Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/LlOD22t71vmN-FDrBwmvqfoma70.roa
File: LlOD22t71vmN-FDrBwmvqfoma70.roa (raw, json)
Hash identifier: EyxMT0apwjTZhdVJ87u59d/aIgnZXrsRkk7wEcKVwtw=
Subject key identifier: 2E:53:83:DB:6B:7B:D6:F9:8D:F8:50:EB:07:09:AF:A9:FA:26:6B:BD
Certificate issuer: /CN=d3c35bc9b7f8550be3e467c54a9d3a66e2443bd4
Certificate serial: 0192358A4CC96DCE767C98C968C8B7EBB87F
Authority key identifier: D3:C3:5B:C9:B7:F8:55:0B:E3:E4:67:C5:4A:9D:3A:66:E2:44:3B:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/LlOD22t71vmN-FDrBwmvqfoma70.roa
Signing time: Fri 27 Sep 2024 22:11:48 +0000
ROA not before: Fri 27 Sep 2024 22:11:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215287
IP address blocks: 91.246.55.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 29 Oct 2024 07:33:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:35:8a:4c:c9:6d:ce:76:7c:98:c9:68:c8:b7:eb:b8:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3c35bc9b7f8550be3e467c54a9d3a66e2443bd4
Validity
Not Before: Sep 27 22:11:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2e5383db6b7bd6f98df850eb0709afa9fa266bbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f5:80:c2:0f:aa:08:7d:46:dd:4b:66:66:bd:
34:a8:81:df:b7:ca:27:22:b5:89:48:bd:9d:11:8f:
c8:ac:55:0e:b6:ab:68:62:e9:76:50:f9:82:71:70:
42:0e:5f:25:0c:04:b9:8b:f8:a1:f3:90:b4:27:b4:
07:e3:cc:93:b6:f5:1e:75:e9:b8:4c:51:10:e6:18:
a9:ae:30:c3:2b:af:d5:08:ba:8d:34:df:f1:d8:95:
7d:93:7e:d7:da:bb:8a:ed:d1:20:22:36:d1:e8:60:
9f:39:8d:ab:d3:e9:2e:64:b6:d3:23:00:65:37:12:
04:59:11:fe:5d:53:e8:89:3d:2d:b7:ec:e2:7e:b0:
d7:63:5c:8c:5f:67:8a:b4:7a:a6:0c:ae:f2:c9:f6:
b2:22:c7:70:7a:15:b7:53:f7:97:93:e6:92:28:93:
e8:9f:41:e6:8b:e2:47:c6:86:ca:88:02:12:99:1b:
0e:4a:51:df:36:aa:07:3f:23:e0:87:2e:83:1a:f3:
9f:9b:bf:2f:04:45:a9:60:b7:d1:59:a0:13:1e:a5:
29:f1:d0:52:3a:31:16:1f:be:be:7a:cc:62:5f:60:
a5:71:a9:46:71:1a:a5:55:57:0e:cb:d7:45:63:50:
28:38:3e:64:87:44:6e:1f:1b:be:8d:ad:d4:68:c5:
36:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:53:83:DB:6B:7B:D6:F9:8D:F8:50:EB:07:09:AF:A9:FA:26:6B:BD
X509v3 Authority Key Identifier:
keyid:D3:C3:5B:C9:B7:F8:55:0B:E3:E4:67:C5:4A:9D:3A:66:E2:44:3B:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/LlOD22t71vmN-FDrBwmvqfoma70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.246.55.0/24
Signature Algorithm: sha256WithRSAEncryption
45:7d:39:f5:ed:fe:92:4e:88:07:18:b1:8f:35:b4:ac:5c:6e:
03:78:f4:70:9f:b5:f9:50:8c:aa:b1:50:55:97:b6:60:a4:96:
a3:a3:9b:e3:32:71:b4:dc:c7:b3:c8:1e:97:41:9f:87:19:8e:
ea:80:83:14:f9:a1:65:78:b2:e1:90:de:ee:c1:7f:6a:70:04:
2f:82:65:1b:f4:8b:ec:db:cd:b9:0c:d4:1b:55:cd:ba:9d:2a:
f4:c4:dc:2b:13:4f:2d:de:47:29:b4:be:53:65:70:eb:27:fd:
85:6e:64:a0:bb:e0:02:f1:18:ce:0e:66:74:47:31:75:c0:60:
78:9c:27:90:eb:76:6f:85:ee:b8:d2:89:08:1c:a4:2f:e0:2f:
9b:14:5a:e5:dd:2e:75:ec:a0:79:ed:23:66:b1:91:29:c2:5e:
dd:53:76:c3:78:27:41:2a:35:a1:9a:2d:7a:58:94:ca:bc:b6:
bb:bc:fc:4d:bc:bf:32:c9:87:67:44:89:07:28:04:65:d6:38:
d8:57:20:b6:9a:aa:59:98:56:2a:c9:e4:9a:86:7c:b1:0b:7e:
e8:7c:eb:99:78:31:53:f6:a6:06:d1:e7:c2:fd:c6:4d:82:5b:
67:39:fe:bc:c7:bc:00:27:7e:0a:85:dd:1b:7b:c1:ea:71:5b:
4b:59:35:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 29 09:20:38 2024 by rpki-client on console-fra.rpki-client.org