkMzH9we+dkc=
Subject key identifier: 95:57:99:44:03:43:17:D2:E9:59:AE:E6:9E:3E:80:DA:26:00:40:B6
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018E6581705A5F9B3368BFDF215016EC2A21
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/lVeZRANDF9LpWa7mnj6A2iYAQLY.roa
Signing time: Fri 22 Mar 2024 09:32:45 +0000
ROA not before: Fri 22 Mar 2024 09:32:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25198
IP address blocks: 195.177.92.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 26 Mar 2024 16:49:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:65:81:70:5a:5f:9b:33:68:bf:df:21:50:16:ec:2a:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Mar 22 09:32:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=95579944034317d2e959aee69e3e80da260040b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:21:d7:b6:07:42:3c:6a:37:9f:ed:b8:38:96:
11:27:65:1b:d6:60:98:43:32:57:a9:1c:8b:60:c7:
cc:3f:91:05:c1:bf:4c:04:da:19:11:de:16:df:74:
f9:09:52:ab:4c:42:6d:f8:95:58:f3:0a:4e:34:ca:
01:2a:50:9c:c8:29:ff:c7:7a:c8:f9:d6:4f:32:7d:
3b:a4:97:b0:16:c9:6e:54:a7:67:24:9b:69:b8:f4:
7c:28:dc:d1:68:7e:70:d3:18:53:4e:1d:b8:35:5e:
da:73:60:cc:4d:e7:e9:86:b5:2f:9d:77:82:65:96:
cd:5e:cc:ab:41:c4:5a:42:ba:c9:9b:3d:dc:1b:cc:
7c:06:8d:ad:c1:d7:b9:d1:9c:61:ce:69:ba:4d:e9:
7d:78:d9:f7:eb:4f:fb:f6:42:45:fc:44:55:e3:93:
74:ff:56:ca:da:ca:cf:bd:c2:df:f9:c1:85:30:58:
31:e1:dc:b0:fd:c4:bc:8d:89:ce:d2:e0:7a:98:62:
77:d0:b0:79:1a:9b:04:24:2f:1b:89:17:35:1b:f5:
bb:5d:de:6c:b8:36:e7:12:b0:6d:61:19:60:fd:15:
c2:3c:2e:2f:39:5f:d9:e0:25:b3:39:85:c3:3c:33:
68:62:cf:eb:54:03:a2:26:8d:08:a1:e9:c4:7b:76:
8b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:57:99:44:03:43:17:D2:E9:59:AE:E6:9E:3E:80:DA:26:00:40:B6
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/lVeZRANDF9LpWa7mnj6A2iYAQLY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.177.92.0/24
Signature Algorithm: sha256WithRSAEncryption
84:be:fb:c7:ab:e3:ec:cb:ff:e4:08:ad:3a:1d:f5:c4:24:6d:
c1:c1:89:fc:3b:d5:ad:76:15:56:5d:de:72:8f:d2:29:5a:d9:
f8:a9:60:cb:7b:a1:32:d9:74:23:69:00:fc:c9:85:ea:ac:5b:
64:fc:3e:ac:34:d5:07:5a:1d:f4:c1:27:27:e0:f3:43:4c:17:
c8:e7:f5:4e:dd:39:56:f2:3a:48:85:a1:32:52:74:39:82:78:
30:e6:0d:c1:13:0c:72:0a:82:0d:d5:68:5c:03:e5:83:e0:35:
ad:a8:6d:8e:c0:23:d0:3f:48:22:7a:a3:57:23:57:cf:e1:f8:
e6:83:33:3d:2f:ae:1e:f6:81:6f:67:04:7d:26:f8:42:82:09:
21:bf:a9:59:9b:e1:aa:2e:96:cf:33:3a:51:e2:7f:48:68:c6:
27:ea:31:7c:b2:85:0e:c1:74:c7:05:80:c7:c7:fc:ff:23:f2:
20:e7:4c:0e:88:91:ed:98:a5:ed:6c:8b:f4:4a:86:6b:83:75:
d2:60:32:39:d7:7a:17:c6:ca:ef:04:67:64:c3:e2:2d:28:78:
72:d9:36:1a:20:08:2a:1c:94:6c:94:db:10:78:b4:bd:df:5b:
f0:4b:cc:8f:8c:02:54:87:90:69:40:cc:8c:5b:40:99:8c:af:
3d:c0:8d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 26 20:00:24 2024 by rpki-client on console-ams.rpki-client.org